Browse file extensions by file type category:
Ransomware encrypted file type extensions
(201 file extension database entries)
File extensions used by various ransomware that rename the original suffix after the files are encrypted
Ransomware encrypted file extension list
File extensions used by various ransomware that rename the original suffix after the files are encrypted.
Ransomware as a concept is nothing new, and first one dates back to 1989 and was known as "AIDS". However, in recent years, this type of cyber attack increased in its intensity and nowadays cryptovirology researchers find new types or versions of ransomware every week.
The concept of ransomware basically is to covertly install malware that encrypts the victim's files and then requests a ransom payment in return for the decryption key that is needed to recover the encrypted files. However, this quickly changes and malware designers (well thieves really) come with more sophisticated ways of ransomware distribution and infection mechanisms.
Bitcoins seem to be preferred ransom choice nowadays, because it is impossible to track the recipients.
One important thing to say is that there is no guarantee that you will get your files back, even if you pay the ransom and indeed many ransomware are just pure and evil scams.
Typical ransomware encrypts user's files and changes the file suffix to something else, probably so the victim can quickly see which types of files were affected. However, this trend quickly changes and "modern" ransomware often use randomized file extension or even remove the extension completely so it is harder for the user to recognize the type of infection.
The top commonly encountered ransomware families include Teslacrypt (.micro), CTB-Locker and Cryptowall (.cryptowall, .ccc) and Locky (.locky, .zepto).
| Sort by: Extension | Sort by: File type description |
| file extension micro | TeslaCrypt 3.0 ransomware encrypted data |
| file extension loli | LOLI RanSomeWare ransomware affected file |
| file extension zepto | Locky ransomware affected data |
| file extension cerber3 | Cerber 3 ransomware affected data |
| file extension locky | Locky ransomware affected data |
| file extension axx | AxCrypt encrypted data |
| file extension cerber | Cerber ransomware affected data |
| file extension crypt | Scatter ransomware affected data |
| file extension onion | Dharma ransomware affected data |
| file extension mole | CryptoMix (variant) ransomware affected data |
| file extension cryp1 | CryptXXX ransomware affected data |
| file extension osiris | Locky (variant) ransomware affected data |
| file extension ccc | TeslaCrypt or Cryptowall encrypted data |
| file extension crypz | CryptXXX ransomware affected data |
| file extension locked | Various ransomware affected data |
| file extension pubg | PUBG ransomware affected data |
| file extension odin | Locky ransomware affected file |
| file extension cerber2 | Cerber 2 ransomware affected file |
| file extension encrypt | Alpha ransomware affected data |
| file extension globe | Globe ransomware affected file |
| file extension exx | Alpha Crypt encrypted data |
| file extension sexy | PayDay ransomware affected files |
| file extension encrypted | Various ransomware affected file |
| file extension sage | Sage ransomware affected data |
| file extension deadbolt | Deadbolt ransomware affected file |
| file extension good | Scatter ransomware affected data |
| file extension fantom | Fantom ransomware affected data |
| file extension ezz | Alpha Crypt virus encrypted data |
| file extension r5a | 7ev3n ransomware affected file |
| file extension enciphered | Malware (ransomware) encoded data |
| file extension 1txt | Enigma ransomware affected file |
| file extension enigma | Coverton ransomware affected data |
| file extension cryptowall | Encrypted file by Cryptowall ransomware |
| file extension coded | Anubis ransomware affected file |
| file extension ecc | Cryptolocker or TeslaCrypt virus encrypted file |
| file extension wallet | Globe 3 (variant) ransomware affected file |
| file extension MERRY | Merry X-Mas ransomware affected file |
| file extension zzzzz | Locky ransomware affected file |
| file extension cryptolocker | CryptoLocker encrypted file |
| file extension decrypt2017 | Globe 3 ransomware affected file |
| file extension aesir | Locky ransomware affected file |
| file extension breaking_bad | Files1147@gmail(.)com ransomware affected data |
| file extension kraken | Rakhni ransomware affected file |
| file extension damage | Damage ransomware affected file |
| file extension ha3 | El-Polocker affected file |
| file extension lol! | GPCode ransomware affected data |
| file extension wcry | WannaCry ransomware affected file |
| file extension rrk | Radamant v2 ransomware affected file |
| file extension dharma | CrySiS ransomware affected file |
