Anti-spyware 101

At the time of research, Hells Ransomware was demanding a ransom of 350 USD to be paid in Bitcoins. The ransom note created to support this malware was ordering to transfer this large sum to a special Bitcoin Wallet, 1Hp8VBKehCPBvArm6VRUWzPCte3EgdjYiY. According to the note, that was the only way to get files back. Unfortunately, this malicious ransomware could encrypt files, and, using that, it could push victims into paying the ransom. Though the infection did not work when our research team tested it, there is a possibility that it will be upgraded in the near future. Since the status of the infection is undetermined, Anti-Spyware-101.com researchers advise looking at your files if any ransom payment demands are made. In the best case scenario, you discover that your files are not corrupted, and then you can delete Hells Ransomware without further delay. In the worst case scenario, you realize that your files were corrupted and that you cannot do anything to recover them. Read more »

The entrance of Explorer Ransomware, a nasty computer infection, might be the reason you can no longer open such files as images, documents, music, and movies. Actually, there is no doubt that this infection is active on your system if these files you cannot access have a new extension .explorer appended next to their original extensions. Most probably, this infection has entered your computer because you have opened a malicious attachment from a spam email accidentally or willingly. No matter how this has happened, you are not allowed to keep this ransomware infection active on your system because you might launch this threat again accidentally and get even more personal files locked. Other malicious applications might slither onto your computer easier as well if there is already malware inside the system. Ransomware infections do not have uninstallers, so victims usually have to put some effort into their removal. Do not worry if you are not very experienced in malware removal because you will find detailed information regarding the Explorer Ransomware removal provided further in this report. Read more »

Needless to say, Hello Ransomware is not a welcomed infection. In fact, if it finds its way into your operating system, you will want to get rid of it as soon as possible. Unfortunately, in most cases, users realize that this infection is in only after it encrypts files and demands a ransom in return of a decryptor. As you might know already, file-encrypting ransomware is extremely malicious, and it appears that most victims end up losing their files. The main goal behind this kind of malware is to make money, and the creators of these infections push victims to pay ransoms. Decrypting personal files is not a goal that these infections have, and so users are usually left without the thing – whether it is a decryptor, a program, or a key – that was promised. Luckily, there is no need to panic because a tool that can decrypt your files should exist. Keep reading to learn more about this tool, the overall activity of the ransomware, and, of course, its removal. If you are here just to delete Hello Ransomware, scroll to the guide below. Read more »

Storm Ransomware is a newly-detected ransomware infection that might become a serious threat to your files. Although it does not encrypt files at the time of writing, which suggests that it does not work properly or is still in development, it does not mean that it cannot be fixed one day by malicious software developers. Needless to say, you must eliminate the ransomware infection from your system no matter you encounter a fully working version encrypting files and demanding a ransom or you detect an unfinished/corrupted version of this infection. Specialists at anti-spyware-101.com do not think that this threat is very sophisticated, so, consequently, they are 99% sure that users could erase this threat from their systems manually. Of course, it does not mean that you will not find any information about the removal of this ransomware infection in this article. The last paragraph focuses on the removal of this threat, so you should read this report till the very end if you have no idea what your next move should be. Read more »

A new ransomware infection, a variant of Crypt888 has been recently detected by malware researchers. It has received the name Zuahahhah Ransomware. It has been classified as ransomware not without reason, of course. Research conducted by specialists working at anti-spyware-101.com has clearly shown that it encrypts files. Although it locks files like all other ransomware infections do, it is impossible to purchase the decryption tool at the time of writing. This suggests that cyber criminals behind this ransomware infection do not seek to obtain money from victims at the time of writing. Of course, everything might change soon. Do not worry too much if you encounter the same version analyzed by our malware researchers, i.e. the version that does not offer to purchase a decryptor and does not contain any information about the decryption of files because a free decryption tool exists and can be downloaded from the web. You must, of course, delete the ransomware infection before you use the free decryptor because it might be encrypted and thus become useless. The last paragraph of this article focuses on the removal of the ransomware infection. Read more »