Remove Backups Remove Consumer Services Remove Passwords Remove VPN
article thumbnail

Evolution of JSWorm ransomware

SecureList

Besides file encryption, it performs actions such as stopping a number of running processes and services to maximize the number of files available for encryption. In addition, it deletes all system backups, shadow copies, disables the system recovery mode, and clears event logs. Cryptographic scheme. Conclusion.