Search
Keyword: ransom.win32.cring
This Ransomware drops files as ransom note. Process Termination This Ransomware terminates the following processes if found running in the affected system's memory: sqlserv.exe oracle.exe
This Ransomware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It drops files as ransom note. Arrival Details This
encrypts files found in specific folders. It drops files as ransom note. Arrival Details This Ransomware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users
executes them: C:\ProgramData\svchosd.exe C:\Documents and Settings\All Users\svchosd.exe It drops the following files: C:\Documents and Settings\All Users\cryptinfo.txt ← ransom note C:\Documents and
ransom note. Arrival Details This Ransomware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Other Details This Ransomware
This Ransomware does not have any backdoor routine. It executes the dropped file(s). As a result, malicious routines of the dropped files are exhibited on the affected system. Arrival Details This
following files: {folder of encrypted files}\OSIRIS-{random values}.htm It drops and executes the following files: %User Profile%\DesktopOSIRIS.bmp -> Ransom Note, used as wallpaper %User Profile%
This Ransomware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It drops files as ransom note. Arrival Details This
files in fixed and network drives. It drops a ransom note in every directory it encrypts. The ransom note contains the following: Adds the following scheduled tasks: wmfxdqz Executes every 15 mins
This Ransomware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It drops files as ransom note. Arrival Details This
information. However, as of this writing, the said sites are inaccessible. It deletes itself after execution. It drops files as ransom note. Arrival Details This Ransomware arrives on a system as a file dropped
information. However, as of this writing, the said sites are inaccessible. It deletes itself after execution. It drops files as ransom note. Arrival Details This Ransomware arrives on a system as a file dropped
Installation This Trojan drops the following files: {malware path}\PLJQKRKMWEZJEHEVT.txt - Serves as ransom note {folders containing encrypted files}\README NOW !!!.txt - Serves as ransom note It adds the
visiting malicious sites. Installation This Trojan drops the following files: %Application Data%\ebola.bmp - ransom message %Start Menu%\Programs\Startup\ebola.bmp - ransom message (for Windows Vista and
This Ransomware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It deletes the initially executed copy of itself. It
Instructions {folders containing encrypted files}\_HELP_HELP_HELP_{random characters}_.png - Ransom Note %Desktop%\_HELP_HELP_HELP_{random characters}_.hta %Desktop%\_HELP_HELP_HELP_{random characters}_.png
This Ransomware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It deletes the initially executed copy of itself. It
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It modifies the Internet Explorer Zone Settings. It
This Ransomware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It encrypts files found in specific folders. Arrival
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It modifies the Internet Explorer Zone Settings. It