Category Ransomware

Articles about removing ransomware that blocks Windows or browsers and can encrypt your data and demand ransom.

How to remove LeChiffre Ransomware and decrypt .LeChiffre files

LeChiffre Ransomware is drifting on the Internet since 2015 but hasn’t been closely analyzed until recently. The latest researches showed that the ransomware is surprisingly simple by its formation. To run this ingenious client the malware creators should launch it on a hijacked server to override the files for encryption. The encrypted files may be distinguished by the extension changed to .lechiffre. After the end of encryption process the cyber criminals will wipe all traces of their presence and leave the note with explanations and demands.

How to remove JobCrypter and decrypt .locked files

JobCrypter is a threat that belongs to the groups of ransomware. It is designed to affect files on the infected system and encrypt them demanding payment for the restoration. JobCrypter originates in France, however it has already spread around the world. JobCrypter works in the similar way with other ransomware: it detects the files with most popular extensions and encrypts them adding .locked extension, after which the malware creates a text file.

How to remove CryptoLocker and decrypt .7z files

CryptoLocker is a ransomware that squeezes money from users by encrypting the personal files with AES-265 and RSA algorithms. After the installation CryptoLocker inserts a randomly named executable file into %AppData% or %LocalAppData% folders. This executable is created for detecting the files for enciphering. It will change the extension of your media files and documents to .7z. CryptoLocker affects executables to prevent you from using the shadow copies.

How to remove UltraCrypter and decrypt .cryp1 files

UltraCrypter is updated version of previously described CryptXXX virus, that can be called CryptXXX 3.0 ransomware. Malware developers made some crucial changes, that are not very pleasant for potential victims. It still uses AES CBC 256-bit encryption algorithm, but now it adds .cryp1 extension to encrypted files. Ransom is 1.2 Bitcoins (around 500$). Bad news are, that now decryptors for CryptXXX does not work. That means the only chance to decrypt UltraCrypter-affected files is if you have external backup or enabled Windows service that will store previous versions of your files.