No doubt you probably heard about ransomware hitting systems all over the world infecting personal computers and networks alike.

What it does

Ransomware spreads by sending you updates for specific programs like adobe, java and flash player whether it is through email attachments or popups on unverified websites.

After it has infected your computer it will search for file extensions like JPG, XLS, PNG, DOC and PPT. These are usually important files like photos and documents.

When it find your files it will then encrypt it with various encryption methods or encrypt your computers MBR (master boot record).

Prevention

• Back up your data (External drive, Dropbox, Google drive etc.).
• Be very wary about email attachment (Extension ending in exe and zip).
• Disable Remote desktop and remote assistance.
• Update Windows and any other software.
• Install anti virus software (Avast, Malwarebytes, Eset etc.).

Fix

• If you can still boot into Windows it is critical to install and scan your computer with a good anti virus program (Install both Avast and Malewarebytes).
• If booting into windows is not possible you can run a system restore (How to access pre-boot menu).
• If a system restore does not work you need to create a rescue disk and run a scan from a flash drive (How to create a rescue disk).
• If all else fails you need to reinstall your computer. Don't format.
  • If your lucky your files should show up fine and you can scan your computer but if you are missing files follow this procedure.
  • (How to show hidden files).
  • If your files are encrypted you can use Avast decryption tools to decrypt them.

Free Ransomware Decryption Tools by Avast

Decryption tools

History of Ransomware

The first ransomware discovered originated from Russia between 2005 - 2006 and was created by Russian criminals targeting neighboring countries. One of the first type of ransomware variants was TROJ_CRYZIP.A. It would search for specific files and put it in a password protected zip folder and demand payment from the victim to a pre bitcoin digital currency called e-gold.

Another variant called TROJ_RANSOM.AQB surfaced in 2012 where it will go ahead and replace your master boot record with malicious code demanding payment and upon payment they will send you the unlock code.

The first true crypto ransomware discovered in 2013 was CryptoLocker. It will encrypt your files until you make a payment. It was discovered that they made $27 000 000 in payments making it the nastiest ransomware of its kind.

12 Worst Ransomware Variants.

1. GoldenEye
2. WannaCry
3. CryptoLocker
4. Locky
5. Petya
6. Crysis
7. zCrypt
8. Powerware
9. HydraCrypt
10. Cerber
11. RAA ransomware
12. CryptoWall

Please Upvote and Follow.