Author Archives: Max Lehmann - Page 83

Pabluk Locker Ransomware is a seemingly dangerous malware infection that seems to mostly target Polish computer users. Generally, ransomware programs are considered to be one of the most dangerous threats that can hit your computer; however, this particular infection is similar to Ransoc Screenlocker and TowerWeb Ransomware in the sense that it only locks your screen. In other words, this malicious program does not actually encrypt your important files to demand a ransom fee for the decryption key or software. Instead, these criminals ask money for a code that you could use to unlock your computer; well, if you were to get one at all for your money. Our malware specialists at Anti-Spyware-101.com say that you should not even bother to think about paying this fee this time since we have found a way to remove Pabluk Locker Ransomware from your PC without any collateral damage. Read more »

XAMPP Ransomware is a new malware threat on the web that means real danger for those who work with PHP, such as software developers. As a matter of fact, this ransomware may not be a final version since it only seems to attack one directory specific to PHP development and encrypts a few extensions only. Of course, this could be a terrible loss for you if you are a programmer and do not have a backup on a removable drive. Another strange thing about this Italian language malware program is that it only demands a few euros in return for the decryption key. In any case, we do not advise you to pay up because there is no guarantee that you would get this key and that you could recover your files. But, if you want to use your computer without security threats, we suggest that you act now and remove XAMPP Ransomware ASAP. Read more »

Erebus 2017 Ransomware is a new malicious application encrypting files. Some specialists say that it is a new updated version of Erebus Ransomware, which was spotted some time ago by malware analysts, but it is more likely that it belongs to another creator. Even if it turns out to be true that it is a new version of Erebus Ransomware, Erebus 2017 Ransomware does not share many similarities with this old version. Of course, just like all threats that fall into the category of ransomware, it also encrypts users’ files. Judging from a long list of filename extensions it targets, users could no longer access Word documents, pictures, text files, slides, and other valuable files after this threat performs the file encryption process. Even though this file-encrypting threat does not have an extension it appends to all encrypted files, original extensions of the encrypted data are still changed using the ROT-23 method. It is a simple letter substitution cipher, so, for example, the icon_128.sqj file receives a new extension the icon_128.png. Ransomware infections rarely use this method to change original extensions of those files they encrypt, which makes Erebus 2017 Ransomware quite a unique ransomware infection. Of course, it does not mean that this file-encrypting threat is not harmful even though it is quite new and unique, so your top priority now should be to delete this infection fully from the system. Read more »

Uncrypte Ransomware is a malicious program that not user should have active on their personal computer. It has been classified as a ransomware program due to its intrusive functionality. Just like any other malicious program of this category, it is fully capable of locking your personal files without any warning or authorization. It is quite obvious that such functionality of can have devastating outcomes. To understand how this devious application works in detail, make sure to read the rest of this article as we present comprehensive information discovered by our malware experts during their in-depth research. We also present a few precautionary steps since users infect their computer with this ransomware because they lack basic understanding about the importance of virtual security. Finally, we present a detailed removal guide that you should use to delete Uncrypte Ransomware if it is ever found active on your personal computer. Read more »

Digisom Ransomware is a vicious infection that encrypts files and demands a payment in return of their release. In a sense, this infection takes your files hostage, and the worst part is that you might have enabled this yourself. The ransomware is most likely to spread via spam emails (just like Padcrypt 3 Ransomware, Polski Ransomware, and others), in which case, you have opened and executed the infection yourself. According to Anti-Spyware-101.com malware analysts, cyber crooks are very inventive, and they can create highly misleading spam email attacks. For example, the launcher could be introduced to you as a document attached to an email from your bank inquiring to check your latest statement. One click is all that it takes to bring the ransomware to life. If the infection is executed successfully, it immediately encrypts your files. It adds the “7xV.x” extension to their names, which should make it easier for you to spot these files. Unfortunately, you cannot resolve the issue by removing Digisom Ransomware. Despite this, eliminating this infection is crucial. Read more »