| file extension maya | HiddenTear (variant) ransomware affected file |
| file extension kratos | KratosCrypt ransomware affected data |
| file extension legion | Legion ransomware affected data |
| file extension crjoker | CryptoJoker ransomware affected data |
| file extension mp3 | TeslaCrypt 3.0 ransomware encrypted data |
| file extension windows10 | Shade ransomware affected data |
| file extension MRCR1 | Merry X-Mas ransomware affected file |
| file extension LeChiffre | LeChiffre ransomware affected data |
| file extension serp | Serpent (variant) ransomware affected file |
| file extension zcrypt | ZCRYPT ransomware affected data |
| file extension keybtc@inbox_com | KeyBTC ransomware affected data |
| file extension pdcr | PadCrypt Ransomware script |
| file extension enc | TorrentLocker ransomware affected file |
| file extension crinf | DecryptorMax or CryptInfinite ransomware affected data |
| file extension ytbl | Troldesh (variant) ransomware affected file |
| file extension surprise | Surprise ransomware affected data |
| file extension potato | Potato ransomware affected file |
| file extension venusf | Venus Locker ransomware affected file |
| file extension file0locked | Evil ransomware affected file |
| file extension zzz | TeslaCrypt ransomware encrypted data |
| file extension xxx | TeslaCrypt 3.0 ransomware encrypted file |
| file extension dale | Chip ransomware affected file |
| file extension angelamerkel | Angela Merkel ransomware affected file |
| file extension lesli | CryptoMix ransomware affected file |
| file extension wflx | WildFire ransomware affected file |
| file extension remk | STOP Ransomware variant |
| file extension PEGS1 | Merry X-Mas ransomware affected file |
| file extension R16m01d05 | Ransomware affected data |
| file extension darkness | Rakhni ransomware affected data |
| file extension serpent | Serpent ransomware affected file |
| file extension rnsmwr | Gremit ransomware affected file |
| file extension xyz | TeslaCrypt ransomware encrypted data |
| file extension Dexter | Troldesh (variant) ransomware affected file |
| file extension locklock | LockLock ransomware affected data |
| file extension encr | FileLocker ransomware affected file |
| file extension derp | Derp ransomware renamed file |
| file extension evillock | Evil-JS (variant) ransomware affected file |
| file extension purge | Globe ransomware affected file |
| file extension bin | Alpha/Alfa ransomware affected data |
| file extension thor | Locky ransomware affected file |
| file extension cry | CryLocker ransomware affected data |
| file extension 1cbu1 | Princess Locker ransomware affected file |
| file extension kernel_time | KeRanger OS X ransomware |
| file extension coverton | Coverton ransomware affected data |
| file extension nuclear55 | Nuke ransomware affected file |
| file extension rekt | HiddenTear (variant) ransomware affected file |
| file extension zyklon | ZYKLON ransomware affected data |
| file extension VforVendetta | Samsam (variant) ransomware affected file |
| file extension dCrypt | DummyLocker ransomware affected file |
| file extension zorro | Zorro ransomware affected file |
| file extension raid10 | Globe [variant] ransomware affected file |
| file extension fucked | Manifestus ransomware affected file |
| file extension btc | Jigsaw Ransomware affected data |
| file extension crab | GandCrab ransomware affected data |
| file extension AngleWare | HiddenTear/MafiaWare (variant) ransomware affected file |
| file extension shit | Locky ransomware affected file |
| file extension EnCiPhErEd | Xorist Ransomware affected data |
| file extension unavailable | Al-Namrood ransomware affected file |
| file extension crypted | Nemucod ransomware affected file |
| file extension realfs0ciety@sigaint.org.fs0ciety | Fsociety ransomware affected file |
| file extension exotic | Exotic ransomware affected file |
| file extension dll | FSociety ransomware affected file |
| file extension atlas | Atlas ransomware affected file |
| file extension vbransom | VBRansom 7 ransomware affected file |
| file extension padcrypt | PadCrypt ransomware affected data |
| file extension cryeye | DoubleLocker ransomware affected data |
| file extension hush | Jigsaw ransomware affected file |
| file extension paym | Jigsaw Ransomware affected data |
| file extension vvv | TeslaCrypt 3.0 ransomware encrypted data |
| file extension enc | Cryptorium ransomware affected file |
| file extension xxx | help_dcfile ransomware affected file |
| file extension ttt | TeslaCrypt 3.0 ransomware encrypted data |
| file extension crptrgr | CryptoRoger ransomware affected data |
| file extension reco | STOP/DJVU ransomware file |
| file extension 73i87A | Xorist Ransomware affected data |
| file extension aaa | TeslaCrypt ransomware encrypted data |
