Les crypto ransomware sont une catégorie de virus de rançonnage, qui, en dehors d’exiger le paiement de certaines rançons, a des capacités de cryptage de fichiers. Ainsi, ce type de virus est également appelé virus cryptographiques ou crypto-malware . La rançon est demandée pour le décryptage des données cryptées, et doit être transférée en utilisant de la crypto-monnaie anonyme, généralement, – des Bitcoins. Les fichiers de données sont verrouillés et rendus illisibles après le cryptage effectué par le programme de chiffrement, qui est incorporé dans un mécanisme de chiffrement de données. Par conséquent, les virus cryptographiques sont également appelés crypto-verrouilleurs ou verrouilleurs de fichiers. Ils peuvent agir comme des verrouilleurs d’écran, ce qui empêche les victimes d’accéder à leurs ordinateurs ou tout simplement changer le fond d’écran avec l’image de la note de rançon. Les crypto-malware sont conçus pour cibler les utilisateurs individuels, ainsi que des réseaux informatiques appartenant à de grandes sociétés. Ce type de menaces cybernétiques est classé parmi les virus les plus dangereux, étant donné que leurs développeurs utilisent généralement des mécanismes de chiffrement de données élaborées, qui peuvent même rester indécodable par les ingénieurs les plus expérimentés dans le domaine. Par conséquent, les cyber-criminels peuvent faire d’énormes profits.
La plupart des crypto-verrouilleurs peuvent être identifiés par les extensions de fichier spécifiques qu’ils joignent aux fichiers chiffrés. Habituellement, c’est une extension ajoutée au nom d’origine du fichier et son extension supplémentaire. Ces extensions peuvent être simples et être composées d’une courte combinaison de caractères ou comme une simple phrase ou un mot. Souvent, ils portent le nom avec lequel le programme de cryptage lui-même a été nommé. Cependant, certaines de ces extensions malveillantes peuvent même contenir des e-mails de contact, le numéro spécifique d’identification de l’infection, l’adresse de paiement BTC, une chaîne de caractères aléatoires, etc.ou tout autre renseignements supplémentaires.
Cependant, tous les crypto-malware n’ont pas été conçus pour utiliser une extension particulière, jointe aux fichiers chiffrés. Il existe des codeurs de crypto ransomware, qui, en cherchant la gloire du crypto-virus le plus réussi, développent des programmes de cryptage de fichiers, en ajoutant les extensions copiés dans le but de falsifier des fichiers à l’infection d’un autre virus de cryptage. Il y a aussi ces crypto-verrouilleurs dans la nature, qui, au lieu de cibler les types de fichiers spéciaux, cryptent et verrouillent le disque entier. D’autres applications de verrouillage de fichiers ne nomment pas les fichiers cryptés pour rendre les données corrompues impossibles à être trouvées par une recherche sur le nom. Ainsi, même si l’extension jointe peut être un précieux indicateur d’une compromission certaine par un ransomware, vous ne pouvez pas l’utiliser comme la seule preuve d’identification de l’infection par un crypto-ransomware particulier ou qu’il n’y en ait pas.
