Loading...

Ransomware encrypted files

201 file extensions

File extensions used by various ransomware that rename the original suffix after the files are encrypted

Ransomware as a concept is nothing new, and first one dates back to 1989 and was known as "AIDS". However, in recent years, this type of cyber attack increased in its intensity and nowadays cryptovirology researchers find new types or versions of ransomware every week.

The concept of ransomware basically is to covertly install malware that encrypts the victim's files and then requests a ransom payment in return for the decryption key that is needed to recover the encrypted files. However, this quickly changes and malware designers (well thieves really) come with more sophisticated ways of ransomware distribution and infection mechanisms.

Bitcoins seem to be preferred ransom choice nowadays, because it is impossible to track the recipients.

One important thing to say is that there is no guarantee that you will get your files back, even if you pay the ransom and indeed many ransomware are just pure and evil scams.

Typical ransomware encrypts user's files and changes the file suffix to something else, probably so the victim can quickly see which types of files were affected. However, this trend quickly changes and "modern" ransomware often use randomized file extension or even remove the extension completely so it is harder for the user to recognize the type of infection.

The top commonly encountered ransomware families include Teslacrypt (.micro), CTB-Locker and Cryptowall (.cryptowall, .ccc) and Locky (.locky, .zepto).

All file extensions in category: Ransomware encrypted file

201 file extensions

_AiraCropEncrypted
._AiraCropEncrypted
AiraCrop Ransomware affected file
1cbu1
.1cbu1
Princess Locker ransomware affected file
1txt
.1txt
Enigma ransomware affected file
73i87A
.73i87A
Xorist Ransomware affected data
a5zfn
.a5zfn
Alma Locker ransomware affected data
aaa
.aaa
TeslaCrypt ransomware encrypted data
abc
.abc
TeslaCrypt ransomware encrypted data
adk
.adk
Angry Duck ransomware affected file
aesir
.aesir
Locky ransomware affected file
alcatraz
.alcatraz
Alcatraz Locker ransomware affected file
angelamerkel
.angelamerkel
Angela Merkel ransomware affected file
AngleWare
.AngleWare
HiddenTear/MafiaWare (variant) ransomware affected file
antihacker2017
.antihacker2017
Xorist (variant) Ransomware affected file
atlas
.atlas
Atlas ransomware affected file
axx
.axx
AxCrypt encrypted data
BarRax
.BarRax
BarRax (HiddenTear variant) ransomware affected file
bin
.bin
Alpha/Alfa ransomware affected data
bitstak
.bitstak
Bitstak ransomware affected data
braincrypt
.braincrypt
Braincrypt ransomware affected file
breaking_bad
.breaking_bad
Files1147@gmail(.)com ransomware affected data
bript
.bript
BadEncriptor ransomware affected file
btc
.btc
Jigsaw Ransomware affected data
ccc
.ccc
TeslaCrypt or Cryptowall encrypted data
CCCRRRPPP
.CCCRRRPPP
Unlock92 ransomware affected data
cerber
.cerber
Cerber ransomware affected data
cerber2
.cerber2
Cerber 2 ransomware affected file
cerber3
.cerber3
Cerber 3 ransomware affected data
coded
.coded
Anubis ransomware affected file
comrade
.comrade
Comrade ransomware affected file
conficker
.conficker
Conficker ransomware affected file
coverton
.coverton
Coverton ransomware affected data
covid-19
.covid-19
Phishing / ransomware file
covid19
.covid19
Phishing / ransomware file
crab
.crab
GandCrab ransomware affected data
crinf
.crinf
DecryptorMax or CryptInfinite ransomware affected data
crjoker
.crjoker
CryptoJoker ransomware affected data
crptrgr
.crptrgr
CryptoRoger ransomware affected data
cry
.cry
CryLocker ransomware affected data
cryeye
.cryeye
DoubleLocker ransomware affected data
cryp1
.cryp1
CryptXXX ransomware affected data
crypt
.crypt
Scatter ransomware affected data
crypte
.crypte
Jigsaw (variant) ransomware affected file
crypted
.crypted
Nemucod ransomware affected file
