Iron Ransomware, also known as Iron Locker, Iron Unlocker Ransomware, Maktub Ransomware, is malware file encryptor, which locks users documents, photos, videos and other files using AES + RSA for the key, and then cybercriminals demand a 0.2-1.1 Bitcoins for decryption. In fact, real decryption is not guaranteed after payment. Ransomware virus creates a unique id for every infiltrated machine.
Horros is crypto ransomware, which encrypts user data using AES-256 and RSA-2048 for the key, and then demands a ransom for decrypted files or for the decryptor. After finishing encryption process virus creates a text file with a ransom demand. To prevent infiltration, you shouldn't allow unknown programs to run and make changes on your PC. User Account Control can help to prevent infiltration. Read our article to remove Horros Ransomware and decrypt .horros files.
H34rtBl33d Ransomware encrypts data files on servers, and then demands a ransom 0.1337 in Bitcoins for a decryption. The name H34rtBl33d is hidden words Heart Bleed. Documents, videos, databases are at risk. Every encrypted file has .d3g1d5 extension and after encryption you can not to open or edit files. A virus spreads mostly in English-speaking countries, but it can also spreads in other countries. The main purpose of these actions is to get ransom in #BTC from victims. Use our article to remove H34rtBl33d Ransomware from Windows 10, 8, 7 and decrypt .d3g1d5 files.
WhiteRose is another one of the dangerous viruses, called ransomware. After being installed on a machine, it encrypts users all files and their backups on PCs. After encryption, it is impossible to open users graphics, documents, sound or video files. Besides that, the virus creates and opens the note on a desktop. The main purpose of these actions is to get ransom in #BTC from victims. We urge you not to pay them as it's fraught with money loss without any results. Use this article to remove Whiterose Ransomware completely from Windows 10, 8, 7 and decrypt .whiterose files.
SamSam Ransomware is wide-spreaded Ransomware virus. It encrypts files using AES or RSA cryptography. A Malware program also modifies filename with certain template, as a result encrypted files have the same names as the original files, but with modified extensions such as:
.encryptedRSA, .weareyourfriends, .weapologize, .areyoulovemyrans, .breeding123, decrypt .country82000, decrypt .country82000, .disposed2017, .disposed2017, .mention9823, .mention9823, .moments2900, .moments2900, .myransext2017, .myransext2017, .prosperous666, .prosperous666, .vekanhelpu, .vekanhelpu, .weapologize, .weapologize, 0000-sorry-for-files, .weareyourfriends, .weareyourfriends files
Besides, SamSam Ransomware creates an HTML file in the target’s folders with the names or names containing prefixes/suffixes such as:
- “HELP_DECRYPT_YOUR_FILES”
- “TRY-READ-ME-TO-DEC”
- “-SORRY-FOR-FILES” (new variant) with following message:
