Videos

Check out our video library AppCheck defending against newest ransomware, automatic recovery and real-time backup.

Emsisosisoft Ransomware (.emsisosisoft)

  • Distribution Method : Unknown
 
  • MD5 : 5db3c408aea8a40ed5c662eeef3fd3ed
 
  • Major Detection Name : Trojan.Ransom.Scarab (ALYac), Trojan:Win32/Tiggre!plock (Microsoft)
 
  • Encrypted File Pattern : .emsisosisoft
 
  • Malicious File Creation Location : C:\Users\%UserName%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HOW TO RESTORE ENCRYPTED FILES.TXT
 
  • Payment Instruction File : HOW TO RESTORE ENCRYPTED FILES.TXT
 
  • Major Characteristics :
     - Offline Encryption
     - File encryption using "C:\Windows\Microsoft.NET\Framework\v2.0.50727\cvtres.exe"

List

위로