Videos
Check out our video library AppCheck defending against newest ransomware, automatic recovery and real-time backup.
- Distribution Method : Unknown
- MD5 : 3829a09bca120206883539eb33d55311
- Major Detection Name : Ransom:Win32/GarrantDecrypt.PA!MTB (Microsoft), Ransom.Win32.TARGETCOMP.SMYXCCPT (Trend Micro)
- Encrypted File Pattern : .bozon3
- Payment Instruction File : RECOVERY INFORMATION.txt
- Major Characteristics :
- Mallox Ransomware series
- Block processes execution (fdlauncher.exe, MsDtsSrvr.exe, ntdbsmgr.exe, oracle.exe, ReportingServecesService.exe, sqlserv.exe etc.)
- Disable system restore (vssadmin.exe delete shadows /all /quiet, bcdedit /set {current} bootstatuspolicy ignoreallfailures, bcdedit /set {current} recoveryenabled no)