ViRobot/HAURI

Trojan.Win32.Ransom.1882112
種類
Trojan Horse
危険度/拡散度
/
発見日
[korea] 0000-00-00 [Foreign] 0000-00-00
Virobot対応
2014-08-22 [Able to detect & repair]

It encrypts users' documents, and then it requests pay for ransom.

 

[The symptom] 

1. It creates following files. (Based on Windows XP)

 

 

2. It encrypts normal documents and changes the files extension to .ctbl.

 

3. It shows a message about file encryption on users' PC screen.

 

 

4. It requests 0.34 BitCoin (approx. USD $173.00) in order to restore the encrypted files.



 

[How to repair]

Reparable by ViRobot engine ver. 2014-08-22 or above.