Search
Keyword: JS_XORBAT.B
drf drw dwg dxb erbsql erf exf fdb ffd fff fh fhd fpx fxg gray grey gry hbk hpp ibank ibd ibz idx iiq incpas jpeg jpg js kc2 kdbx kdc kpdx lua mdb mdc mef mfw mmw moneywell mos mpg mrw myd ndd nef nop
there was no response from the server. It encrypts the following files and appends ".encrypted" to them: wb2 psd p7c p7b p12 pfx pem crt cer der pl py lua css js asp php incpas asm hpp cpp 7z zip rar drf
ddoc ddrw der design dgc djvu dng doc docm docx dot dotm dotx drf drw dwg dxb erbsql erf exf fdb ffd fff fh fhd fpx fxg gray grey gry hbk hpp ibank ibd ibz idx iiq incpas jpeg jpg js kc2 kdbx kdc kpdx
This backdoor arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It executes then deletes itself afterward. Arrival
erf groups indd jpe jpeg jpg js kdc kwm mdb mdf md mef mrw nef nrw odb odm odp ods odt orf p12 p7b p7c pdd pdf pef pem pfx php pl pptm ppt pptx psd pst ptx pwm py r3d raf rar raw rtf rw2 rwl safe sql
encrypts files with the following extensions: 3fr 7z acc ai arw bas bay bl c cdr cer cpp cr2 crt crw cs db db dbf dcr dd dds der dng doc docm docx dwg dxf dxg end eps erf groups indd jpe jpeg jpg js kdc kwm
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This Trojan arrives on a system as a
exf fdb ffd fff fh fhd fpx fxg gray grey gry hbk hpp ibank ibd ibz idx iiq incpas jpeg jpg js kc2 kdbx kdc kpdx lua mdb mdc mef mfw mmw moneywell mos mpg mrw myd ndd nef nop nrw ns2 ns3 ns4 nsd nsf nsg
This Ransomware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It connects to certain websites to send and receive
This Ransomware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It connects to certain websites to send and receive
This Ransomware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It connects to certain websites to send and receive
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It executes the downloaded files. As a result, malicious
This Ransomware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It connects to certain websites to send and receive
This Ransomware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It connects to certain websites to send and receive
This Ransomware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This Ransomware arrives on a system
This Ransomware arrives as an attachment to email messages spammed by other malware/grayware or malicious users. It arrives on a system as a file dropped by other malware or as a file downloaded
%userprofile%\Desktop\VAULT.KEY It encrypts file from drives B to Z. It deletes components used in encryption. It changes the icons of encrypted files: It opens a window with instructions to restore files
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It may be manually installed by a user. Arrival Details
This Ransomware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It connects to certain websites to send and receive
icxs idl ifo indd inf inf_loc ini itdb itl itm iwd iwi jfif jpe jpeg jpg js kdb kdc kf layout lbf lck lib litemod lnk log log1 log2 lrf ltx lvl m2 m3u m4a man manifest map mcgame mcmeta mdb mdbackup