Malware Categories: Ransomware

If your files were locked with the .[[email protected]].save extension, broken even if you change their names, and if you were presented with a ransom note talking about how “all your files have been encrypted” and to write to an email address, these are classic symptoms of a ransomware infection, in this case — a version … Continued

Dqb files — files marked with the “.dqb” extension — are a symptom of a file-locking . The ransomware responsible has been dubbed Dqb. It renames the files by adding some letters and numbers, .id-[random].[[email protected]].dqb, to their names, but the harm doesn’t end here. File-locking ransomware encrypts the content of each file, either partially, or … Continued

[[email protected]].ad is a file-type extension applied to files locked by the Ad ransomware. This label being applied to your files is an obvious symptom of a ransomware attack. Ad ransomware is part of an extortion scheme that tries to get the victims to send money to the criminals for fixing the broken files. [[email protected]].ad is … Continued

Comandancia General de Policia virus is a ransomware targeting users in Ecuador. This parasite will block the PC and show a fake screen claiming that the police, Unidad de Investigaciones Especiales (UIES) detected some sort of illegal activity. To scare you into paying the ransom, it will stack every offense they can think of: watching … Continued

Combo13 is an extremely malicious program that destroys the files on the infected computer. It is made to look like file-encrypting ransomware, but rather than encrypting files, it corrupts them irreversibly. This is why Combo13 is called a wiper. It’s important to delete Combo13 to stop it from causing any more problems. It is also … Continued

Newly discovered CommonRansom infection is extremely dangerous – it is already obvious from a name that it is a ransomware infection. Ransomware virus can lock your personal files up or completely remove them. However, the second feature is common only to wiper viruses and in this case, CommonRansom is not a wipe – it locks files … Continued

“Please complete a quick survey to continue” is an infection that locks your computer screen by displaying a message forcing you into completing online surveys. This is the main condition for unlocking an infected PC. As in a case of many other ransomware, system does not respond to any commands. Otherwise it is a relatively … Continued

Comrade Circle ransomware, first detected on the 8th of October, 2016, pretends to be a Windows update. And, thus, it is already compared with another ransomware threat under the name of Fantom. On the other hand, Comrade Circle trojan virus alludes to the Communist Russia. Its title refers to the soviet custom of addressing one … Continued

Coos ransomware is a PC infection that causes your files to be broken (as well as renamed to have the “coos” file extension). Coos ransomware does this to force its victims to send money to its makers, who promise to fix the broken files once they receive their payment. In addition, Coos ransomware is installed … Continued

If your files became unopenable and had the “.coot” suffix added to their names, that’s a symptom of the Coot ransomware infection. This is a virus that’s spread by extortionists. It locks most user files, then leaves behind a note demanding money from the victim in exchange for unlocking the files. Coot symptoms include: Some … Continued

Copyright violation alert titled fake  I-Q Manager or AP Manager (newer version) Antipiracy foundation scanner is a new misleading application which pretends to be a scanner dedicated for the copyright protection. I-Q Manager Antipiracy foundation scanner imitates searching computer for torrents or other copyrighted programs and then displays warnings that something illegal is detected. Trying … Continued

Corona-lock ransomware, also known as BigLock, emerged in the middle of 2020. It locks files and renames then to end with “corona-lock”, “biglock”, “nermer”, and other extensions. Corona-lock/BigLock is very malicious and it can cause a lot of harm. It can destroy files (such as personal photographs). Its creators demand money in exchange for fixing the … Continued

CoronaVirus ransomware, also known as coronaVi2022, has been spread disguised as a PC optimizer. Once downloaded, it renames files to “[email protected]” and encrypts them, so that the files won’t open. Then CoronaVirus ransomware asks for $50 as ransom. CoronaVirus ransomware is bundled with a data-stealing trojan Kpot, so if you got infected, clean your computer … Continued

Cosakos ransomware has recently been reported to be infecting computers as a new version of STOP ransomware, usually spread disguised as useful programs online and downloaded by the victims accidentally. According to those researching this virus, Cosakos uses symmetric encryption to lock most of the data on the infected computer. To mark the locked files, … Continued

Coverton Ransomware is a new annoying locker that uses AES+RSA encryption to lock you personal files and then asks to pay a ransom to get the decryption key. The only goal of this virus is to rip computer users off. The program doesn’t hide itself and immediately alerts about its infiltration. You will receive a … Continued

Covm is ransomware based on Djvu. Covm uses cryptography to corrupt media files and documents, then it renames the corrupted files by adding an additional “.covm” extension. On top of that, it installs a password-stealing trojan. You can remove Covm and the other malware, however, fixing the files could be more complicated or even impossible. … Continued

