Category: Ransomware

Articles about removing ransomware that blocks Windows or browsers and can encrypt your data and demand ransom.

Posted in Ransomware Uninstall Tutorials Viruses

How to remove Zepto virus and decrypt .zepto files

Zepto is new file-encrypting virus, previously known as Locky ransomware. Virus uses AES-256 algorithm to encrypt your files. Zepto encrypts following file types: documents, images, game files, e-mails. Ransomware adds extension .zepto to every encrypted file and also creates file “_{random number}_HELP_instructions.html”, and in this file hackers give instructions to pay the ransom and decrypt files. Threat also modifies name of the affected files with hexadecimal chars, making it difficult to understand where certain files are.

Continue Reading How to remove Zepto virus and decrypt .zepto files
Posted in Ransomware Uninstall Tutorials Viruses

How to remove Crypt0l0cker virus and decrypt .encrypted files

Crypt0l0cker (TorrentLocker) is file-encrypting virus and ransomware that targets following countries: Australia, Austria, Canada, Czech Republic, Italy, Ireland, France, Germany, Netherlands, Korea, Thailand, New Zealand, Spain, Turkey, and the United Kingdom. For some reason it is not affecting US-based PCs. The ransom amount is 2.2 Bitcoins, which is currently about $330 GBP. Crypt0l0cker encrypts all files except ones with following extensions: avi, wav, mp3, gif, ico, png, bmp, txt, html, inf, manifest, chm, ini, tmp, log, url, lnk, cmd, bat, scr, msi, sys, dll, exe. Because those files are needed for OS operation.

Continue Reading How to remove Crypt0l0cker virus and decrypt .encrypted files
Posted in Ransomware Uninstall Tutorials Viruses

How to remove NegozI ransomware and decrypt .evil files

NegozI is file-encrypting virus ransomware that uses AES-256 algorithm to encrypt your files. The ransom amount is huge 5 Bitcoins, which is currently about $3300. NegozI encrypts following file types: documents, images, game files, e-mails. Ransomware adds extension .evil to every encrypted file and also creates files “decrypt_your_files.txt” and “decrypt_your_files.html”, that contain instructions to pay the ransom and decrypt files.

Continue Reading How to remove NegozI ransomware and decrypt .evil files
Posted in Ransomware Uninstall Tutorials Viruses

How to remove SecureCrypted virus and decrypt .SecureCrypted files

SecureCrypted (Apocalypse) is file-encrypting virus that demands ransom (0.5 and 1.5 Bitcoin) to decrypt infected files. Such type of threats is also called ransomware. After infection virus starts encrypting files of following extensions: .txt, .docx, .xlsx, .jpg, .png, .pdf and other. Those files are usually sensitive documents, photos, reports, books and other file types, that are important to regular people. Ransomware adds extension .SecureCrypted to every encrypted file and also creates files “yourfilename.Contact_Here_To_Recover_Your_Files.txt”, that contains instructions to recover those files.

Continue Reading How to remove SecureCrypted virus and decrypt .SecureCrypted files
Posted in Ransomware Uninstall Tutorials Viruses

How to remove 7ev3n Ransomware and decrypt .r5a files

7ev3n Ransomware is a type of malware that was created to play on people’s fears and squeeze money for the creators. The ransomware once it arrived on the system encrypts the files and changes their extension to .r5a. When the encryption is finished the malware displays the pop-up message with the explanation of the situation and with further instructions.

Continue Reading How to remove 7ev3n Ransomware and decrypt .r5a files