Asasin Ransomware

We want to inform you about a newly found ransomware-type computer malware called Asasin Ransomware. This application is no different from thousands of other ransomware because it was configured to encrypt your personal files and then demand that you pay a ransom to get a decryption key. The problem is, however, that there is no guarantee that you will get the promised key because the cybercriminals can trick you. Therefore, you ought to remove this ransomware as soon as you can. Please continue reading to find out more about this malware.

If your PC were to become infected with Asasin Ransomware, then it would start encrypting your files immediately. According to its ransom note, this ransomware uses the AES-128 and RSA-2048 ciphers to encrypt your files. The resulting encryption can be quote strong, so decrypting your files can be a difficult or even impossible task, unless you buy the decryption key from the cyber criminals of course. This ransomware can encrypt images, videos, audios, databases, file archives, executables, documents, and many other file types in an effort to make you want to pay the ransom to get your files back.

While encrypting your files, Asasin Ransomware adds a unique “.asasin” file extension to each encrypted file as a way to mark which files have been encrypted. In addition, this program is set to change the original names of the encrypted files. This program uses a naming pattern that looks like [8 characters]-[4 characters]-[4 characters]-[8 characters]-[12 characters].asasin. The first three sections are the user’s ID, and the rest are randomly generated character strings. This application as also set to drop asasin.htm and asasin.bmp on your desktop. The asasin.bmp is also set to replace the desktop background image. Both of these files contain the same text and contain instructions on how to pay the ransom. The cyber criminals behind this ransomware want you to pay 0.25 Bitcoins which is an approximate 1,400 USD. The criminals want you to pay a significant sum of money, so you have to decide whether it is worth taking the risk because the chance of you not receiving the promised decryption key is high.

Now let us discuss how this ransomware might be distributed. Truth be told, there is not enough information to determines the exact methods used to distribute it. We have received information claiming that this ransomware might be distributed using email spam which is possible because that is how most ransomware-type infections are distributed. We have found that this ransomware may be sent from documents@rightsignature.com and the subject line reads “Document invoice_95649_sign_and_return.pdf is complete.” As you can see, the email implies that you have received a PDF document. However, the fake document might actually be an EXE file, so do not open it under any circumstances.

That is all of the information we currently have on Asasin Ransomware. As you can see, it can get onto your PC via deceptive emails and then encrypt your files in order to demand that you pay a ransom. However, you should not attempt to pay it because the criminals might not send you the decryption key. Therefore, we recommend that you remove this program from your PC as soon as the opportunity arises. See the guide below on how to use SpyHunter’s free scanner to detect this ransomware so you could delete it manually.

Removal Instructions

1. Open your web browser.
2. Go to http://www.pcthreat.com/download-sph
3. Download SpyHunter-Installer.exe and run it.
4. Launch the program and click Scan Computer Now!
5. Copy the file path of the malware from the scan results.
6. Simultaneously press Windows+E keys.
7. Enter the file path of the malware in File Explorer’s address box.
8. Press Enter.
9. Find and right-click the malicious file and then click Delete.
10. Empty the Recycle Bin.