-email-[email_addre...: Azer ransomware virus | .encrypted.decrypte...: Enjey ransomware |
.f41o1: Virus Globe Imposter(Decryptors: emsisoft) | !____GLOK9200@gmail....: Le virus Rotor(Decryptors: kaspersky) |
!____cocoslim98@gmai...: Le virus Rotor(Decryptors: kaspersky) | %random%.EnCrYpTeD: Pickles ransomware |
(encrypted).: HolyCrypt ransomware | *.crypt: Virus Globe Imposter(Decryptors: emsisoft) |
*нет данных...: Vanguard Ransomware | .!___[email]_.crypt: Gomasom(Decryptors: emsisoft) |
.#<email># i...: Striked ransomware virus | .01: Amnesia ransomware(Decryptors: emsisoft) |
.02: Amnesia ransomware(Decryptors: emsisoft) | .0402: Virus Globe Imposter(Decryptors: emsisoft) |
.0x0: Ungluk Ransomware | .1999: Ungluk Ransomware |
.1AcTiv7HDn82LmJHaUf...: Crypto1coinblocker , Vista Defender Pro | .2xx9: DevNightmare Ransomware |
.31392E30362E3230313...: Kozy.Jozy Ransomware | .31392E30362E3230313...: Kozy.Jozy Ransomware |
.3P7m: Mischa Ransomware | .3RNu: Mischa Ransomware |
.492: Virus Globe Imposter(Decryptors: emsisoft) | .4rwcry4w: 4rw5w ransomware |
.666: BlackSheep ransomware | .707: Virus Globe Imposter(Decryptors: emsisoft) |
.725: Virus Globe Imposter(Decryptors: emsisoft) | .726: Virus Globe Imposter(Decryptors: emsisoft), Globeimposter 2.0 Ransomware |
.777: Ninja Ransomware | .7h9r: 7h9r Ransomware |
.7zipper: 7zipper Ransomware | .911: Virus Globe Imposter(Decryptors: emsisoft) |
.???: Antix Ransomware , Czech ransomware | .ACTUM: Virus Globe Imposter(Decryptors: emsisoft) |
.ATLAS: ATLAS ransomware | .AiraCropEncrypted!: AiraCrop Virus |
.Alcatraz : Alcatraz Ransomware | .BONUM: Virus Globe Imposter(Decryptors: emsisoft) |
.BRT92: Virus Globe Imposter(Decryptors: emsisoft) | .BUSH: Virus Globe Imposter(Decryptors: emsisoft) |
.Bill_Clinton@derpym...: Virus Globe Imposter(Decryptors: emsisoft) | .C-email-[email]-[fi...: ODCODC ransomware(Decryptors: bleepingcomputer) |
.CHIP: CHIP virus | .CRRRT: Unlock92 ransomware |
.CRYPTOBOSS: Amnesia ransomware(Decryptors: emsisoft) | .CRYPTOSHIELD: CryptoShield ransomware |
.Cerber2: Cerber 2 Ransomware | .Dale: CHIP virus |
.Dexter: Shade Ransomware | .EMPTY: EMPTY ransomware virus |
.ENCR: AutoEncryptor ransomware , FileLocker ransomware | .ENCRYPTED_BY_LLTP: LLTP ransomware , No Malware , RTS Antivirus 2010 |
.Encrypted: aZaZeL virus | .FFF: Virus-encoder |
.GRANNY: Virus Globe Imposter(Decryptors: emsisoft) | .H3LL: Ungluk Ransomware |
.HA3: El Polocker Ransomware | .H_F_D_locked: Blackhat ransomware virus , MoWare HFD ransomware |
.HakunaMatata: Hakunamatata Ransomware | .Hollycrypt: HollyCrypt virus |
.I\\'WANT MO...: Jigsaw Ransomware(Decryptors: bleepingcomputer) | .ID-*8characters+cou...: Apocalypse Ransomware(Decryptors: emsisoft) |
.ID-[A-Fo-9],{8}+cou...: Apocalypse Ransomware(Decryptors: emsisoft) | .JezRoz: InfiniteTear ransomware virus |
.KEYH0LES: Mobef Ransomware | .KEYHOLES: Yakes Ransomware |
.KEYZ: Mobef Ransomware | .LEGO: Virus Globe Imposter(Decryptors: emsisoft) |
.LIGHTNING: LightningCrypt ransomware | .LOCKED: GOG ransomware |
.MIKOYAN: Den Svenska Polisen IT-Sakerhet virus , Mikoyan ransomware | .MOLE: Mole Ransomware |
.MRCR1: Merry Christmas ransomware | .NIGGA: Virus Globe Imposter(Decryptors: emsisoft) |
