Anti-spyware 101

Ransomware programs are extremely popular nowadays as they are used by cyber crooks to make illegal profits. One such application goes by the name of PetrWrap Ransomware. Malware experts working at our internal labs have discovered that this program is roaming the web nowadays; therefore, being aware of its existence is critical if you consider yourself a security-conscious user. Like any other program of this category, it can lock your data without any warning and ask for a ransom. It should be more than obvious that such functionality of this malware could have devastating outcomes. To avoid it, you must take preventative steps that we present within this article. We also present further information about the overall malicious functionality of PetrWrap Ransomware. Below you will also find a comprehensive removal guide that you should use to terminate this malware once and for all. Read more »

Zinocrypt Ransomware is a brand new malicious application detected by our malware analysts in March, 2017. Although it is a new computer infection, it acts exactly like other ransomware infections seeking to obtain money from users. First of all, after the successful infiltration on the computer, it searches for files (PDF documents, archives, Microsoft Office documents, pictures, media files, etc.) and then encrypts them all. Second, it drops a ransom note on those computers it affects. It becomes clear after reading this ransom note that Zinocrypt Ransomware has been programmed to lock those files users value the most because cyber criminals need users’ money. Do not give them anything even though you are told that “there are no tools online that will allow you to decode your files for free.” Keep in mind that the ransomware infection still needs to be erased from your computer if you pay money for the decryption tool because it will not be closed and deleted by cyber criminals when they receive your money. Even though Zinocrypt Ransomware should not create any new files on the computer, the malicious file responsible for launching this computer infection on your system has to be found and erased. On top of that, this infection might create a new process in the Task Manager – it needs to be killed too. Take action only after you read the ransomware description. Read more »

Vortex Ransomware is a Polish-made computer infection designed to encrypt your personal files and then offer you to buy the decryption software needed to decrypt them. The cybercriminals behind this malware want you to pay a hefty sum of money for the decryption software which might not be worth your files. Therefore, you should consider removing this ransomware as soon as possible because if it were to enter your PC, then it will go to work immediately. The only way to prevent it from entering your PC is installing an anti-malware program. To find out more about this malicious application, we invite you to read this whole article. Read more »

The name of the malicious Revenge Ransomware is truly mysterious. Why does the creator of this threat feel the need to seek revenge and who is it targeted at? It is unlikely that answers to these questions will be found, but what Anti-Spyware-101.com researchers know is that this infection is incredibly malicious, and your files might be put at serious risk if it manages to slither into your operating system. If it slithers in, this threat can encrypt the most personal files – such as your photos and media files – just to make you pay attention to the demands. Although you would probably pay attention to the threat even if it encrypted less important files, it is unlikely that you would choose to follow the instructions just to get them back. In many cases, files can be recovered by downloading them anew, but that is not the case with personal files. Unfortunately, it is not possible to decrypt files by deleting Revenge Ransomware, which is the greatest obstacle that the victims are likely to face. Continue reading to learn more about the threat and its removal. Read more »

There can be two slightly different versions of avastvirusinfo@yandex.com Ransomware. Apparently one of them displays ransom notes written both in English and Russian languages, while the other one shows a short message with less information and only in English. Both variants can damage a broad range of different file types, but it seems the version showing longer texts can encipher twice as many file types as the other variant. None of the malicious application’s displayed ransom notes says how much the decryption tool costs. Probably, this way the malware’s creators are trying to make you contact them so they would have more chances to convince you to pay the ransom. Of course, we advise against paying it since there are no reassurances they will send you the decryption tools. Lastly, we would like to stress that avastvirusinfo@yandex.com Ransomware is a dangerous threat and it would be safer to remove it from the computer; you can do so manually if you follow the instructions placed below this report. Read more »

Cryptolocker 1.0.0 Ransomware has nothing in common with ransomware belonging to the Cryptolocker family. It seems that it has just borrowed the name. Of course, it does not mean that it is not harmful at all. As specialists working at anti-spyware-101.com have observed, it does not encrypt any files at the time of writing. It might be using the scare tactics only, it might not be finished yet, or it could have been developed for the purpose of testing only. Either way, keeping Cryptolocker 1.0.0 Ransomware on the system is not recommended because it might be updated soon and then really encrypt your personal files, i.e. documents, images, and media files, judging from the specific filename extensions it searches for once it successfully enters the system. It should be noted that Cryptolocker 1.0.0 Ransomware is, most probably, of a Turkish origin because of the language it uses, but, without a doubt, users who live on the other side of the world can encounter this ransomware infection too. If you are reading this article because you have detected this infection on your computer, go to get rid of it as soon as possible. Read more »