Anti-spyware 101

Herbst Ransomware (Herbst meaning autumn in German) is a malicious program that you must remove as soon as possible. However, if it has already entered your PC, then it has probably already encrypted your files because that is what this program is set to do. Currently, this ransomware is only a beta, and its full release should appear very soon. It is important to note that it has certain functions that are not active. It does not send any information to its Command and Control (C&C) server and, therefore, you will not receive the decryption key if you pay the ransom. In this short description, we are going to overview where it comes from, how it works, and how you can get rid of it. Read more »

The name JuicyLemon Ransomware derives from an email address associated with this infection. Once it enters the system, it encrypts photos, documents, and other personal files that are of great value to users. If the encryption is executed successfully, a TXT file is created on the Desktop. This file has a random name (e.g., I0ZD0N3NPVY3LAPJT.txt), and it is created to introduce you to support@juicylemon.biz. The file also includes an additional email address (provectus@protonmail.com) and an address to enable Bitmessage communication. You are expected to connect to the creator of the ransomware via these email addresses or Bitmessage to receive further instructions. Anti-Spyware-101.com researchers warn that contacting cyber criminals is risky, and you should do so only if you want to pay the ransom, which, of course, it not something we recommend. What we recommend is deleting JuicyLemon Ransomware, and you can learn more about this via our report. Read more »

We are sure that you will immediately understand that Cryp1 Ransomware has entered your system if this really happens. First of all, you will notice that all your personal files contain the new filename extension .crypt1. Secondly, your Desktop will be covered by a screen-sized message in the black background, and you will not be able to remove it. Cryp1 Ransomware is a new version of the CryptXXX Ransomware, which used to add the .crypt extension to files, so it is not surprising why they both act in a similar manner. Even though both Cryp1 Ransomware and CryptXXX Ransomware are very similar computer infections, there is something unique about Cryp1 Ransomware. We are going to focus on the way it acts in this report. Also, you will find important information regarding the deletion of the threat here too. Read more »

Invisible Empire Ransomware is a malicious application set to enter your computer using clandestine methods. Nevertheless, you can remove it without hesitation because the encryption method it uses to encrypt the files on your computer has already been cracked. Therefore, you should not waste time because as long as this infection is active, it will delete three files every hour. In short, this infection was designed with the intention of extorting money from you, and you have an opportunity to deny its developers the means to get it. Read more »