Author Archives: Max Lehmann - Page 41

If you find ".leenapidx@snakebite.com.hrhr File Extension" Ransomware on your computer, it is quite sure that all your important files have been encrypted. Our malware experts at anti-spyware-101.com say that there is little known about this vicious program at this stage, but it seems to be a new version of Yyto Ransomware. The latter emerged about a year ago. You have to contact your attackers via e-mail if you want to get the decryption key, but we do not advise you to do so because you have no guarantee that you will get anything in return for your money. We have no information yet about the amount of the ransom fee these cyber criminals demand, but we would never encourage anyone to choose this option anyway. In fact, we recommend that you remove ".leenapidx@snakebite.com.hrhr File Extension" Ransomware from your computer immediately. Read more »

Ransomware is now becoming available to everyone, and latest detection of a ransomware-as-a-Service (RaaS) platform named Datakeeper only proves that this type of malware is not going to move away from the dark market. The Datakeeper ransomware, also spelt Data Keeper, is yet another tool for hackers and skiddies interested in taking users' files hostage and demanding a release fee. The Datakeeper malware is the third RaaS platform enabling schemers to distribute malware after Saturn and GandCrab.

Different strains based on the Datakeeper RaaS has already been spotted in the wild, causing considerable inconveniences to many computer users, including individual users and businesses alike. Unsuspecting computer users not aware of this type of threat can easily fall victim to the strains of the Datakeeper ransomware because this RaaS does not add any file extensions to affected files, thereby causing confusion when the victim tries to open the file to find that it is corrupted. It is important not to panic but remove the Datakeeper ransomware straight away without paying attention to the ransomware's demand for money. Read more »

Annabelle Ransomware is a new ransomware-type infection recently discovered by specialists working at anti-spyware-101.com. It uses a picture of Annabelle, the character from the horror film, to scare its victims even more, so it has been named Annabelle Ransomware. Unfortunately, research has shown that this infection is sophisticated malware, meaning that it will bring you many problems if it ever successfully infiltrates your computer. Unlike simpler ransomware infections, it not only locks files it finds stored on victims’ computers, but also modifies the MBR (Master Boot Record) – this happens if the user restarts the computer twice. In addition, it modifies the system registry. As a consequence, users see a picture with a text each time they turn on their computers and thus cannot use them normally. Have you encountered Annabelle Ransomware? If the answer to this question is “yes,” you must erase it from your computer right away. It will try to convince you not to remove it and, instead, go to make a payment by saying that your system will be broken if you act in the opposite way, but it is not true. Most likely, it has already modified the MBR on your system, and we are sure it will not fix it even if you transfer the required amount of money to cyber criminals behind it, so you will not lose anything by getting rid of it mercilessly. The Annabelle Ransomware removal will not be a piece of cake because it blocks Task Manager, Explorer, adds its entry in the system registry, and applies changes to the MBR. Luckily, it does not mean that users cannot erase this threat from their computers. Continue reading to find more about the removal of this nasty ransomware infection. Read more »

If you find out that Thanatos Ransomware has managed to slither onto your computer, you may have to say goodbye to all your important files. This ransomware can encrypt your files and demand a ransom fee from you so that you can get the decryption key. Our malware specialists at anti-spyware-101.com say that based on the amount of the ransom as well as the e-mail address used, these cyber criminals might come from Russia even though the name of this threat is Greek for "death." Of course, all this could be a diversion so we cannot really confirm this. It seems that your encrypted files might be decryptable and you can find information about it on the web. However, if you are not an advanced computer user, we do not advise you to try to search for such information or free decryption toll, either, because it is not without risk. Hopefully, you have a backup of your important files so that you can use clean files to recover them. If not, this may be a good time to start saving a backup if you do not want to lose files again. We do not advise you to pay the ransom. We strongly recommend that you remove Thanatos Ransomware from your computer immediately. Read more »