Defend what you create

Other Resources

Close

Library
My library

+ Add to library

Contact us
24/7 Tech support | Rules regarding submitting

Send a message

Your tickets

Profile

Back to news

NewTrojan.Encoder.21:evolution of cyber-extortionist

September 11, 2008

An entry concerning Trojan.Encoder.21 – an extortionist Trojan compromising machines of Russian Internet users – has been added to the Dr.Web virus database. The modification of the malicious program works the same way as Trojan.Encoder.20 that was described in our news earlier. Every user fallen victim of activities of the program can download a free decryption utility.

However there are a few differences between Trojan.Encoder.21 and the previous version of the malicious program. Now the crypted.txt file contains instructions to use only a specified payment system ruling out PAYPAL or cash. Trojan.Encoder.21 spreads via web-sites known to distribute Trojans. While previous versions of the program used specifically generated links this new approach can dramatically increase its spread rate.

Doctor Web advises users against transferring their money to a writer of the Trojan which would only encourage further development of the malware. In case you discover your files have been modified in the way similar to Trojan.Encoder.21 you can download a free utility that would decrypt your data.

Tell us what you think

You will be awarded one Dr.Webling per comment. To ask Doctor Web’s site administration about a news item, enter @admin at the beginning of your comment. If your question is for the author of one of the comments, put @ before their names.


Other comments

The Russian developer of Dr.Web anti-viruses

Doctor Web has been developing anti-virus software since 1992

Dr.Web is trusted by users around the world in 200+ countries

The company has delivered an anti-virus as a service since 2007

24/7 tech support

© Doctor Web
2003 — 2019

Doctor Web is the Russian developer of Dr.Web anti-virus software. Dr.Web anti-virus software has been developed since 1992.

2-12А, 3rd street Yamskogo polya, Moscow, Russia, 125040