Polyransom virus

A ransomware (from the English “ransom” meaning “ransom”) is a type of malicious program that restricts access to certain parts or files of the infected system, and asks for a ransom in exchange for removing this restriction.

Summary

[ hide ]

  • 1 Features
  • 2 Propagation
  • 3 Conclusions
  • 4 Prevention Method
  • 5 How to disinfect a computer attacked by Ransomware?
  • 6 Sources

characteristics

Some types of ransomware encrypt the operating system files, rendering the device unusable and coercing the user to pay the ransom. Ransomware became popular in Russia and its use grew internationally in June 2013. The McAfee company noted that in the first quarter of 2013 alone, it had detected more than 250,000 unique types of ransomware.

Spread

Ransomware is generally transmitted as a Trojan or a worm , infecting the operating system , for example, with a downloaded file or exploiting a system vulnerability. At this point, the ransomware will launch and encrypt the user’s files with a certain key , which only the creator of the ransomware knows, and will provide the user who claims it in exchange for payment.

Conclusions

The analysis of this type of virus is of great interest due to its technical characteristics of rapid infection and polymorphism with multiple layers of encryption and a high level of obfuscation and variability. The appearance of malicious programs that use highly complex techniques is increasingly frequent. Today there are many of them that combine various infection techniques, which represent a great challenge for malware analysts and developers of antivirus software products .

Prevention Method

  • Keep our operating system updated to avoid security flaws.
  • Have a good antivirus product installed and always keep it updated.
  • Do not open emails or files with unknown senders.
  • Avoid browsing unsafe pages or with unverified content.

How to disinfect a computer attacked by Ransomware?

If despite taking all the appropriate measures, the computer suffers the attack of a Ransomware, the antivirus software companies help to disinfect your computer and recover all the information, so you should contact them through their corresponding technical support.

 

Leave a Comment

Scroll to Top