Ransomware Destroys Files By Programming Error

A new ransomware variant that is currently scattered ensures that victims will never recover encrypted files, even if they decide to pay the ransom of 700 euro on time. Because the developer has made a major programming error.

Power Worm ransomware uses AES encryption to encrypt the files on infected computers, but then throws away the key.Since the decryption key is not initialized in time and saved, the victim can never recover his files, even if he pays, warns Lawrence Abrams forum BleepingComputer. He advises victims would not have to pay, because they will not recover their files will.

Abrams says that researchers BleepingComputer choose to make no bugs and bugs in ransomware known as the creators can then resolve the issue. In this case they make an exception and it is the ransomware developer even explained how he can rectify his mistake. This must be the case that his creation continues to destroy the files of victims.

CryptoWall-Ransomware Ransom Increases To 700 Euro

There is a new version of CryptoWall-surfaced ransomware that encrypts file names, victims speaks in a derogatory way and the ransom amount has increased to 700 euro, so researchers at the forum Bleeping Computer discovered.

CryptoWall is a form of ransomware which kinds of files on the computer encrypts. For decrypting victims must then pay. The first variant was last May discovered. This release early victims still 500 for decryption. If victims do not paid this amount was increased to 1,000 euros a time. With CryptoWall 4.0 that figure has now 1400 euros.

The new version also stands out because not only the contents of files are encrypted, but the file names. This is probably done to frustrate victims and make it difficult to determine which files need to be restored, says Lawrence Abrams Bleeping Computer. Like previous versions, removes all CryptoWall 4.0 Volume Shadow copies, turn off System Restore and Windows Startup Repair. Also makes use of the computer, on the basis of operating system and processor, a unique identification number.

Another change in Crypto 4.0 is the text to see victims of an encrypted computer get. Namely, that it has acquired a derogatory tone. So victims are addressed as "Congratulations !!! You have become part of the great CryptoWall community."It is also assumed that victims do not understand the explanations about encryption. Next, the creators which CryptoWall is not malicious and that together with the victims make the Internet safe. How the new version spreads exactly is unknown, but previous versions used mainly e-mail attachments and unpatched software.