Category Archives: Ransomware

Message displayed on desktop saying my files have been encrypted by [email protected]. Majority of pictures, documents, etc are encrypted and inaccessible in almost every folder that has encrypted files. how can remove [email protected] ransomware?

Suddenly find that your files has been infected by [email protected] while you can to do nothing about it? Reading this post, you can to remove [email protected] completely to prevent more of your files from encryption.

[email protected] Description

[email protected] is a high-risk ransomware which locks the files on infected PC and extorts money from the victims. Once infiltrating your PC, [email protected] encrypts all files in the hard drive causing the compromised PC to malfunction to lock your PC and displays you a pop up claiming that you have been accused for copyright infringement by loading free music files which are shared without observing the rights of their respected owners, and you have you pay money as penalty to unlock your files as well as prevent you from being prosecuted, which is completely a trap set by cyber criminal. Besides, [email protected] may keep dropping malicious codes into the infected PC and execute them to make your PC become more vulnerable to virus, and these malicious codes may also disable the firewall and antivirus program to defend itself, making itself a hard nut for your PC to crack. Undoubtedly, [email protected] is a hoax for treating you for money, please be smart and have eyes on your wallet. It’s highly recommended to be removed immediately to avoid other damages to your system and protect your precious data.

Continue reading →

.askyneh extension ransomware Description

.askyneh extension ransomware is the newest file encryption ransomware made to infect Windows users and for them to pay ransom money for file encryption. This ransomware is distributed via fake email, you will get infected by .askyneh extension ransomware when you open attachments in that spam email, then all your files on the computer will be encrypted and you will not open any of them any more. You will see a TXT files from the hacker with the below warning:

Your documents, photos, databases and other important files have been encrypted
with strongest encryption and unique key, generated for this computer.

Private decryption key is stored on a secret Internet server and nobody can
decrypt your files until you pay and obtain the private key.

If you see the main locker window, follow the instructions on the locker.
Overwise, it’s seems that you or your antivirus deleted the locker program.
Now you have the last chance to decrypt your files.

Open https://43qzvceo6ondd6wt.onion.cab or https://43qzvceo6ondd6wt.tor2web.org
in your browser. They are public gates to the secret server.

If you have problems with gates, use direct connection:

1. Download Tor Browser from https://torproject.org

2. In the Tor Browser open the https://43qzvceo6ondd6wt.onion/
Note that this server is available via Tor Browser only.
Retry in 1 hour if site is not reachable.

Copy and paste the following public key in the input form on server. Avoid missprints.
6K4VBU7-5F45EMO-RDHIDWD-2NUDTWJ-FFZEMGH-2XN24LO-ST2ZTV3-HN2YDM2
UUA2W7C-S6WQGQY-CDANXRT-IHHNKUD-P7GTI7D-TWP3L2M-23R4NW4-TAYTSBX
UAR6HNU-J55JLSN-BAJ6CI3-TOIORZV-XM373T2-SMFTJ7E-HSECWDG-TR22WMO

Follow the instructions on the server.​

You may have little knowledge about with this ransomware when hearing “.askyneh extension ransomware”, but when we talking about CryptoWall Ransomware, you must have known what these evils are, and you will find that the .askyneh extension ransomware ransomware did the same evil thing to your system as the CryptoWall virus. Obviously, .askyneh extension ransomware ransomware is another new files encryption virus with a different name. It is designed to encrypt files on infected pc or lock Windows system and ransom money from the victims.

Continue reading →

Message from “about files!.txt” Ransomware

Hi guys! We have bad news for you.
Your files have been crypted by 2 popular alghoritms – AES and RSA. Only we have private RSA key
All crypted files now starting with “error_”:

You can buy our decryptor that will recover all your files. You need:
1) Send us 3 bitcoins on our bitcoin address 19UwLkuJfoNasSPs3NGDA5XT6CSH4E78Gi (Now 1 bitcoin approximately = 250 usd)
Only we and you know about this address, so we will understand that its your payment.
2) Send us your unique identificator on our mail [email protected]
3) Wait 1,2… or 24 hours and we will send you decryptor (it is very easy to use it – you
need only run decryptor executable file and wait 5-10 hours and all files will be decrypted)

If we dont anwser on your letter more than 1 day then make your own mail account on www.ruggedinbox.com
(This action is very simple and takes 1-2 minutes) and send us your letter again
(some mail servers (for example hotmail.com and outlook.com) blocking letters to www.ruggedinbox.com)