.NM4: NM4 ransomware | .NumberDot.: AngryKite ransomware |
.OMG!: DirtyDecrypt ransomware | .OXR: OXAR ransomware virus |
.OhNo!: OhNo! ransomware virus | .PAY: Jigsaw Ransomware(Decryptors: bleepingcomputer) |
.PEGS1: Merry Christmas ransomware | .R5A: 7ev3n Ransomware |
.RARE1: Merry Christmas ransomware | .RENSEMWARE: RensenWare virus , TDSS rootkit |
.REVENGE: Revenge ransomware | .REYPTSON: Reyptson virus |
.ReaGan: Virus Globe Imposter(Decryptors: emsisoft) | .SHARK: Shark ransomware V2 |
.SUPERCRYPT: SuperCrypt Ransomware | .SecureCrypted: SecureCryptor Ransomware |
.TRMT: Amnesia ransomware(Decryptors: emsisoft) | .TheTrumpLockerf: TrumpLocker ransomware |
.TheTrumpLockerp.: TrumpLocker ransomware | .UNLIS: Virus Globe Imposter(Decryptors: emsisoft) |
.VBRANSOM: VBRANSOM virus | .Venusf: VenusLocker ransomware |
.VforVendetta: SamSam Ransomware | .WAmarlocked: Balbaz ransomware |
.WINDOWS: $ UcyLocker virus | .Wana Decrypt0r Troj...: Trojan-Syria virus |
.Whereisyourfiles: SamSam Ransomware | .YAYA: Virus Globe Imposter(Decryptors: emsisoft) |
.YYTO: YYTO ransomware | .ZINO: Security Master , ZinoCrypt ransomware |
.ZW: ZONEware ransomware virus | .[4 digits random ex...: Deadly ransomware |
.[5 random character...: Alma Locker Ransomware | .[6 letters]: CryptoLocker |
.[Cho.dambler@yandex...: WininiCrypt ransomware virus | .[[email protected]].LOC...: Amnesia ransomware(Decryptors: emsisoft) |
.[[email protected]...: BugWare virus | .[a random combinati...: Princess Locker ransomware |
.[a-z0-9]: Diamond Computer Encryption ransomware virus | .[[email protected]...: Dharma Ransomware |
.[[email protected]].SON...: Amnesia ransomware(Decryptors: emsisoft) | .[chines34@protonmai...: Gryphon ransomware virus |
.[email]: Gingerbread Ransomware | .[email] : OpenToYou ransomware(Decryptors: emsisoft) |
.[email].BRT92: Virus Globe Imposter(Decryptors: emsisoft) | .[email].aleta: BTCWare Aleta virus |
.[email].xtbl: Green_Ray Ransomware , VegClass ransomware | .[email].xtbl : Redshitline Ransomware |
.[[email protected]...: Gryphon ransomware virus | .[payment_email].ID[...: CryptoMix virus |
.[random]: InfinityLock ransomware virus , LockedByte ransomware , My Decryptor ransomware virus , Skull ransomware virus , Web.mappingdo.net popup | .[victim_id]_luck: CryptoLuck Ransomware |
._[ID Number].UIWIX: UIWIX ransomware | .__dilmaV1: DilmaLocker ransomware virus |
._xratteamLucked: TeamXRat Ransomware(Decryptors: trendmicro, emsisoft) | .a19: JokeFromMars Ransomware |
.aRpt: Mischa Ransomware | .aaa: TeslaCrypt(Decryptors: avg) |
.ace: WinRarer virus | .adk: Angry Duck ransomware |
.adr: PyteHole ransomware , Virus Total 2010 | .aes: Polski virus |
.aesir: Locky virus | .amnesia: Amnesia ransomware(Decryptors: emsisoft) |
.ap19: JokeFromMars Ransomware | .armadilo1: ArmaLocky ransomware virus |
.asasin: Asasin ransomware | .bam: Bam! ransomware virus |
.bart: Bart Ransomware(Decryptors: avg) | .bin: Alfa Ransomware |
.bitkangoroo: BitKangoroo ransomware | .blackfeather: Black Feather ransomware |
.bleep: Ungluk Ransomware | .breaking_bad: Shade Ransomware |
.breeding123: SamSam Ransomware | .brickr: BrickR Ransomware Virus |
.btc: Jigsaw Ransomware(Decryptors: bleepingcomputer) | .btc-help-you: SamSam Ransomware |
