Digita_Cure 1.3
Deal with malware belonging to the family Trojan-Ransom.Win32.Digitala
Advertisements
Sponsored Links
Digita_Cure is a simple yet powerful utility that was designed in order to help you fight off Trojan-Ransom.Win32.Digitala malware infections.
Malware belonging to the family Trojan-Ransom.Win32.Digitala (Get Accelerator, Digital Access, Get Access, Download Manager v1.34) compromises systems to demand a ransom.
Malware belonging to the family Trojan-Ransom.Win32.Digitala blocks access to the Internet and displays a message about breach of a license agreement. The message contains a demand to send a SMS with a certain code to a certain number in order to unblock access to the Internet.
The family Trojan-Ransom.Win32.Digitala has several types of blockers:
Digital Access
Get Accelerator
Get Access
Download Manager v1.34
Ilite Net Accelerator
It is highly probable that the invader will be displaying messages in Cyrillic.
Signs of infection
This malware can penetrate computers either through user's actions or silently:
This malware can penetrate user computers through user's actions. For example, a user can initiate installation of an allegedly legal program claiming to be Digital Access. When such “disguised” program is run, it displays a license agreement. By agreeing with this license agreement, the user allow to infect the system.
It can also invade without user's participation with aid of other malicious programs (Get Access) by self-downloading and performing a silent installation.
It will then display a message demanding to send a SMS in order to receive an activation code which would permit to activate the installed software.
The message may be displayed immediately or within 6 hours.
Within 5 minutes after displaying that message, the malware will force a PC reboot and block access to the Internet.
It will create a new folder named {ffffffff-F03B-4b40-A3D0-F62E04DD1C09} in the system registry (path HKEY_LOCAL_MACHINE->SOFTWARE->Microsoft->Windows->Current Version->Uninstall) containing uninstaller path.
The value of the variable "UninstallString" is stored in the field Data.
