You are welcome to discuss various security topics with our professional team and other users like you!
Read our Registration Agreement and create your FREE account here!

*

Execute

  • *****
  • 388
  • +55/-0
  • Your friendly neighbourhood IT guy
      • View Profile
Remove Salam! Ransomware
« on: April 07, 2016, 03:56:34 pm »
Salam! Ransomware struck Lithuanians a few days ago, and this ransomware is continuing to spread.
In the picture below you can see the window that is generated with the ransom payment instructions:



The ransomware creates a .dll file - %APPDATA%\tribologists.dll, which helps it grow, after it has infected a computer.
The file should be detected by most anti-malware programs, but there might already be other versions with the .dll file having different names and sizes.

For the moment there is no known way to decrypt encrypted files, but you should try data recovery tools.

This topic is open for everyone to comment, share experience, ask for help, etc.
What do you know about this ransomware? Do you think it will spread across the World like others?