Search
Keyword: ransom.win32.cring
file extensions. It drops files as ransom note. Arrival Details This Ransomware arrives as an attachment to email messages spammed by other malware/grayware or malicious users. It arrives on a system as
FILES.HTML - serves as ransom note %Desktop%\README HOW TO DECRYPT YOUR FILES.TXT - serves as ransom note (Note: %Desktop% is the desktop folder, where it usually is C:\Documents and Settings\{user name}
system. It drops files as ransom note. Arrival Details This Ransomware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.
drops files as ransom note. Arrival Details This Ransomware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Installation
(x86) It leaves text files that serve as ransom notes containing the following text: {Drive Letter}:\NEPHILIN-DECRYPT.txt It avoids encrypting files with the following file extensions: .exe .log .cab
This Ransomware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It drops files as ransom note. Arrival Details This
This Ransomware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It drops files as ransom note. It avoids encrypting
This Ransomware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It drops files as ransom note. Arrival Details This
encrypts files found in specific folders. It drops files as ransom note. Arrival Details This Ransomware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users
This Ransomware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It drops files as ransom note. It avoids encrypting
This Ransomware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It drops files as ransom note. Arrival Details This
\Windows on all Windows operating system versions.) It drops the following component file(s): {Encrypted File Path}\HOW_TO_RESTORE_FILES.txt -> Ransom Note {Encrypted File Path}\HOW_TO_RESTORE_FILES.html ->
file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Installation This Trojan drops the following files: %User Temp%\README.TXT - text ransom note
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It does not have any propagation routine. It does not
This Ransomware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This Ransomware arrives on a system
\Windows on all Windows operating system versions.) It drops the following component file(s): {Encrypted File Path}\HOW_TO_RESTORE_FILES.txt -> Ransom Note {Encrypted File Path}\HOW_TO_RESTORE_FILES.html ->
This Ransomware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This Ransomware arrives on a system
This Ransomware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This Ransomware arrives on a system
This Ransomware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It drops files as ransom note. Arrival Details This
malware" %Application Data%\{10 digit number} %Application Data%\{Unique ID}.html -> Ransom Note %Application Data%\Microsoft\Windows\Templates\{Unique ID}.html -> Ransom Note %Desktop%\{Unique ID}.html ->