Author Archives: Max Lehmann - Page 49

Crypt888 Ransomware, also known as Mircop Ransomware, first surfaced in the middle of 2016 and our malware experts at anti-spyware-101.com saw it again in March, 2017. We cannot say that it is still attacking users; however, we have found that this threat is available as an open-source program on the dark net. This simply means that it is only a matter of time when new versions start to appear spreading on the web. Although this ransomware used to be able to cause proper devastation encrypting your most important files, not long after it emerged, malware hunters also came out a free decryption tool. This means that if you have infected your computer with this older version, chances are you can still decrypt your files. However, if new variants hit the web, we cannot guarantee this. This is why it is always a good idea to save a backup of your more important files. But before you start decrypting your files or transferring your clean backup, we advise you to remove Crypt888 Ransomware from your PC. If you would like to learn more about this once dangerous malware infection that may be revived, please continue reading. Read more »

Rastakhiz Ransomware is an underdeveloped infection that might make big waves sometime in the future. Even though some features of this infection do not work properly (at least not in the sample that we worked with), the application can still cripple your system by encrypting your files, so it should be taken seriously. If you have been infected with this program, please remove Rastakhiz Ransomware immediately. It may not be that easy to restore your files because there is no public decryption tool at the moment, but computer security experts maintain that there are ways to get some of your files back. Read more »

Bancocrypt Ransomware is another name of Jhash Ransomware. Its primary goal is to help cyber criminals to obtain money from users, so the first activity it performs on affected computers is the encryption of victims’ personal files (for instance, pictures, downloads, games, videos, and much more). The encryption of victims’ personal data is nothing new – the majority of ransomware infections created using the source code of Hidden-Tear, open-source ransomware, lock users’ data right after slithering onto their computers. We suspect that your files have already been locked too if you are reading this article. There are hundreds of crypto-threats that could have done that, but you can be sure that Bancocrypt Ransomware is the one responsible for encrypting your data if these files you can no longer open have a new extension appended to them. Specifically speaking, this infection uses the .locky extension to mark those locked files. You will not remove this extension easily. In fact, only a decryptor can do that. You will be offered to purchase it, but you should not do that because cyber criminals behind this threat might not even give it to you. There might be no other ways to decrypt data for free, but you can always restore it from a backup you have. You should not rush to delete these encrypted files from your system even if you have never backed up your data too because free decryption software might be developed someday. Read more »

Cyber Police Ransomware shows a message claiming it enciphered user’s data because of his illegal activities. Our researchers at Anti-spyware-101.com say it is nothing more than a harmful program developed to extort money from inexperienced users. Consequently, if you come across it, we advise you to consider all options carefully. The malicious program’s creators could promise to deliver decryption tools once you pay the requested ransom, but there are no guarantees these hackers will keep up with such promises. To put it simply, there is a chance you might lose not just your files, but also some of your money. For users who would like to avoid such a scenario, we recommend erasing Cyber Police Ransomware with the instructions located below this text. As for those who wish to learn more about the malware first; we encourage reading the rest of the article. Read more »