LeChiffre Ransomware is drifting on the Internet since 2015 but hasn’t been closely analyzed until recently. The latest researches showed that the ransomware is surprisingly simple by its formation. To run this ingenious client the malware creators should launch it on a hijacked server to override the files for encryption. The encrypted files may be distinguished by the extension changed to .lechiffre. After the end of encryption process the cyber criminals will wipe all traces of their presence and leave the note with explanations and demands.
JobCrypter is a threat that belongs to the groups of ransomware. It is designed to affect files on the infected system and encrypt them demanding payment for the restoration. JobCrypter originates in France, however it has already spread around the world. JobCrypter works in the similar way with other ransomware: it detects the files with most popular extensions and encrypts them adding .locked extension, after which the malware creates a text file.
CryptoLocker is a ransomware that squeezes money from users by encrypting the personal files with AES-265 and RSA algorithms. After the installation CryptoLocker inserts a randomly named executable file into %AppData% or %LocalAppData% folders. This executable is created for detecting the files for enciphering. It will change the extension of your media files and documents to .7z. CryptoLocker affects executables to prevent you from using the shadow copies.
UltraCrypter is updated version of previously described CryptXXX virus, that can be called CryptXXX 3.0 ransomware. Malware developers made some crucial changes, that are not very pleasant for potential victims. It still uses AES CBC 256-bit encryption algorithm, but now it adds .cryp1 extension to encrypted files. Ransom is 1.2 Bitcoins (around 500$). Bad news are, that now decryptors for CryptXXX does not work. That means the only chance to decrypt UltraCrypter-affected files is if you have external backup or enabled Windows service that will store previous versions of your files.
Myhomepage-7.info is program that comes to your computer in the form of an extension to the browser (Google Chrome, Mozilla Firefox and Internet Explorer). This program displays advertisements, banners and coupons. This program infects a computer without the user's consent. Myhomepage-7.info can advertise goods of such popular sites like Amazon, eBay and the like. Also, Myhomepage-7.info can change your homepage. Myhomepage-7.info changing your browser options, and adds its toolbar. Also, it can redirect the user to ad sites. The main goal of the developers is to make money.