Cradle crypto-virus is now joining the vicious group of ransomware viruses. These infections doom users’ files to become inactive and valuable data cannot be exploited for the most regular processes. Instead, the files are marked with .cradle extension and stand as the highest aces in the game of ransomware. Clearly, hackers have an advantage as … Continued

CrazyCrypt is a ransomware type infection that can cause critical damage to your computer and completely paralyze all personal files that are stored on the hard drive. Since it is ransomware, it will be looking for ways to sneak into your computer, execute malicious code and then apply specific encryption to change the structure of … Continued

CreamPie ransomware is a newly discovered threat by , that was posted on Twitter on August 26, 2018. According to the malware researcher, it is most likely just a test version, which was let out to see how well it does in the virtual world, yet after looking deeper into this crypto-infection, a lot of … Continued

Creeper ransomware virus was discovered at the very end of February, 2018. It is an infection which encrypts files with AES algorithm (just like MBRLock virus) and appends .creeper extension to the damaged digital data. According to the specialists, this is one of the few crypto-viruses that demand ransoms in Monero crypto-currency () instead of … Continued

Cring is ransomware. It infects your computer, encrypts files, changes their names, and then leaves a note demanding that you send 2 Bitcoins (some 50 thousand dollars at the moment – an absurd price) to the criminals behind Cring so that they will fix your files. Cring is still new, so there’s still not much … Continued

CrY-TrOwX ransomware virus is a variant, based on the widely-exploited Hidden Tear open source code. Therefore, it is categorized among such Hidden-Tear-based crypto infections like Katafrack and WanaDie. For short, CrY-TrOwX virus can be referred to as simply CrY due to its payload of CrY.exe. Its detection is not difficult as as many security tools … Continued

Cry36 Losers ransomware virus is an infection which will multitask between different assignments. First of all, it is regarded as a crypto-malware example, appending .losers extension to data, encoded with AES algorithm. It inserts HOWTODECRYPTFILES.html file which launches in victims’ preferred browsers. The infection has been determined to be the most active in Indonesia. This … Continued

It seems that the cyber crooks, developing ransomware viruses, never get tired. There is this new Cryakl ransomware scaring the pants off unsuspecting users. Even though it utilizes the strong asymmetric encryption algorithm, cybersecurity experts have been able to crack it. Unfortunately, Cryakl has improved since then, rebranded as CryLock, and continues to attack computers … Continued

CryForMe ransomware virus is an in-dev infection that has been assigned to the category of samples that are roughly based on the open source Hidden Tear project. The payload of the latter infection is CryForMe.exe which is where the title was obtained from. An individual, going by the pseudonym of Marco has been resolved to … Continued

Crying Ransomware, also known by the name of Cry Ransomware is a deadly virus which can cause severe damage to your files and computer system in general. As you might already know ransomware infections lock (encrypt) files on infected system and then ask to pay the ransom in order to unlock them. If you were … Continued

Cryp70n1c – name of the computer virus which is classified as a ransomware. It is a relatively new infection that wasn’t distributed in high volumes. However, it is not known how long this infection will be distributed and how much computers will be infected. That puts anyone into the position of a potential victim. In … Continued

Crypren ransomware is a newly detected file-encrypting virus. It is compatible with Windows and Linux OSs. Crypren file encryptor is similar to Locky, Cerber, CTB-Locker, PadCrypt and other ransomwares in a sense that it infiltrates the computer’s system and encrypt the files. About Crypren Ransomware Crypren ransomware applies a combination of AES-265 and RSA-2048 algorithms … Continued

A new variant of DetoxCrypto ransomware, named Crypt0, has just recently been released. Like its source code, this malicious program code uses the worshiped asymmetric encryption algorithm. To the great joy of the decent citizens of the cyber world, Crypt0 ransomware has been successfully decrypted, and we will surely provide you with the link to the … Continued

Crypt0r Ransomware was recently discovered by . It’s clear that it is ransomware – a virus that can lock up all (or most) of your personal files and then demand a ransom to be paid in order to reverse this process and make those files usable once again. Obviously, it would be much better to … Continued

Crypt38 ransomware is a new buggy Russian ransomware. It uses symmetric (AES) encryption algorithm. This means that, unlike many sophisticated recent ransomware viruses, which utilize the asymmetric encryption (different keys to encrypt and decrypt), this ransomware uses the same key for encryption and decryption of the victim’s data. Because of that, Crypt38 cryptomalware is regarded … Continued

