Remove Backups Remove Consumer Services Remove Internet Remove Passwords
article thumbnail

Evolution of JSWorm ransomware

SecureList

Besides file encryption, it performs actions such as stopping a number of running processes and services to maximize the number of files available for encryption. In addition, it deletes all system backups, shadow copies, disables the system recovery mode, and clears event logs. Cryptographic scheme. Conclusion. Back up data regularly.