.btcbtcbtc: SamSam Ransomware | .bud: Bud ransomware virus |
.cRh8: Mischa Ransomware | .canihelpyou: SamSam Ransomware |
.cerber: Cerber Ransomware | .cerber2: Cerber Ransomware |
.cerber3: Cerber Ransomware | .cfm: CryForMe virus |
.cifgksaffsfyghd: SamSam Ransomware | .code: CryptoMix virus |
.coded: Virus Globe Imposter(Decryptors: emsisoft), Anubis ransomware | .comrade: Comrade Circle Ransomware |
.coverton: Coverton Ransomware | .crack: Anoncrack ransomware virus |
.cradle: Cradle ransomware | .crinf: CryptInfinite(Decryptors: emsisoft) |
.crjoker: CryptoJoker ransomware | .crptd: Naampa ransomware virus |
.crptrgr: CryptoRoger ransomware | .cry: AntiAID , Cry ransomware , CryPy Ransomware , DoNotChange ransomware , Hi Buddy Ransomware |
.cry_: PaySafe Generator Ransomware | .cryakl: Cryakl Ransomware(Decryptors: kaspersky) |
.cryp1: CryptXXX ransomware(Decryptors: kaspersky), UltraCrypter ransomware | .crypt: CryptXXX ransomware(Decryptors: kaspersky), Chimera ransomware(Decryptors: kaspersky) , DynA-Crypt ransomware , NoobCrypt Ransomware , R980 Ransomware , Ransomnix virus |
.crypt38: Crypt38 ransomware(Decryptors: bleepingcomputer) | .crypte: Jigsaw Ransomware(Decryptors: bleepingcomputer) |
.crypted: Dxh26wam ransomware , Fatboy ransomware | .crypted_file: Kangaroo Ransomware |
.crypto: Zimbra Ransomware | .cryptotorlocker2015...: CryptoTorLocker(Decryptors: ransomwareanalysis), Personal Anti Malware |
.crypz: CryptXXX ransomware(Decryptors: kaspersky) | .crysis: Crysis Ransomware(Decryptors: kaspersky) |
.cuck: RansomCuck Ransomware | .czvxce: Coverton Ransomware |
.de-extens: Financereports24.com popup | .decrypt2017 and .hn...: Globe Ransomware(Decryptors: emsisoft) |
[email protected]...: Wyvern ransomware | .ded: DedCryptor ransomware |
.deria: DeriaLock ransomware | .devil: CryptoDevil ransomware |
.diablo6 : Control Manager , Diablo6 ransomware | .dkdfln: Random6 virus |
.dxxd: DXXD Ransomware | .eQTz: Mischa Ransomware |
.ebay: eBayWall Ransomware virus | .ecc: TeslaCrypt(Decryptors: avg) |
.ecrypt: Erebus ransomware , SafetyGuard | .email-[email].[vers...: Vipasana ransomware |
.en-extension: Financereports24.com popup | .enc: TrueCrypt Ransomware |
.encedRSA: SamSam Ransomware | .encrypted: Apocalypse Ransomware(Decryptors: emsisoft) , Crypren ransomware(Decryptors: Downloads\Compressed\DecryptCrypren-master) , CuteRansomware Virus(Decryptors: github) , Coin Locker Ransomware , Crypto Wire ransomware , Esmeralda Ransomware , Fake WindowsUpdater ransomware , GX40 ransomware , HugeMe ransomware , Smrss32 Ransomware , Trump Ransomware , Turkish FileEncryptor ransomware , VapeLauncher virus , Vista AntiMalware 2010 , WolfRam Antivirus |
.encryptedAES: SamSam Ransomware | .encryptedRSA: SamSam Ransomware |
.encryptile: Encryptile ransomware | .enigma: Coverton Ransomware , Enigma Ransomware |
.enjey: Enjey ransomware | .evil: Negozl Ransomware |
.evillock: EvilLock virus | .exe: VirLock Ransomware |
.exo: Atchbo ransomware | .exotic: Exotic Ransomware |
.explorer: Explorer Ransomware virus | .ezz: Alpha Crypt Ransomware(Decryptors: bleepingcomputer) |
.f**k_you_ av_we_are...: Virus Globe Imposter(Decryptors: emsisoft) | .fantom: Fantom ransomware |
