Our Blog

Share


.Rev files are RAR recovery files and can be opened by WinRar. When you do reconstruct the file, a new .rar file contains a ransomware.

 

Share


We came across with a new extension that carries Ransomware: .xz
It’s a compressed file similar to .zip and .rar and can be opened by 7zip
However our WinZip and WinRar versions were not able to open it.

This is how it looks like:

Share

Ace compressed files were popular around 2000. They can still be opened my modern decompress software. Inside this file there is an executable file
ready to encrypt your files and ask for ransom. Don’t open it. Our software will safely move this email under ‘RansomSaver’ folder in ‘Deleted Items’.

Share


A new version is under way.

New suspicious attachment ( .dzip ) found and removed by RansomSaver:

 

 

Learn more

 

We are not sure if most users will be able to open it and get infected, but we believe it's better to be safe than sorry.

Two new types of Microsoft Office Ransomware found and removed.
If you try to save the attachments on your hard disk, Kaspersky blocks them as : Trojan Downloader Agent.

 

Word_and_Excel_new_versions

 

Word_and_Excel_new_versions 2