Ramsomeer Ransomware

Posted: January 11, 2017
Threat Metric
Threat Level: 10/10
Infected PCs 84

Ramsomeer Ransomware Description

The Ramsomeer Ransomware is a Trojan most likely built off of DUMB, a GitHub-hosted 'proof of concept' for file-encrypting threats. The Trojan blocks your files with encryption and launches a window soliciting ransoms before supposedly using a corresponding decryption solution to restore them. Since this Trojan is not yet in wide deployment, PC users can protect themselves by having anti-malware products for removing the Ramsomeer Ransomware by automated means whenever it tries to infect their systems, as well as by making backups not saved to the same machine.

Turkey Starts the New Year with New Trojans

A concise and on-point message is one of the bulwarks of social engineering, and con artists can find their campaigns profiting from such techniques as much as law-abiding citizens. With the Ramsomeer Ransomware, malware experts see a new Trojan that delivers all the bare bones details of its attacks, along with additional threats, to ease the ransoming process. Like any suitably-paranoid threat actor, the Ramsomeer Ransomware's author is still using the favorite cryptocurrency of Bitcoin, making sure that taking the payment comes with no obligations on his part to honor the agreement.

The Ramsomeer Ransomware seems to be a derivative of DUMB, a file-encrypting Trojan whose author apparently developed solely as a 'proof of concept' without deploying it. Other sources report possible ties with the Android smartphone-locking Trojan Lockerpin, although malware experts can't confirm this speculation. Aside from the details of its creation, the Ramsomeer Ransomware is in development with components targeting both Turkish and English speakers. It encrypts your files with a XOR algorithm and launches a Web application-based ransom message.

The Ramsomeer Ransomware's extortion notice explains the basic situation of the infection, as well as delivering clear payment instructions (0.3 Bitcoins, equal to 236 USD) and a time limit of two days. Victims who ignore the latter will no longer have access to the decryption key, making any files not recoverable via other methods (such as backups) unreadable in perpetuity. The decryption feature also is built into the same window directly, emphasizing ease of use.

Struck with a Trojan Easily Solved

There are no current decryptors for the Ramsomeer Ransomware on offer from third parties, but the open-source nature of its associated threats makes it more possible than not that a freeware solution is forthcoming. However, for most PC users, malware researchers always endorse using thorough and rigorously updated backup strategies for counteracting all threats of this classification. Being able to restore your files from another location make any encryption damages the Ramsomeer Ransomware causes irrelevant and allows you to ignore the forty-eight-hour limit to resolve the security issue in your own time.

Always update your anti-malware solutions to help them detect newly-produced threats like the Ramsomeer Ransomware with minimal inaccuracies. Infection exploits that malware analysts also recommend being cautious around include torrent downloads, e-mail attachments, and script-based downloads that trigger through your browser automatically. Most comprehensive anti-malware products should provide adequate protection from all of these threats and remove the Ramsomeer Ransomware without its encrypting any content.

There's nothing 'dumb' about being without backup plans after a Trojan attacks your files. Readers should remember that good defense plans against Trojans like the Ramsomeer Ransomware always entails some preventative maintenance.

Use SpyHunter to Detect and Remove PC Threats

If you are concerned that malware or PC threats similar to Ramsomeer Ransomware may have infected your computer, we recommend you start an in-depth system scan with SpyHunter. SpyHunter is an advanced malware protection and remediation application that offers subscribers a comprehensive method for protecting PCs from malware, in addition to providing one-on-one technical support service.

Download SpyHunter's Malware Scanner

Note: SpyHunter's free version is only for malware detection. If SpyHunter detects malware on your PC, you will need to purchase SpyHunter's malware tool to remove the malware threats. Learn more on SpyHunter. If you would like to uninstall SpyHunter for any reason, please follow these uninstall instructions. To learn more about our policies and practices, visit our EULA, Privacy Policy and Threat Assessment Criteria.

Why can't I open any program including SpyHunter? You may have a malware file running in memory that kills any programs that you try to launch on your PC. Tip: Download SpyHunter from a clean computer, copy it to a USB thumb drive, DVD or CD, then install it on the infected PC and run SpyHunter's malware scanner.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



file.exe File name: file.exe
Size: 38.4 KB (38400 bytes)
MD5: d9eba5d7d790ee4d6550c141d2df84e6
Detection count: 55
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: January 17, 2017
Home Malware Programs Ransomware Ramsomeer Ransomware

Leave a Reply

Please note that we are not able to assist with billing and support issues regarding SpyHunter or other products. If you're having issues with SpyHunter, please get in touch with SpyHunter customer support through your SpyHunter. If you have SpyHunter billing questions, we recommend you check the Billing FAQ. For general suggestions or feedback, contact us.