.filock: Popcorn Time Ransomware | .firecrypt: FireCrypt ransomware |
.flyper: Flyper Ransomware | .frtrss: CryptoFortress virus |
.fu*k: Ungluk Ransomware | .fucked: Malabu ransomware , Rijndael ransomware |
.fun: Jigsaw Ransomware(Decryptors: bleepingcomputer) | .gefickt: Jigsaw Ransomware(Decryptors: bleepingcomputer) |
.gotham: Virus Globe Imposter(Decryptors: emsisoft) | .gws: Jigsaw Ransomware(Decryptors: bleepingcomputer) |
.hacked: In-Development Ransomware | .happydayzz: HappyDayzz ransomware |
.heisenberg: Shade Ransomware | .help: Virus Globe Imposter(Decryptors: emsisoft) |
.herbst: Herbst ransomware | .hermes: Hermes ransomware |
.hush: Jigsaw Ransomware(Decryptors: bleepingcomputer) | .hydracrypt: Hydracrypt(Decryptors: emsisoft) |
.id-[A NUMBER]_locke...: X3M ransomware | .id-[A NUMBER]_r9oj: X3M ransomware |
.id-[A NUMBER]_x3m: X3M ransomware | .id-[ID]-[email].inf...: Pizzacrypts Ransomware |
.id-[ID].[email].xtb...: Mahasaraswati ransomware | .id-[ID].okean-1955@...: Okean- 1955 Ransomware |
.id-[ID]_[email1]_[e...: Juicylemon ransomware | .id-[id].[email].are...: Arena ransomware virus , Vista Smart Security 2010 |
.id-{ID Number}_fud@...: BandarChor ransomware | .id_[ID]_[email].rmd: Zeta Ransomware |
.id_[ID]_[email].scl: Zeta Ransomware | .ifuckedyou: SerbRansom virus |
.ipygh: Karo virus | .isis: EduCrypt ransomware |
.jaff: Jaff ransomware , PC Live Guard | .jeepers: JeepersCrypt ransomware |
.justbtcwillhelpyou: SamSam Ransomware | .karma: Karma Ransomware |
.keepcalm: Keep Calm Ransomware | .kencf: Kaandsona Ransomware , Total Protect |
.kgpvwnr: My Decryptor ransomware virus | .kirked: Kirk virus |
.kkk: Jigsaw Ransomware(Decryptors: bleepingcomputer) , KKK virus | .kokolocker: KoKo Locker |
.kraken: Kraken ransomware | .lambda_l0cked: LambdaLocker ransomware |
.lamo: EyLamo virus | .lcked: Jigsaw Ransomware(Decryptors: bleepingcomputer) |
.letmetrydecfiles: SamSam Ransomware | .llawex: Random6 virus |
.lmao: LMAOxUS Ransomware | .lock: LockCrypt virus , Zyka ransomware |
.lock75: TAR-Fluffy ransomware | .lock93: Lock93 Ransomware |
.locked: Stampado Ransomware(Decryptors: emsisoft) , Globe Ransomware(Decryptors: emsisoft) , OzozaLocker Ransomware(Decryptors: emsisoft), Philadelphia Ransomware(Decryptors: emsisoft) , Antivirus Vista 2010 , BitPaymer virus , CryptoShocker Ransomware , FabSysCrypto ransomware , GNL Locker Ransomware , Guster ransomware , May ransomware , MMLocker Ransomware , ORX-Locker Ransomware , RedBoot ransomware virus , Russian Eda2 Ransomware , Shark Ransomware , VirLock Ransomware , WickedLocker ransomware , Zelta Free ransomware , Zyklon Locker | .locked-by-mafia: BlueFlare Antivirus , MafiaWare Ransomware |
.locklock: LockLock Ransomware | .locky: Locky virus , NoobCrypt Ransomware |
.lok: Anatel Ransomware | .lovewindows: Globe Ransomware(Decryptors: emsisoft) |
.lukitus: Lukitus ransomware virus , Zammillo Deals | .m0on: M0on ransomware |
.madebyadam: Roga ransomware | .maktub: AiraCrop Virus |
.maysomware: May ransomware | .mention9823: SamSam Ransomware |
.mordor: Mordor ransomware | .mtk118: Virus Globe Imposter(Decryptors: emsisoft) |
.nWcrypt: Virus Globe Imposter(Decryptors: emsisoft) | .needdecrypt: Virus Globe Imposter(Decryptors: emsisoft) |
