How to remove NEWS ransomware and decrypt .*id*.[notgoodnews@tutanota.com].NEWS files

What does .[notgoodnews@tutanota.com].NEWS mean? Recently internet users have faced the newest threat, called NEWS ransomware. This virus belongs to the Dharma file encryption ransomware family, which tends to spread very fast. The clearest sign of the NEWS ransomware encryption is the .*id*.[notgoodnews@tutanota.com].NEWS extension, which is added to the end of the encrypted files names. In the most cases, this virus spreads by the means of various executable files and installators. However, hackers Read more [...]

How to remove ROGER ransomware and decrypt .*id*.[wang.chang888@tutanota.com].ROGER files

What does .ROGER mean? A great number of users recently faced the new threat. It's called ROGER ransomware and the clearest sign of the infection with this virus is the ".*id*.[wang.chang888@tutanota.com].ROGER" extension. As the rule, it spreads by the means of various fake installators. Such files can be easily downloaded from numerous file sharing services and torrent trackers. Moreover, hackers can easily hide the code of the virus into common and harmless files, and spread it by the means of Read more [...]

How to remove 777 ransomware and decrypt _babyfromparadise_{*ID*}.777 files

What does _babyfromparadise_{*ID*}.777 mean? When you notice, that your files have changed their extensions to _babyfromparadise_{*ID*}.777 ones and are unreadable now, it means that your computer has been attacked by 777 file-encryption ransomware. This virus belongs to the Paradise ransomware virus family. 777 ransomware usually spreads by the means of malicious fake installators, that can be easily downloaded from various file sharing services and torrent trackers. Nowadays, hackers also widely Read more [...]

How to remove PORET ransomware and decrypt .poret files

What does .poret mean? When users have to face ".poret" extension, it means that their files have been attacked by PORET file-encryption ransomware. This virus belongs to the updated STOP(DJVU) ransomware family, the members of which are: NOSU and KODC ransomwares. PORET ransomware usually spreads by the means of fake isntallators, that can be downloaded from various file sharing services and torrent trackers. Still, there are other ways of spreading it, for example, hackers widely use various remote Read more [...]

How to remove Nosu ransomware and decrypt .nosu files

What does .nosu mean? If you see, that your files are unreadable and they have got new .nosu extension, it means that your computer has been attacked by Nosu ransomware. This virus belongs to the updated STOP(DJVU) file-encryption ransomware family, the only members of which nowadays are KODC and PORET ransomwares. The characteristic feature of these viruses is their ability to spread very fast. It's achieved by the ways how they spread. In the case of Nosu ransomware, as the rule, it spreads by Read more [...]