Malware Categories: Ransomware

Nooa is file-locking ransomware that attacks Windows PCs and spreads with pirated and fake programs and files. It might spread together with other malicious programs. Nooa encrypts files, making them impossible to open. Then asks for money to fix them. About Nooa ransomware: Threat type Ransomware, trojan. How Nooa infects computers It spreads on malicious, unreliable … Continued

NoobCrypt ransomware (a Romanian one) bears its name from its cheeky behavior. If a victim happens to use a wrong decryption key, this cryptomalware calls him/her a noob. NoobCrypt ransomware virus damages the victim’s data using asymmetric encryption algorithm. This cryptography brings into play two keys: one for encryption and one for decryption. The latter … Continued

Noos is a ransomware infection. If Noos infects your computer, it locks your files and then demands money from you — you’re told that paying is the only way to get the files back. Noos is part of the Djvu ransomware family. Noos characteristics This ransomware is named after the extension that is used to … Continued

Norvas is a file-locking virus that holds people’s files for a ransom of hundreds of dollars. If you noticed that your files have been renamed by appending the “.norvas” extension and that even if you rename them, they still don’t work, you must have been hit with the Norvas cryptovirus. Despite the message from Norvas … Continued

Nosu encrypts user files and then asks for a ransom. Encrypted files are unopenable and unusable – pictures don’t open, text files are filled with random characters, and half of the archived files get corrupted. Nosu’s makers, the extortionists, ask for money in exchange for fixing the files, but not everyone can afford to throw … Continued

Nppp is a ransomware virus that’s made to extort people of their money. Nppp encrypts your files and then asks you to pay from $490 to $980 to get your files back. Files locked by Nppp have a second extension “.nppp” in their names and they have their internal data scrambled to the point of … Continued

Npsg is a Windows file-encrypting malware that was created by cybercriminals for an extortion scheme. Npsg is a new incarnation of Djvu ransomware, a globe-spanning malware family. It locks your files and installs spyware, so it’s important to clean your computer as soon as possible. As for restoring the locked files, there is no easy … Continued

Npsk is a new version of Djvu ransomware. It comes from pirating sites, infects your computer with a spyware trojan, and then locks your files, giving them a second extension “.npsk”. And repairing those files might not even be possible (though some options do exist). Dealing with an Npsk infection can be frustrating if you … Continued

Nqix is a new cryptovirus that is based on Dharma/CrySiS, a brand of that isn’t decryptable at the moment. This is a serious virus that has cost many businesses and other victims either their files, a few thousand dollars, or both. Nqix is similar to Harma, NWA, Crysis, and others. The behavior, distribution, the ransom … Continued

NSA virus (or NSA Internet Surveillance Program virus) is a ransomware program that was designed by cyber criminals in order to rip off random computer users. It’s a malware that blocks access to all programs of infected computers, accuses users of violating the United States law and demands paying a fine for that. NSA virus … Continued

‘You got p0wned by NTK’ is the statement, witnessed by victims of NTK ransomware. Many samples from this malware category incorporate the strategy of locking users’ systems from access, but certainly not all of them. NTK virus is one of those infections that do keep the entire system as a hostage. This repression cannot be … Continued

Ntuseg is a file-encrypting virus that works on Windows computers. It’s recent and it’s created to target individual users. The victims have their files held for a ransom of $490 or $980 and often they lose their data even if they pay the extortion. Ransomware is one of the scariest viruses around and they use … Continued

The new Nuksus ransomware is extremely dangerous to anyone who doesn’t have data backups. File-locking ransomware like Nuksus can lock your files and the chances of getting them back are very low. The “ransom” part of this malware means that real money is being demanded from the victims of this virus for their files being restored. … Continued

A new variant of a crypto-ransomware virus has caught our attention. At first, people though that this infection was somehow associated with the Cerber virus. However, some suggest that this assumption is wrong and that this is a completely new encryptor. We are not doing to go great extends to prove which side is most … Continued

Nusar is a computer virus that affects Windows PCs and works like a cybernetic extortion scam. It corrupts people’s files and promises to return them back to normal if the victim just pays a few hundred dollars to cybercriminals. However you decide to deal with Nusar, you should be aware of the options available to … Continued

Nusm is file-encrypting ransomware. Besides breaking files, it might disable programs, block websites, and install additional malware. It can be very harmful. It’s important to delete Nusm ransomware as quickly as possible, but you might also need to solve the problem of Nusm breaking files (documents, media, and others). There is no easy way to restore the … Continued

