Search
Keyword: cpl
encrypting files with the following file extensions: inf bat cab cmd com cpl cur dll drv exe hlp hta icl ico idx ini lnk msi ocx spl sys [Readme.html on Desktop] Trojan.WinGo.Rozena (IKARUS) Downloaded from
.losttrustencoded2 It drops the following file(s) as ransom note: {All Directories}\!losttrustencoded.txt It avoids encrypting files with the following file extensions: exe dll ocx ani cab cpl cur diagcab diagpkg drv
{Drive}:\Contact Us.txt It avoids encrypting files with the following file extensions: 386 adv ani bat bin cab cmd com cpl cur deskthemepack diagcab diagcfg diagpkg dll drv exe hlp hta icl icns ico ics idx
.qxzb3ZaxP It drops the following file(s) as ransom note: {Encrypted Directory}\qxzb3ZaxP.README.txt It avoids encrypting files with the following file extensions: 386 adv ani bat bin cab cmd com cpl cur
adv ani bat bin cab cmd com cpl cur deskthemepack diagcab diagcfg diagpkg dll drv exe hlp hta icl icns ico ics idx key ldf lnk lock mod mpa msc msi msp msstyles msu nls nomedia ocx pdb prf ps1 rom rtp
Us.txt It avoids encrypting files with the following file extensions: 386 adv ani bat bin cab cmd com cpl cur deskthemepack diagcab diagcfg diagpkg dll drv exe hlp hta icl icns ico ics idx key ldf lnk lock
the following: It uses a combination for the following strings for its filename (ex. InstancingGlossary.exe): Alaska Another Appid Assessment Auth Bold Brush Character Cpl Createan Dfs Dhcp Disabled
encrypts files with the following extensions: apk arch00 arw asset avi bar bay bc6 bc7 big bik bkf bkp blf blob bsa bup cab cas cat cdf-ms cdr cer cfr chm com cpl cr2 crt crw css csv cur d3dbsp das dat
directory}\README.TXT It avoids encrypting files with the following file extensions: 386 adv ani bat bin cab cmd com cpl cur deskthemepack diagcab diagcfg diagpkg dll drv exe hlp hta icl icns ico ics idx key
{default} bootstatuspolicy ignoreallfailures It avoids encrypting files with the following extensions: ani cab cpl cur diagcab diagpkg dll drv hlp icl icns ico ics lnk key idx mod mpa msc msp msstyles msu
cdr cer cfr chm com cpl cr2 crt crw css csv cur d3dbsp das dat dayzprofile dazip db0 dba dbf dbfv dcr der desc dll dmp dng doc docm docx dot dotx drv dwg dxf dxg epk eps erf esm exe exif ff flv fon
{Encrypted Directory}\fxkJts2wg.README.txt It avoids encrypting files with the following file extensions: 386 adv ani bat bin cab cmd com cpl cur deskthemepack diagcab diagcfg diagpkg dll drv exe hlp hta icl
extensions: 386 adv ani bat bin cab cmd com cpl cur deskthemepack diagcab diagcfg diagpkg dll drv exe hlp hta icl icns ico ics idx key ldf lnk lock mod mpa msc msi msp msstyles msu nls nomedia ocx pdb prf ps1
with the following file extensions: 386 adv ani bat bin cab cmd com cpl cur deskthemepack diagcab diagcfg diagpkg dll drv exe hlp hta icl icns ico ics idx key ldf lnk lock mod mpa msc msi msp msstyles
ocx diagcab diagcfg pdb wpx hlp icns rom dll msstyles mod ps1 ics hta bin cmd ani 386 lock cur idx sys com deskthemepack shs ldf theme mpa nomedia spl cpl adv icl msu Win32:RansomX-gen [Ransom](AVAST)
}.f58A66B51 It drops the following file(s) as ransom note: {encrypted directory}\Readme-f58A66B51.txt It avoids encrypting files with the following file extensions: 386 adv ani bat bin cab cmd com cpl cur
}.f58A66B51 It drops the following file(s) as ransom note: {encrypted directory}\Readme-f58A66B51.txt It avoids encrypting files with the following file extensions: 386 adv ani bat bin cab cmd com cpl cur
extensions: exe bat bin cmd com cpl dat dll drv hta ini lnk lock log mod msc msi msp pif prf rdp scr shs swp sys theme Win32:Evo-gen [Trj] (AVAST) Downloaded from the Internet, Dropped by other malware Collects
encrypting files with the following strings in their file name: msp bin sys msc mod theme hta shs nomedia diagpkg cab ics msstyles cur drv icns diagcfg dll ocx lnk ico idx ps1 mpa cpl icl msu msi nls scr adv
vssadmin.exe Delete Shadows /All /Quiet It avoids encrypting files with the following extensions: bas bat cmd com cpl lnk msi pif reg scr vb It avoids encrypting files within the following folder names: