Articles about ransomware – malware encrypting your personal files or stopping you from accessing your computer – and ways to remove it
TeslaRVNG1.5 is a ransomware program from the Ouroboros family that encrypts files using a special infection algorithm. It renames encrypted files by adding victim ID, email address tesla369@cock.li and adding the extension “.teslarvng1.5” to file names to mark files with private access.
FBI screenlocker is a malicious application that blocks access to the operating system and locks the screen and requires payment.
[Astra2eneca@aol.com].aol is a type of ransomware malware that encrypts important files found on the victim’s computer. The extension “. [Astra2eneca@aol.com] .aol “, after which the virus developers offer to decrypt the files. To do this, you need to buy certain decryption tools. Developers create a text file “FILES ENCRYPTED.txt” as a popup astra2eneca@aol.com:
JJLF is a ransomware type virus. Like all ransomware, it was created to demand money from victims by illegally encrypting files.
14x is a malware that has the features of a ransomware virus. The main purpose of virus is to deceive the victims by fraudulent means and blackmail. 14x ransomware enters the system through spam messages. Further, it scans files found on the system and blocks them using a special infection algorithm. the extension “.14x” is appended to encrypted files. For example, the file is called “audio”, after encryption by the virus, the file will look like “audio.14x”. It means the file cannot be opened.
Coos ransomware is a ransomware program from the Djvu family. It infiltrates the system and encrypts files by renaming these files with the “.coos” extension added. After that, virus creates a file “_readme.txt” in which there is a ransom note in all folders that contain encrypted files:
Hub ransomware is a ransomware type of malware. Ransomware is a type of virus that infects devices in order to extract money from victims. Hub ransomware is no exception.
Crazy ransomware is of the VoidCrypt type. It encrypts files and blocks access. To mark blocked files, the virus renames each encrypted file by adding the email address crazykillerusakk@hotmail.com. Next, it creates a file “! INFO.HTA” to open a pop-up window containing a ransom note:
A new variant of STOP/Djvu ransomware has been discovered that appends .atek extension to the files it encrypts. The ransomware leaves ransom notes called _readme.txt in users’ folders. Djvu ransomware may end up on a computer after a user runs a file downloaded from an untrustworthy source, for example, a pirated version of a program. Once it runs, the ransomware tries to connect to its command and control server, to get a unique encryption key. If it fails to connect to the server for some reason, then the ransomware uses its built-in key (offline key).
Saher Blue Eagle ransomware is a ransomware created by crooks to illegally encrypt files found on the device.