Ransomware: New Viruses That Demand Ransom

John Rivers
Though the trend is not new, computer security experts warn that "Ransomware" or ransom demanding malicious programs, which prevent access to the computer until the money is paid, has recently become very popular.

For most criminals obtaining money directly from the virus-infected users is often difficult. But they successfully manage to make infected computers send spam and trick the spam recipients to buy worthless products. They often manage to steal online banking passwords from infected computers. However, it takes a long time. Accordingly, the present tendency of criminals demanding money directly from virus-infected users' computers is quite often. Online security experts claim that this crime is treated almost the same as a ransom for the kidnapped man. "Give all your money or your computer's days are over" - this is a standard requirement of "ransomware".

The method was called "Ransomware" many years ago and is not new. The only thing what is new is the tendency how such type of programs work today. In December, the FBI released a report about the broader category of malicious programs - "rogueware". When such type of program infects the computer, it states to have found viruses and offers to "get rid" of them for a $50 fee. The appearance of such programs seems to be very realistic and convincing - all standard graphic elements are used in the user interface; various warnings are placed and they are made to look very dreadful. The FBI claims that last year criminals stole about $150 million using this method.

"Ransomware" works on a similar principle, but it is lot more aggressive. When it enters the computer, it does not limit itself just by offering to pay money. It simply does not allow people to use the computer as long as the money is not paid into the named account. Over the past three months the most popular was a family of programs called 'Total Security'.

The average computer user simply does not distinguish a ransom virus from antivirus programs. They look like fully functional software that can change operating system's firewall, file scanning and all other settings found in the most popular antivirus programs. For example, 'Total Security' even allows users to choose the interface language - you can choose English, Spanish and German languages.

How to fight with it?

If you are unsure whether your computer is safe from infection, try to scan your computer's memory with reliable antivirus software. If the virus blocked your computer, try to physically disconnect it from the Internet because the criminals can scan important information. Then, using other clean computer, try to find information about this malware from popular antivirus software websites. Most major manufacturers offer a free tool that can remove viruses from the infected computer via a USB memory carriers.Sources:

http://www.neatorama.com/2010/01/29/the-rise-of-ransomware/

http://redtape.msnbc.com/2010/01/turning-hijacked-computers-into-cash-is-still-hard-work-for-most-computer-criminals-theyve-got-to-trick-the-infected-pc-into.html

To comment, please sign in to your Yahoo! account, or sign up for a new account.