Your unique identificator: 264-211-178

You can use one of those sites to change your money to bitcoins:
www.btc.my
www.cryptomarket.my
https://bitx.my/market
www.bitcoinmalaysia.com
www.goldux.com
www.kraken.com
www.bitquick.co
www.howtobuybitcoins.info
www.bestchange.com

You dont need install any bitcoin software – you need only find bitcoin exchange service (also you can try find it here for your country – www.google.com)

Additional information: before payment you can send us one small file (not bigger than 300Kb).
and we will decrypt it before payment (also you need send us your unique identificator).
After that, we think that it will be evedent that we have the program that can decrypt your files.

“about files!.txt” Description

“about files!.txt” is severely nasty ransomware which has recently victimized lost of PC users and got huge benefit illegally all over world. Usually, this pest can be downloaded via malicious drive-by-download scripts from corrupted porn and shareware / freeware websites, installed through spam email attachments, media downloads and social networks or executed by other threats on system. As soon as “about files!.txt” successfully lurks into your PC, it will automatically launch itself once the Windows starts up, then it damages your programs by running lots of dangerous and unstoppable tasks in the background. After that, it uses codes to infects all your file such as media files (images, music, videos, docs, txts, etc).

“about files!.txt”

Continue reading →

recently my computer has been infected with a new error_(filename).xls Ransomware.? All my files have been encrypted with error_(filename).xls and I lack the skills to remove the virus.

error_(filename).xls Ransomware hit me.  I need a detailed instruction on how to remove it.this error_(filename).xls Ransomware has encrypted all my files and won’t decrypt them for me unless I pay. Any solution?

Some how there a random program call error_(filename).xls Ransomware get inside my computer. Now i unable to open all the document, picture, video, etc. My antivirus cannot delete the virus and many programs are disabled.

Suddenly find that your files has been infected by Error_(filename).xls Ransomware while you can to do nothing about it? Reading this post, you can to remove Error_(filename).xls Ransomware completely to prevent more of your files from encryption.

Error_(filename).xls Ransomware Description

Error_(filename).xls Ransomware is a high-risk ransom Trojan which locks the files on infected PC and extorts money from the victims. Once infiltrating your PC, Error_(filename).xls Ransomware encrypts all files in the hard drive causing the compromised PC to malfunction to lock your PC and displays you a pop up claiming that you have been accused for copyright infringement by loading free music files which are shared without observing the rights of their respected owners, and you have you pay money as penalty to unlock your files as well as prevent you from being prosecuted, which is completely a trap set by cyber criminal. Besides, Error_(filename).xls Ransomware may keep dropping malicious codes into the infected PC and execute them to make your PC become more vulnerable to virus, and these malicious codes may also disable the firewall and antivirus program to defend itself, making itself a hard nut for your PC to crack. Undoubtedly, Error_(filename).xls Ransomware is a hoax for treating you for money, please be smart and have eyes on your wallet. It’s highly recommended to be removed immediately to avoid other damages to your system and protect your precious data.

Continue reading →

I was somehow infected with Troldesh Ransomware  virus tonight. It seemingly only appeared after I ran malware bytes, which I’d decided to do because my system was running slowly.Now, loads of my files are encrypted, including some really important things.

yesterday was infected withTroldesh Ransomware when I tried to log into safe mode the windows 7 professional didn’t work and then showed MEDIA failure check cable. the screen shows the IBM system setup but F8 is not working so no safe mode. nothing worked

Message displayed on desktop saying my files have been encrypted by Troldesh. Google Chrome is running in my Processes (Programs) and it’s no longer installed on my system. I delete the entry and it comes right back.

Troldesh Ransomware Description

Troldesh Ransomware is extremely vicious ransomware which victimizes a great deal of PC users and extorts lots of money from them. You may have little knowledge about with this ransomware when hearing “Troldesh Ransomware”, but when we talking about CryptoWall Ransomware, you must have known what these evils are, and you will find that the Troldesh Ransomware ransomware did the same evil thing to your system as the CryptoWall virus. Obviously, Troldesh Ransomware ransomware is another new files encryption virus with a different name. It is designed to encrypt files on infected pc or lock Windows system and ransom money from the victims.

Continue reading →