Author Archives: Max Lehmann - Page 72

If your operating system was not updated in the past months, WanaCrypt0r Ransomware could slither in without any warning. Although the vulnerability patch that is necessary to prevent this infection from entering the computer has been created in March 2017, many users have failed to install it, which is the main reason the malicious ransomware is spreading. Once it slithers in, it demands a ransom of $300 to be paid to one of three Bitcoin Addresses, which include 115p7UMMngoj1pMvkpHijcRdfJNXj6LrLn, 12t9YDPgwueZ9NyMgw519p7AA8isjr6SMw, and 13AM4VW2dhxYgXeQepoHkHSQuy6NgaEb94 (at the time of research, they had collected a staggering sum of $65,970.35, or 38.89 BTC). You are given 3 days to make a move, and that is a long period to think things through. The bad news is that the cyber crooks who have created this ransomware are not reliable, and so it would be naive to expect them to provide their victims with appropriate decryption keys in return for ransom payments. Anti-Spyware-101.com research team warns that it is most likely that your files are locked permanently, and there is nothing you can do to decrypt them. Despite that, you MUST remove WanaCrypt0r Ransomware. Read more »

Fatboy Ransomware, also known as PyCL Ransomware, is a new RaaS ransomware discovered by malware analysts. It has fallen into the group of RaaS (Ransomware as a Service) ransomware because it is available for download somewhere on the DarkNet, and those people with bad intentions can easily personalize it, for example, decide upon a size of a ransom. Also, they are the ones responsible for distributing this ransomware-type infection too. At the time of writing, the infection rate of Fatboy Ransomware is quite low. Additionally, it seems that its C&C server is down and, in consequence, the ransomware infection cannot reach it. Because of this, at present, this threat does not encrypt any files, and there is no information about the amount of money or the Bitcoin address (it is necessary to know it to transfer money) provided to users. Unfortunately, we cannot guarantee that it is the end of the campaign. Specialists at anti-spyware-101.com say that this threat might steer itself in any direction, i.e. it might never revive or start working again in full swing soon. We hope that you are reading this article not because your PC is infected with a properly-working version of Fatboy Ransomware. If our worst fear has become a reality, i.e. you have discovered a ransomware infection on your computer, delete it without the slightest hesitation even if your files have been locked. Read more »

Perhaps Nm4 Ransomware is not as dangerous as WannaCry Ransomware, but it is still one of the many malicious applications out there that want to rip you off. Also, it just proves how dire the situation is right now, and how “popular” ransomware programs are at the moment.

Unfortunately, there is no public tool at the moment that would help you restore the files affected by this infection, so the best way to solve this problem would be retrieving your files from a file backup. As for the ransomware removal, it is not that hard to delete Nm4 Ransomware from your PC. Read more »

The name Crypto-Blocker Ransomware might give you the impression that it is a serious computer infection, but it is not, actually. If your PC has become infected with it, you can go right ahead and remove it without hesitation. It was designed to encrypt your personal files and demand that you pay a ransom for a decryption key. However, we have received information that there is a free decryption tool that is capable of dealing with this particular ransomware. To find out more about this rather dangerous application, we invite you to read this whole article. Read more »

RSAUtil Ransomware is a severe threat that can be responsible for rendering most of your files unusable. Once this beast manages to infiltrate your system, it can initiate the attack behind your back and encrypt your photos, videos, documents, archives, and even your .exe files to take them hostage. The main idea behind it is obviously extorting money from you for the decryption of your files. When it comes to ransomware infections it is important to understand that even if you have a backup copy of your most important files on a removable drive, it has to be always unplugged when not in use. Such a ransomware program can attack all mapped drives and unmapped network shares as well. So, if your removable drive is connected, you could lose all your files on it to this malicious attack. Also, some ransomware infections are capable of logging into your cloud storage account and destroy your files there. Although you are offered a way out of this vicious threat by paying a ransom fee to these criminals, we suggest that you do not consider it as an option. There is a good chance that these crooks would send more infections onto your computer disguised as a decryption tool or key. We recommend that you remove RSAUtil Ransomware immediately so that you can start recovering your files if you have a backup. Read more »