cryptolocker
.cryptolocker
CryptoLocker encrypted file
cryptowall
.cryptowall
Encrypted file by Cryptowall ransomware
crypz
.crypz
CryptXXX ransomware affected data
czvxce
.czvxce
Coverton ransomware affected file
d4nk
.d4nk
PyL33T ransomware affected file
dale
.dale
Chip ransomware affected file
damage
.damage
Damage ransomware affected file
darkness
.darkness
Rakhni ransomware affected data
dCrypt
.dCrypt
DummyLocker ransomware affected file
deadbolt
.deadbolt
Deadbolt ransomware affected file
decrypt2017
.decrypt2017
Globe 3 ransomware affected file
derp
.derp
Derp ransomware renamed file
Dexter
.Dexter
Troldesh (variant) ransomware affected file
dharma
.dharma
CrySiS ransomware affected file
dll
.dll
FSociety ransomware affected file
dxxd
.dxxd
DXXD ransomware affected file
ecc
.ecc
Cryptolocker or TeslaCrypt virus encrypted file
edgel
.edgel
EdgeLocker ransomware affected file
enc
.enc
TorrentLocker ransomware affected file
enc
.enc
Cryptorium ransomware affected file
enciphered
.enciphered
Malware (ransomware) encoded data
EnCiPhErEd
.EnCiPhErEd
Xorist Ransomware affected data
encr
.encr
FileLocker ransomware affected file
encrypt
.encrypt
Alpha ransomware affected data
encrypted
.encrypted
Various ransomware affected file
encrypted
.encrypted
KeRanger OS X ransomware affected file
encrypted
.encrypted
Donald Trump ransomware affected file
enigma
.enigma
Coverton ransomware affected data
evillock
.evillock
Evil-JS (variant) ransomware affected file
exotic
.exotic
Exotic ransomware affected file
exx
.exx
Alpha Crypt encrypted data
ezz
.ezz
Alpha Crypt virus encrypted data
fantom
.fantom
Fantom ransomware affected data
file0locked
.file0locked
Evil ransomware affected file
fucked
.fucked
Manifestus ransomware affected file
fun
.fun
Jigsaw (variant) ransomware affected file
fun
.fun
Jigsaw Ransomware affected data
gefickt
.gefickt
Jigsaw (variant) ransomware affected file
globe
.globe
Globe ransomware affected file
good
.good
Scatter ransomware affected data
grt
.grt
Karmen HiddenTear (variant) ransomware affected file
ha3
.ha3
El-Polocker affected file
helpmeencedfiles
.helpmeencedfiles
Samas/SamSam ransomware affected file
herbst
.herbst
Herbst ransomware affacted data
hnumkhotep
.hnumkhotep
Globe 3 ransomware affected file
hush
.hush
Jigsaw ransomware affected file
ifuckedyou
.ifuckedyou
SerbRansom ransomware affected file
info
.info
PizzaCrypts Ransomware affected data
kernel_complete
.kernel_complete
KeRanger OS X ransomware data
kernel_pid
.kernel_pid
KeRanger OS X ransomware data
kernel_time
.kernel_time
KeRanger OS X ransomware
keybtc@inbox_com
.keybtc@inbox_com
KeyBTC ransomware affected data
kimcilware
.kimcilware
KimcilWare ransomware affected data
kkk
.kkk
Jigsaw Ransomware affected data
kostya
.kostya
Kostya ransomware affected file
krab
.krab
GandCrab v4 ransomware affected data
kraken
.kraken
Rakhni ransomware affected file
kratos
.kratos
KratosCrypt ransomware affected data
kyra
.kyra
Globe ransomware affected file
lcked
.lcked
Jigsaw (variant) ransomware affected file
LeChiffre
.LeChiffre
LeChiffre ransomware affected data
legion
.legion
Legion ransomware affected data
lesli
.lesli
CryptoMix ransomware affected file
lock93
.lock93
Lock93 ransomware affected file
locked
.locked
Various ransomware affected data
locklock
.locklock
LockLock ransomware affected data
locky
.locky
Locky ransomware affected data
lol!
.lol!
GPCode ransomware affected data
loli
.loli
LOLI RanSomeWare ransomware affected file
lovewindows
.lovewindows
Globe (variant) ransomware affected file
madebyadam
.madebyadam
Roga ransomware affected file
magic
.magic
Magic ransomware affected data
maya
.maya
HiddenTear (variant) ransomware affected file
MERRY
.MERRY
Merry X-Mas ransomware affected file
micro
.micro
TeslaCrypt 3.0 ransomware encrypted data
mole
.mole
CryptoMix (variant) ransomware affected data
mp3
.mp3
TeslaCrypt 3.0 ransomware encrypted data
MRCR1
.MRCR1
Merry X-Mas ransomware affected file