Nvetud cryptovirus has been noticed by ransomware researchers recently. This infection is familiar to them — it’s a new incarnation of the STOP virus — and is not to be taken lightly. Nvetud corrupts most of the data on the computer, potentially costing the victims all of their personal files and even infecting their computer with … Continued

NWA ransomware is a malware that stems from another cryptovirus Dharma. Despite not being the original virus, NWA is definitely a threat to be careful of because of all the damage it causes to your files after the infection. Just like the predecessors and other ransomware, NWA virus infection manifests as in encrypted data marked … Continued

Nypd is Djvu-type ransomware that infects computers through unreliable downloads. It installs spyware and corrupts files. Nypd is meant to make money by extorting their victims of hundreds of dollars each. People look for alternative ways to get their files back, but though there are a few options, none of them are certain to repair … Continued

Ocelot Locker Ransomware is a very dangerous virus that can cause you a lot of cyber security problems. It is a brand new virus – cyber security experts have noticed it on the 9th of January, 2017. Moreover, it is not like other ransomware infections because it has no advanced features or encryption engine. If … Continued

Seemingly clean-handed Word document is used to hide ODCODC Trojan ransomware. “Кодирование успешно завершено!” will begin the message, describing this urgent situation where a far-reaching malware infection has encrypted users’ files and requests a ransom for their recovery. However, there is a small glimmer of hope as this ransomware is noticed not to touch in … Continued

ODIN Ransomware is another variant of Locky ransomware that is infecting computers for months now. The later virus has a great success and it has been infecting computers since February 2016. It seems that cyber criminals do not want to stop here, so there are releasing new version of it. The name of the new … Continued

OhNo! ransomware virus was detected yesterday and scans have labeled it as Trojan.Ransom. From the first glance, security experts assumed latter variant to still be in development mode, just like CryForMe is. This statement also meant that file-encryption was not fully completed and victims did not have to fear for their files to become unavailable … Continued

Okean- 1955 (or [email protected]) ransomware is a member of Russian ransomware family, known as Xtbl family of ransomware. This new ransomware variant is specifically designed for attacking companies, which use SQL server databases. Okean- 1955 ransomware virus has been reported to have damaged the data of more than 10,000 customers and 15 departments – three … Continued

Omerta ransomware might be detrimental to your system. This ransomware virus is looking to encrypt your personal files and then demand a ransom to be paid in order to provide you with the decryptor. If you are not familiar with term ransomware yet, it’s a type of virus that employs specific cryptography to change the … Continued

Omfl is ransomware that breaks files by encrypting them. It also appends “.omfl” to the names of the encrypted files. These files are partially or fully broken. Your documents, photos, music, movies – any and all files are in danger of being broken by Omfl. Omfl is used by cybercriminals to make money. It asks … Continued

This ransomware right here is really dangerous and a little bit different from other ransomware infections we have discovered lately. While targeted mostly against companies and institutions in Japan, Oni can be used either as a ransomware or a wiper. Even though wipers are not really common nowadays, we have recorded a second wiper in … Continued

Onyx virus is a crypto-ransomware with a peculiar mixture of features. It is named after a mineral, displays a ransom note in Georgian language and also manages to slip in one detail for animation fans. No face is one of the creepy and wicked characters in the adaptation of “Spirited Away”. Despite being vicious, he … Continued

Oonn is a file extension used by file-corrupting extortion malware. Files being renamed to have Oonn as their extension is a sign that ransomware infected the computer. Most of the files that got the Oonn extension are corrupted and probably gone for good. But that doesn’t mean that the situation is hopeless. In addition, it’s important … Continued

OopsLocker ransomware virus is an infection from an unknown hacker that named the payload rather clearly: ransom.exe. An .oops extension had already been spotted in the wild on January, when Marlboro crypto-virus emerged. Relation between these two variant is yet to be confirmed, if ever. It could be that completely separate group or individual randomly … Continued

The beginning of September 2018 has already brought another HiddenTear project based ransomware called OPdailyaallowance. It was reported by that the OPdailyaallowance virus has been actively encrypting victims’ files and demanding for a 0.3 BTC ransom from users all around the world. On top of that, others noticed that this crypto infection might be related … Continued

