Threats - Page 134 category archyve:

Atchbo Ransomware is one scary infection because when it slithers in it silently encrypts all of your personal files. Once that is done, the threat also locks the screen to make it impossible for you to terminate malicious files, remove the infection, or even see which files were corrupted. While there are many threats that pose as file-encryptors – they often lock screens just so that users could not see that files are safe – this is not one of them. This ransomware is real, and it was created for the sole purpose of forcing you into paying the ransom. Although this ransom is not very big (between 40-60 USD, depending on the conversion rates), paying it is not what Anti-Spyware-101.com researchers would ever recommend because your input is unlikely to help you decrypt your personal files. All victims, including those who have their personal files backed up and those who might end up losing their files, must delete Atchbo Ransomware. The operation might be lengthy and complicated, but it must be performed right now. Read more »

LockOn Ransomware is a typical ransomware infection that has been developed for money extortion. Luckily, it is not distributed actively yet because it is still in development, so the chances are not very high that you will ever find this infection on your computer. If you are reading this article not out of curiosity, i.e., LockOn Ransomware has already infiltrated your computer, you should go to delete this infection right away. The first symptom showing that this threat has been installed on the system is a window placed over Desktop. Also, if you have a “test” folder with files located in %HOMEDRIVE%\Users\Exploits\Desktop, you will find them all encrypted. Currently, this infection affects files located in this directory only, but, of course, it might be updated one day, so its behavior might change. No matter which version of this ransomware infection you find on your computer, you must delete it as soon as possible. The version specialists at anti-spyware-101.com have analyzed is not sophisticated at all, so it should not be hard to remove this malicious application. You will find more about its removal in the second half of this report. Read more »

According to our cybersecurity experts, Anubi Ransomware is a recently released ransomware-type computer infection that can encrypt your files and then offer you to purchase a decryption tool/key to get them back. They even offer you to send three encrypted files, and they send you them back decrypted as proof that they can decrypt all of your files. However, your fill might not be worth the money, and there is no guarantee that the cybercrooks will keep their word. Therefore, we recommend that you remove this ransomware. For more details on this malicious program, please read this whole article. Read more »

Asasin Ransomware is an infection that was unleashed to take your money. This threat is not new, and, in fact, it is a new variant of the well-known Locky Ransomware. This infection is one of the most prevalent threats nowadays, and it has been that way since it first emerged in early 2016. All versions of this malware are named after the extensions that are attached to the encrypted files. Some of the extensions include .zepto, .odin, .thor, .aesir, and .osiris. If you discover that an unfamiliar extension was attached to your personal file (e.g., a photo or a document), it is most likely that a malicious infection has corrupted it. The good news is – if you can consider it that – you do not need to hunt for ransomware because it exposes itself once it is done encrypting the files. It displays a ransom message in one way or another, and if it did not do that, the creator of the threat could not coerce you into paying a ransom for some alleged decryption tool or key. So, have you been introduced to the ransom demands? What should you do about them? Should you pay attention to them or should you remove Asasin Ransomware right away? Continue reading to find out. Read more »

A new malicious application X1881 Ransomware, often referred to as crypto malware, has been detected. It has turned out that it is not exactly a completely new threat. Malware researchers have proof that it is a new version of CryptoMix Ransomware (you can read about it on your website). This new version is as dangerous as the previous one, so we are sure you will find a bunch of your files encrypted if it ever slithers onto your computer. Ransomware infections do not encrypt users’ files just to make fun of them. Malicious software developers use these infections to obtain money from ordinary users easier. Although X1881 Ransomware does not ask users to make a payment right away, we are sure you will be told when you write an email to cyber criminals that the only way to decrypt those locked files is to pay a certain amount of money to them. Needless to say, sending money to malware developers is the worst users can do because the chances are high that their files will stay locked. It does not mean that it is impossible to unlock the encrypted data without the special decryptor cyber criminals have – you could restore your files from a backup. The restoration of files should only take place when X1881 Ransomware is removed completely because it can launch automatically with the Windows OS due to the entry it creates in the Run registry key, meaning that you could not disable it and, as a consequence, it will strike again and lock those decrypted files. Read more »