.needkeys: Virus Globe Imposter(Decryptors: emsisoft) | .neitrino: Neitrino ransomware |
.no_more_ransom: Shade Ransomware | .novalid: Locked-in virus |
.ocean: Virus Globe Imposter(Decryptors: emsisoft) | .odcodc: ODCODC ransomware(Decryptors: bleepingcomputer) |
.odin: Locky virus , ODIN ransomware | .only-we_can-help_yo...: SamSam Ransomware |
.oops: OopsLocker virus | .osiris: Locky virus |
.padcrypt: PadCrypt | .payforunlock: CryptoGod virus |
.payransom: Invisible Empire Ransomware | .paytounlock: Jigsaw Ransomware(Decryptors: bleepingcomputer) |
.pec: PEC 2017 ransomware | .pmxkab: Random6 virus |
.pnr: Pendor ransomware virus | .porno: CryptoHitman Ransomware |
.poshcoder: POSHCODER | .potato: Potato ransomware |
.pr0tect: Pr0tector ransomware | [email protected]: Project34 ransomware |
.protected: Protected Ransomware | .pscrypt: PSCrypt virus |
.psh: PshCrypt ransomware | .purge: Globe Ransomware(Decryptors: emsisoft) |
.pwned: Decryption Assistant ransomware | .rack: RackCrypt Ransomware |
.ransomcuck: RansomCuck Ransomware | .razy: Razy ransomware |
.rdm: Radamant ransomware(Decryptors: emsisoft) | .rdmk: CryptoMix virus |
.reaGAN: Virus Globe Imposter(Decryptors: emsisoft) | [email protected]....: Globe Ransomware(Decryptors: emsisoft) |
.resurrection: Resurrection virus | .rip: KillerLocker ransomware |
.robinhood: RobinHood Ransomware | .rokku: Rokku Ransomware |
.rose: Virus Globe Imposter(Decryptors: emsisoft) | .rrk: Radamant ransomware(Decryptors: emsisoft) |
.rumblegoodboy: Virus Globe Imposter(Decryptors: emsisoft) | .sad: SADStory ransomware |
.sage: Sage 2 ransomware , Sage Ransomware , Secure Veteran | .sanction: Sanction Ransomware |
.sea: Virus Globe Imposter(Decryptors: emsisoft) | .serp: Serpent virus |
.serpent: Serpent virus | .sexy: MyPcSecure , PayDay Ransomware |
.shit: Locky virus | .skjdthghh: SamSam Ransomware |
.skunk: Virus Globe Imposter(Decryptors: emsisoft) | .stn: DeadEye , Satan ransomware |
.suppose666: SamSam Ransomware | .sux: Jigsaw Ransomware(Decryptors: bleepingcomputer) |
.switch: KillSwitch ransomware | .tdelf: TheDarkEncryptor virus , ViewThat Ads |
.theworldisyours: SamSam Ransomware | .thor: Locky virus |
.ttt: TeslaCrypt(Decryptors: avg) | [email protected]...: Jigsaw Ransomware(Decryptors: bleepingcomputer) |
[email protected]: Globe Ransomware(Decryptors: emsisoft) | .upzbrf: Random6 virus |
.versiegelt: Versiegelt ransomware | .via: ViaCrypt Ransomware Virus |
.viiper: ViiperWare virus | .viki: CryptoViki ransomware |
.vindows: Vindows Locker Ransomware | .vvv: Win Defender 2009 |
.wallet: Sanctions Ransomware | .wannacry: Trojan-Syria virus |
.wcry: Wcry virus | .wflx: WildFire Locker virus(Decryptors: mcafee) |
.whycry: WhyCry virus | .wnx: Onyx virus |
.write_me_[btc2017@i...: Virus Globe Imposter(Decryptors: emsisoft) | .write_on_email: Virus Globe Imposter(Decryptors: emsisoft) |
.xdata: PC Internet Security 2010 , SystemArmor , XData ransomware | .xtbl: Shade Ransomware |
.xxx: TeslaCrypt(Decryptors: avg) | .yl: ChinaYunLong virus |
.ytbl: Shade Ransomware | .zCrypt: zCrypt Ransomware |
.zXz: AP Manager , QuickCoup Ads , RanRan ransomware | .zepto: Locky virus , Zepto ransomware |