Crypted034 Virus is very similar to the Scarab infection, but it’s definitely not the same. It might be that it’s just an updated, newer version of Scarab, that will be actively distributed from now on. As you might know, Scarab was infamous ransomware virus that managed to infect millions of computers. We just have to … Continued

Cryptgh0st was one of the latest May 2018 findings. This crypto-extortionist is believed to be a new third variant of Mauri870 (second version – MauriGo) ransomware. Although the virus is not as widespread as some other crypto-infections, such as Locky, GandCrab, NotPetya or CryptoLocker, yet it has all the possibilities to become one, therefore it … Continued

CryptInfinite (aka DecryptorMax) is dangerous virus that might lock files stored on your computer. It is listed as a ransomware, because once inside of your computer it will encrypt your files and will ask for a ransom to get them back. If you have noticed that your computer is infected with CryptInfinite and you can’t access your files, we … Continued

Crypto-Blocker crypto-virus is a sloppy sample that we are going to investigate in this article. Crypto-Blocker.exe file is the payload, exploited to complement malicious processes. Activity of this sample is either very weak or non-existent, but this ransomware could also still be in the stage of development. Nevertheless, from the information that we managed to … Continued

Every now and then, shady programmers develop ransomware viruses that are not characterized as particularly greedy. Their course of action might seem smoother, but in fact, they are just the same as other infections that should not be underestimated. New variants are getting released daily and we are working hard to keep you updated with … Continued

Crypto1coinblocker is a ransomware that can infect your computer and lock files stored on it. In order to retrieve them you will be asked to pay the ransom. It is one of the most dangerous viruses that can cost you a lot of troubles. If your computer is infected with this virus but you don’t know … Continued

Cryptobot virus is a ransomware that can encrypt your files and try to make you pay in order to get a decryption key and recover your files. The program is usually distributed through spam emails. Once inside, it encrypts your files and drops some malicious entries in your system. After that, it generates notifications warning … Continued

CryptoConsole Ransomware is a very dangerous virus that can attack your computer and steal (lock) your files. Every internet user should be aware of the ransomware and properly protect his computer from this kind of viruses. However, if it is already too late and your computer is infected with CryptoConsole Ransomware, wait no more and solve … Continued

CryptoDark ransomware virus is not an alarming infection that should terrorize you into purchasing bitcoins and paying the ransom. Without a doubt, this piece of malware cannot be evaluated as capable of blackmailing computer-owners since it does not gain the necessary leverage. We are referring to the file-encryption process which should be implemented if a … Continued

CryptoDefense is a ransomware program that targets computers running Windows operating systems. The virus restricts access to the data stored on your computer by encrypting it. To decrypt your files and get back the access to them, you will be asked to pay 500 USD in Bitcoins. It also says that you have 4 days … Continued

CryptoDevil crypto-virus was not always considered to be a file-encrypting infection. Before stepping onto the stage as a ransomware, it only functioned as a screen-locker which blocked users’ access to their devices. It was indicated as an especially nasty variant. It also demanded 20 US dollars in a form of bitcoins to be send to … Continued

CryptoFinancial ransomware is yet another headache to users who store valuable data on their PCs. In fact, anyone of us do have valuable files on our computers which are not stored elsewhere. And, here is where the problems begin. One day, just out of the blue, you are displayed locked screen with a ransom note … Continued

CryptoFortress virus is a ransomware program that infects computers through fake download popups and emails. If it manages to infiltrate into your system, the program encrypts the files stored in your computer and demands paying around 300 USD for decrypting them. Unfortunately, there are no guarantees that all your files will be decrypted even after … Continued

CryptoGod ransomware virus is a fresh variant of MoWare HFD infection and has been determined to be based on Hidden Tear open source project. It initiates file-encryption with an AES algorithm which makes sure that digital data would no longer be accessible. After the encryption is fully completed, the affected executables will feature a new … Continued

CryptoHitman ransomware is an updated version of Jigsaw ransomware. This new Jigsaw ransomware variant applies the same encryption algorithms. It is renamed CryptoHitman because it uses the image of the character from the Hitman video games and movies on your lock screen. Apart from that, CryptoHitman ransomware replaces the lock screen with pornographic images. This … Continued

CryptoHost, also recognized as ManameCrypt, is not a fresh ransomware. Security researchers have been aware of it for a while and figured out how this specific infection proceeds. Like all of the encryption monsters, CryptoHost also targets valuable data on your hard drive. However, crooks seemed to have lost their touch with this virus: the … Continued