Author Archives: Lisa Blanc - Page 84

RobinHood Ransomware is a malicious computer infection that wants to rip off computer users in Saudi Arabia. The reason it calls itself a “Robin Hood” ransomware is that the program makes it seem as though it embarks on a sacred mission to help the Yemeni people, and make Saudi Arabia pay for its supposed role in the war. However, such means of “retribution” are highly questionable, as it is obvious that the program has been created by cyber criminals. The criminals have been intercepted, and you need to remove RobinHood Ransomware from your system if you happen to have this infection on-board. Read more »

Oopslocker Ransomware is a highly dangerous computer infection that uses a unique AES encryption key to encrypt your files. The key is subsequently encrypted with an RSA encryption algorithm. The developer of this ransomware wants you to pay 0.1 BTC for a decryption key to recover your files as the encrypted files are purposefully corrupted. This program is set to encrypt most of the files on your PC to compel you to pay the ransom. Our malware researchers have tested this application, so if you want to find out how it works, how it is disseminated, and how you can remove it, please continue reading this article. Read more »

If Invincible Ransomware has invaded your computer, you might believe that your personal files are encrypted. That is not the case. At least, that was not the case when Anti-Spyware-101.com research team was testing and analyzing this infection. The research has revealed that the threat could potentially rewrite MBR to display a screen-locking window entitled “Ransomware InVincible” to represent the bogus ransom demands. This is how the infamous Petya Ransomware operates as well, and it looks like the creator of the ransomware we are analyzing has decided to replicate some features of well-known infections. Another infection that the ransomware has similarities with is the infamous WanaCry Ransomware (also known as Wana Decrypt0r Ransomware). The similarities can be discovered in the ransom notes that are used by the threats. On the left side, you are introduced to timers. At the top, you are greeted with the same message: “Ooops, your files have been encrypted!” At the bottom, you are shown almost identical payment details; except that the wannabe infection asks only 50 USD. Regardless of the sum, you should not pay it. You should delete Invincible Ransomware. Read more »

If your personal files were renamed, and a suspicious “.ZAYKA” extension was attached to them, the malicious Zayka Ransomware has encrypted your files. This malicious threat is very clandestine, and you are most likely to let it in yourself unknowingly. In most cases, this infection is found spread via spam emails, and so if you receive any, be very careful about the files you open or the links you click on. Note that malicious spam emails can be very convincing, and so you have to be extra vigilant. Of course, other security backdoors could be used as well, and so you have to be careful every step of the way when online. Anti-malware software can help your keep malicious threats away; however, it cannot perform miracles once malicious infections are in. Although it is strongly recommended by Anti-Spyware-101.com researchers that you install anti-malware software to have Zayka Ransomware deleted, this software, unfortunately, will not decrypt your files. In fact, at the moment, there is no way to decrypt them, and you might end up losing them altogether. Read more »