Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.



  • Please log in to reply
No replies to this topic

#1 Andrew Diaz

Andrew Diaz

    Authorized Symantec Representative

  • Members
  • 2 posts
  • Local time:06:36 PM

Posted 10 November 2009 - 05:55 PM

Hi All:

Symantec recently became aware of a new Trojan Horse called Trojan.Ramvicrype. The Trojan encrypts files on infected computers, making them completely unusable. Any file with a “.vicrypt” extension means that your system has been infected.

Trojan.Ramvicrype is different from most other ransomware programs we’ve previously identified. Usually, these kinds of threats display a message prompting users to visit a specific web page or email a specific address. Users end up paying online criminals in exchange for keys that can be used to unlock the computer or decrypt the encrypted files.

Trojan.Ramvicrype doesn’t directly demand money in return for keys. However, we found that entering the term ‘vicrypt’ into a search engine includes a company offering a fix in the search results, which of course is a charged service.

Regardless of which security software you run, use the free removal tool below if you are infected with the Trojan:

Trojan.Ramvicrype Removal Tool

Best Regards,

Andrew Diaz
Norton Outreach
Symantec Corporation

BC AdBot (Login to Remove)


0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users