Introducing crypto-ransomware viruses that have been successfully conquered and sent to the grave yard is a real pleasure. OpenToYou virus is a sample that we dare to identify as defeated. We should mention that this infection is not old. Therefore, it is surprising that IT specialists managed to generate an appropriate decryption tool so quickly. … Continued

Opqz is a file-encrypting Windows infection, a type of Djvu ransomware. Its main characteristic is changing file names to include “.opqz” as the second extension. Opqz changes files on the inside, completely breaking some of them. If you don’t have file backups, some of your files may be gone forever. In addition, Opqz may install … Continued

Optimus is a malicious program – ransomware. It corrupts files and changes their names, appending the extension “optimus”. The malicious actors responsible for the Optimus attack want to extort their victims by holding their files for ransom. The interesting thing about Optimus ransomware is that it appears to be related to Ziggy, a retired ransomware … Continued

Ordinal ransomware virus is assigned to the category of crypto-malware which is based on HiddenTear open source code. As you might have heard, this project is a widely exploited standard. We have investigated a bunch of comparable infections like Anoncrack and Balbaz. Mostly all of these variants are using AES encoding to encrypt files and … Continued

It might be difficult to put Ordinypt virus in some category of viruses, however, we feel like it should be categorised as a ransomware. Yet, it is not a typical ransomware infection. Usually ransomware just locks your files and asks for a ransom in order to unlock them. In this case, Ordinypt pretends encrypt your … Continued

Österreichischen Polizei virus is a malicious program that focuses on infecting computer systems located in Austria. It’s an application that blocks PC pretending to be sent by police and tries to get money from computer users. As you see, Österreichischen Polizei virus uses the name of Austrian Police to gain trust. It accuses users of … Continued

Outsider Virus, also known as .protected extension ransomware, is a dangerous computer virus that can attack your system and completely paralyze it. This is what ransomware infections do – they completely take over your system, encrypt personal files stored on the hard drive and then ask for a ransom to be paid in order to … Continued

OXAR ransomware virus is a fresh variant that got detected on the 10th of July. Soon enough, the detected sample with the payload of Data Locker.exe was established to fit in one specific family of crypto-viruses. The sample’s structure was consistent with the open source Hidden Tear project. These variants are not significantly-threatening, but their … Continued

OzozaLocker is a ransomware virus discovered last week, that is, between the 21st to the 25th of November, 2016, by the cyber security investigators of MalwareHunterTeam. This new ransom-malware displays its ransom note in an interesting way – a pop-up window shows up after the victim has clicked the encrypted file twice. But what is … Continued

Paas is file-encrypting ransomware. It corrupts data on the infected computer, then asks the victim to pay a ransom to repair that data. The Paas extortion malware spreads online in infected installers and other content. It infects Windows PCs belonging to individual users and to small businesses.  Paas in short: Type of threat Ransomware, spyware, … Continued

Pack14 (or Avest) is a ransomware infection that locks your files, making them inaccessible. The file sare marked with the Pack14 extension, but even getting rid of that doesn’t work — the files are broken on the inside. Ransomware is a very dangerous type of virus — it often causes people to lose many of … Continued

PadCrypt is a dangerous virus that might infect personal computers. It is listed as a ransomware, so once installed it will lock some of your personal files and demand for a ransom to unlock them. If you have noticed this virus on your computer – don’t panic and proceed reading this article. We will provide you … Continued

Did you notice that your files refuse to open and their names end with the “pahd” extension? Are there notes in your folders asking you to pay up to $980 to “return all your files”? These are symptoms of the Pahd ransomware, new data-encrypting malware related to the Djvu family. Pahd attacks Windows computers and … Continued

PainLocker is the newest variant of Everbe ()crypto-extortionist virus, which also was released earlier this May 2018. There is not much known about this PainLocker ransomware infection yet, however, the current information that 2-viruses.com team has researched might be very helpful if you have caught this dreadful PC threat and want to get rid of … Continued

Acuf2 is the name of a cryptovirus that targets Windows computers and mostly affects small businesses, though individual home users are not immune. File-encrypting viruses aren’t rare and can be very profitable for the criminals who develop and distribute them, with the ransom amount hovering around a few thousand dollars. The victims risk losing all of … Continued

A new and very dangerous computer virus called Paradise Ransomware is infecting various computers right now. It is classified as a ransomware and can be detrimental to the state of your computer and personal files. It is a typical ransomware virus by all possible qualities but one – it seems like this virus might be … Continued