noproblemwedecfiles​
.noproblemwedecfiles​
Samas/SamSam ransomware affected file
nuclear55
.nuclear55
Nuke ransomware affected file
odcodc
.odcodc
ODCODC ransomware affected file
odin
.odin
Locky ransomware affected file
onion
.onion
Dharma ransomware affected data
oops
.oops
Marlboro ransomware affected file
osiris
.osiris
Locky (variant) ransomware affected data
p5tkjw
.p5tkjw
Xorist Ransomware affected data
padcrypt
.padcrypt
PadCrypt ransomware affected data
paym
.paym
Jigsaw Ransomware affected data
paymrss
.paymrss
Jigsaw Ransomware affected file
payms
.payms
Jigsaw Ransomware affected file
paymst
.paymst
Jigsaw Ransomware affected file
paymts
.paymts
Jigsaw Ransomware affected file
payrms
.payrms
Jigsaw Ransomware affected file
pays
.pays
Jigsaw Ransomware affected data
pdcr
.pdcr
PadCrypt Ransomware script
pec
.pec
PEC 2017 ransomware affected file
PEGS1
.PEGS1
Merry X-Mas ransomware affected file
perl
.perl
Bart ransomware affected file
PoAr2w
.PoAr2w
Xorist Ransomware affected file
potato
.potato
Potato ransomware affected file
powerfulldecrypt
.powerfulldecrypt
Samas/SamSam ransomware affected file
pubg
.pubg
PUBG ransomware affected data
purge
.purge
Globe ransomware affected file
pzdc
.pzdc
Scatter ransomware affected data
R16m01d05
.R16m01d05
Ransomware affected data
r5a
.r5a
7ev3n ransomware affected file
raid10
.raid10
Globe [variant] ransomware affected file
RARE1
.RARE1
Merry X-Mas ransomware affected file
razy
.razy
Razy ransomware affected data
rdm
.rdm
Radamant ransomware affected file
realfs0ciety@sigaint.org.fs0ciety
.[email protected]
Fsociety ransomware affected file
reco
.reco
STOP/DJVU ransomware file
rekt
.rekt
RektLocker ransomware affected data
rekt
.rekt
HiddenTear (variant) ransomware affected file
remk
.remk
STOP Ransomware variant
rip
.rip
KillLocker ransomware affected file
RMCM1
.RMCM1
Merry X-Mas ransomware affected file
rmd
.rmd
Zeta ransomware affected file
rnsmwr
.rnsmwr
Gremit ransomware affected file
rokku
.rokku
Rokku ransomware affected data
rrk
.rrk
Radamant v2 ransomware affected file
ruby
.ruby
Ruby ransomware affected file
sage
.sage
Sage ransomware affected data
SecureCrypted
.SecureCrypted
Apocalypse ransomware affected file
serp
.serp
Serpent (variant) ransomware affected file
serpent
.serpent
Serpent ransomware affected file
sexy
.sexy
PayDay ransomware affected files
shit
.shit
Locky ransomware affected file
spora
.spora
Spora ransomware affected file
stn
.stn
Satan ransomware affected file
surprise
.surprise
Surprise ransomware affected data
szf
.szf
SZFLocker ransomware affected data
theworldisyours
.theworldisyours
Samas/SamSam ransomware affected file
thor
.thor
Locky ransomware affected file
ttt
.ttt
TeslaCrypt 3.0 ransomware encrypted data
unavailable
.unavailable
Al-Namrood ransomware affected file
vbransom
.vbransom
VBRansom 7 ransomware affected file
venusf
.venusf
Venus Locker ransomware affected file
VforVendetta
.VforVendetta
Samsam (variant) ransomware affected file
vindows
.vindows
Vindows Locker ransomware affected file
vvv
.vvv
TeslaCrypt 3.0 ransomware encrypted data
vxlock
.vxlock
vxLock ransomware affected file
wallet
.wallet
Globe 3 (variant) ransomware affected file
wcry
.wcry
WannaCry ransomware affected file
wflx
.wflx
WildFire ransomware affected file
Whereisyourfiles
.Whereisyourfiles
Samas/SamSam ransomware affected file
windows10
.windows10
Shade ransomware affected data
wncry
.wncry
Wana Decrypt0r 2.0 ransomware affected data
xxx
.xxx
help_dcfile ransomware affected file
xxx
.xxx
TeslaCrypt 3.0 ransomware encrypted file
xyz
.xyz
TeslaCrypt ransomware encrypted data
ytbl
.ytbl
Troldesh (variant) ransomware affected file
zcrypt
.zcrypt
ZCRYPT ransomware affected data
zepto
.zepto
Locky ransomware affected data
zorro
.zorro
Zorro ransomware affected file
zyklon
.zyklon
ZYKLON ransomware affected data
zzz
.zzz
TeslaCrypt ransomware encrypted data
zzzzz
.zzzzz
Locky ransomware affected file