.zn2016: ZeroCrypt ransomware | .zuzya: Virus Globe Imposter(Decryptors: emsisoft) |
.zyklon: Zyklon Locker | .~: Tilde ransomware |
.~HL: HadesLocker virus | @kee: Kee ransomware |
ENC: UnblockUPC Ransomware | HUSTONWEHAVEAPROBLEM...: Matroska Ransomware |
Heimdall---: Heimdall Ransomware | KK_.: KK_ ransomware |
Lock.: MIRCOP Ransomware(Decryptors: kaspersky) , Aviso Ransomware | [customised]: Goliath Ransomware , Ransom32 ranswomare |
[[email protected]].gryph...: Gryphon ransomware virus | [email].xtbl: Ecovector Ransomware |
[email]___: SATANA Ransomware | [full disk]: Petya ransomware |
[gladius_rectus@aol....: Gryphon ransomware virus | [none]: Rannoh trojan(Decryptors: kaspersky) , BadBlock Ransomware(Decryptors: avg, emsisoft) , SZFLocker Ransomware(Decryptors: avg) , DMA-Locker ransomware(Decryptors: emsisoft), FenixLocker Ransomware(Decryptors: emsisoft) , KeRanger Ransomware(Decryptors: bleepingcomputer) , LeChiffre Ransomware(Decryptors: emsisoft) , NanoLocker Ransomware(Decryptors: github) , Nemucod ransomware(Decryptors: emsisoft) , Telecrypt Ransomware(Decryptors: box) , Le virus Alphabet(Decryptors: bleepingcomputer), CoinVault(Decryptors: kaspersky) , Nemucod-AES ransomware virus(Decryptors: emsisoft) , UmbreCrypt(Decryptors: emsisoft) , 8lock8 ransomware(Decryptors: bleepingcomputer) , Adonis ransomware , Advanced Virus Remover System Warning , All_Your_Documents ransomware , Blooper virus , CryptoDark virus , CryptoJacky ransomware , CyberSplitter ransomware , CYR-Locker ransomware , Defray ransomware virus , FadeSoft ransomware , Jew Crypt ransomware , Kaenlupuf virus , Karmen ransomware , Kryptonite virus , LataRebo Locker ransomware , LockeR ransomware , Meteoritan virus , Monument ransomware , Mood Tube App , My Security Suite , NTK ransomware , PetrWrap ransomware , Radiation virus , Ranion ransomware , Red Cross Antivirus , SkyName ransomware , Spora virus , TowerWeb ransomware , Trojan-BNK.Win32.Keylogger.gen , VHDLocker Ransomware , WannaCryptor ransomware , Windows Performance Center |
[random]: HELP_YOUR_FILES virus , Maktub Locker , Registry Defender Platinum | [restoreassistant2@t...: Locked_File ransomware virus |
[[email protected]]....: Master virus | [unknown]: Locker ransomware(Decryptors: bleepingcomputer), \"Your Computer was Automatically Blocked. Reason: Pirated Software\" ransomware , ABCLocker ransomware virus , Buyunlockcode ransomware , Cryptobot virus , Cryptorbit virus , FileFrozr ransomware , Gruxer ransomware , KEYHolder , Kripto64 ransomware , R ransomware , Schwerer ransomware |
_Ink.HavocCrypt!: Havoc ransomware | _[original_extension...: Computer Fix , VisionCrypt ransomware |
____tarTrojan-Ransom...: Le virus Rotor(Decryptors: kaspersky) | _crypt: Crypton ransomware(Decryptors: emsisoft) |
_crypt0.: Crypt0 Ransomware | [email protected] _: Best-click-scanner.info , FLKR Ransomware |
_nullByte: NullByte ransomware | iaufkakfhsaraf: SamSam Ransomware |
id-[ID].{payfornatur...: Payfornature Ransomware | id-[affiliate_id].[a...: Paradise Ransomware |
id.-[ID].[email].xtb...: JohnyCryptor ransomware | none: Ender Ransomware , FCP ransomware |
oorr.: LowLevel04 Ransomware | unknown: LockOn Virus |
If you have any suggestions about crypto ransomware extensions leave a comment.