Viruses

Thor Ransomware is the newest version of the file-encryption virus. It comes from "Locky" ransomware family, that uses asymmetric cryptography (RSA-2048 and AES-128 encryption algorithms) and appends various file extensions to encrypted files. This family uses names of Thor comics character: .locky, .odin or some other random names. Now it uses .thor extension, and modifies the name to the set of 32 random letters and numbers. Technically, new virus uses same technology, but updated security keys, so old decryptors won't work. Ransom amount is the same: 3 BitCoins. Thor ransomware substitutes desktop background with image with information about the infection and instructions to pay the ransom.

Odin Ransomware is the latest version of the infamous Locky ransomware. As we know, previously it added .locky and .zepto extensions. Now it uses .odin extension. Technically, it is the same Locky virus, that uses same asymmetric cryptography. However, now key is changed and currently AutoLocky Decryptor that was able to decrypt .locky files can do nothing with .odin files.

Cerber3 ransomware is new version of notorious Cerber virus that infected hundreds of thousands computers. It uses the same algorithms to infect computer and encrypt user files. Now it appends .Cerber3 to those files. Names of the files are changed to random 10 character sequence. Among other differences between Cerber3 and it predecessor are new ransomware note files (@__README__@.html, @__README__@.txt and @__README__@.url instead of #DECRYPT MY FILES#.txt, #DECRYPT MY FILES#.html, #DECRYPT MY FILES#.vbs). Text and html files contain identical instructions to pay the ransom, .url file opens Cerber3 website.

Cry Ransomware is crypto-virus, that infects Windows-based computers and encrypts data of different types. Usually, those are documents, music, photos, e-mails and other files, that can be very important for the user. Ransomware adds .cry extension to affected files and demands $150 ransom for decryption. If ransom is not paid within 100 hours, amount doubles to $300. Among peculiarities, that differentiates Cry virus from other threats of this kind - it creates old_shortcuts on the desktop and moves encrypted files to this folder.

Cerber is ransomware virus that uses AES encryption to encrypt user files. Usually it affects documents, photos, images, music, games and other types of personal data. Cerber adds .cerber extension to all encrypted files. Targeting personal information helps them to demand ransom ($500) for decryption. As there are no 100% working free decryption tools available many users pay the ransom to restore their files.

TeslaCrypt is very dangerous encrypting virus and ransomware. It uses AES encryption to encrypt sensitive user files (documents, photos, music, video). After this it asks for a ransom to decrypt those files. One of the features of TeslaCrypt ransomware is that it also affects gaming files of most popular games

Zingload.com is controversial search engine. It is not a virus, and it is not very dangerous. Zingload.com actually redirects your searches to Google Custom Search results. Main issue is: hijacker installs in Google Chrome, Mozilla Firefox and Internet Explorer and sets as default homepage and search engine. Zingload.com also hijacks browser shortcuts to make them open its URL every time users click on them.

Zepto Ransomware is new file-encrypting ransomware from Locky family. It uses RSA-2048 encryption algorithm and appends .zepto extensions to encrypted files and modifies file names with set of numbers and letters. First part of this set is your actually personal ID that is needed to pay the ransom and get decryptor. Ransom amount is 0.6 BitCoins (~$365). Zepto creates _HELP_instructions.html file with instructions to make the payment.