Month May 2018

How to remove RSAUtil Ransomware and decrypt .VENDETTA, .URSA, alexjer554@gmx.com or other encrypted files

RSAUtil Ransomware is cryptovirus, which infiltrates user's PC and encrypts all files on it. Based on Delphi, RSAUtil spreads both on users PC or Servers, and the main purpose of this type of viruses - is extortion of money (750$ or more) from victims for potentially decryption of encrypted files. Usually, cybercriminals try to stay anonymous, they use bitcoins for transactions and remote servers for virus attacks. All encrypted files, for example, databases, documents, tables, photos, videos and other media files, gain a new suffix after encryption.

How to remove LockCrypt ransomware and decrypt .lock, .1btc or .mich files

LockCrypt Ransomware is encryption virus, that affects user files such as photos, documents, music, videos etc. It modifies filenames using certain pattern: it changes name of the file to random numbers and letters and alters extension to .lock, .1btc or .mich. Experts now research this virus, and we don't know if it uses symmetric or asymmetric cryptography, but currently, there is no automatic way to decrypt files encrypted by LockCrypt. But some users reported that they partially restored files, using shadow copies recovery. (Read our article about this method)

How to uninstall (remove) Ladomainadeserver.com

Ladomainadeserver.com is an adware program, which developed for aggressive distribution and promotion of sponsored links. For thousands of users, this software becomes a real headache, because it constantly redirects internet browser to Ladomainadeserver.com/redirect/ and after that to a third-party site, which usually shows tons of advertisement. In result, user can't normally use Google Chrome, Mozilla Firefox and another browser for internet surfing. Sometimes such annoyed viruses, like Ladomainadeserver.com can collect a personal data of users: browser history, other information and moreover, to send all collected data to affiliates.