| file extension abc | TeslaCrypt ransomware encrypted data |
| file extension RMCM1 | Merry X-Mas ransomware affected file |
| file extension ruby | Ruby ransomware affected file |
| file extension _AiraCropEncrypted | AiraCrop Ransomware affecte file |
| file extension stn | Satan ransomware affected file |
| file extension braincrypt | Braincrypt ransomware affected file |
| file extension spora | Spora ransomware affected file |
| file extension encrypted | Donald Trump ransomware affected file |
| file extension CCCRRRPPP | Unlock92 ransomware affected data |
| file extension bitstak | Bitstak ransomware affected data |
| file extension crypte | Jigsaw (variant) ransomware affected file |
| file extension alcatraz | Alcatraz Locker ransomware affected file |
| file extension fun | Jigsaw Ransomware affected data |
| file extension rekt | RektLocker ransomware affected data |
| file extension szf | SZFLocker ransomware affected data |
| file extension antihacker2017 | Xorist (variant) Ransomware affected file |
| file extension RARE1 | Merry X-Mas ransomware affected file |
| file extension herbst | Herbst ransomware affacted data |
| file extension pays | Jigsaw Ransomware affected data |
| file extension pzdc | Scatter ransomware affected data |
| file extension covid-19 | Phishing / ransomware file |
| file extension magic | Magic ransomware affected data |
| file extension hnumkhotep | Globe 3 ransomware affected file |
| file extension rdm | Radamant ransomware affected file |
| file extension covid19 | Phishing / ransomware file |
| file extension helpmeencedfiles | Samas/SamSam ransomware affected file |
| file extension comrade | Comrade ransomware affected file |
| file extension odcodc | ODCODC ransomware affected file |
| file extension SecureCrypted | Apocalypse ransomware affected file |
| file extension wncry | Wana Decrypt0r 2.0 ransomware affected data |
| file extension powerfulldecrypt | Samas/SamSam ransomware affected file |
| file extension rip | KillLocker ransomware affected file |
| file extension BarRax | BarRax (HiddenTear variant) ransomware affected file |
| file extension p5tkjw | Xorist Ransomware affected data |
| file extension perl | Bart ransomware affected file |
| file extension kkk | Jigsaw Ransomware affected data |
| file extension PoAr2w | Xorist Ransomware affected file |
| file extension krab | GandCrab v4 ransomware affected data |
| file extension info | PizzaCrypts Ransomware affected data |
| file extension noproblemwedecfiles​ | Samas/SamSam ransomware affected file |
| file extension kyra | Globe ransomware affected file |
| file extension a5zfn | Alma Locker ransomware affected data |
| file extension paymrss | Jigsaw Ransomware affected file |
| file extension czvxce | Coverton ransomware affected file |
| file extension rokku | Rokku ransomware affected data |
| file extension payrms | Jigsaw Ransomware affected file |
| file extension lovewindows | Globe (variant) ransomware affected file |
| file extension bript | BadEncriptor ransomware affected file |
| file extension madebyadam | Roga ransomware affected file |
| file extension vindows | Vindows Locker ransomware affected file |
| file extension conficker | Conficker ransomware affected file |
| file extension kernel_complete | KeRanger OS X ransomware data |
| file extension kimcilware | KimcilWare ransomware affected data |
| file extension dxxd | DXXD ransomware affected file |
| file extension oops | Marlboro ransomware affected file |
| file extension paymst | Jigsaw Ransomware affected file |
| file extension razy | Razy ransomware affected data |
| file extension edgel | EdgeLocker ransomware affected file |
| file extension theworldisyours | Samas/SamSam ransomware affected file |
| file extension lcked | Jigsaw (variant) ransomware affected file |
| file extension kernel_pid | KeRanger OS X ransomware data |
| file extension paymts | Jigsaw Ransomware affected file |
| file extension encrypted | KeRanger OS X ransomware affected file |
| file extension rmd | Zeta ransomware affected file |
| file extension ifuckedyou | SerbRansom ransomware affected file |
| file extension payms | Jigsaw Ransomware affected file |
| file extension Whereisyourfiles | Samas/SamSam ransomware affected file |
| file extension vxlock | vxLock ransomware affected file |
| file extension d4nk | PyL33T ransomware affected file |
| file extension adk | Angry Duck ransomware affected file |
| file extension gefickt | Jigsaw (variant) ransomware affected file |
| file extension lock93 | Lock93 ransomware affected file |
| file extension grt | Karmen HiddenTear (variant) ransomware affected file |
| file extension fun | Jigsaw (variant) ransomware affected file |
| file extension pec | PEC 2017 ransomware affected file |
| file extension kostya | Kostya ransomware affected file |
