'.myjob File Extension' Ransomware

The '.myjob File Extension' Ransomware was first observed on November 25, 2018, and is practically identical to other members of its family, which have been observed in the Fall of 2018. The '.myjob File Extension' Ransomware is an encryption ransomware Trojan that belongs to a family of ransomware that combines elements of the Crysis and Dharma Ransomware families. Like most encryption ransomware Trojans, the '.myjob File Extension' Ransomware is mainly delivered to the victims using spam email attachments, often containing macro scripts that download and install the '.myjob File Extension' Ransomware onto the victim's computer. Therefore, learning to recognize and deal with spam email tactics is an essential part of protecting your PC from threats like the '.myjob File Extension' Ransomware.

How the '.myjob File Extension' Ransomware Affects Your Files

Once the '.myjob File Extension' Ransomware has been installed, this threat uses a combination of the AES and RSA encryptions to make the victim's files inaccessible. The '.myjob File Extension' Ransomware's attack targets the user-generated files, which may include a variety of media files, databases and document types. The '.myjob File Extension' Ransomware marks each file encrypted by its attack by adding the file extension '.myjob' to the file's name. The file types that the '.myjob File Extension' Ransomware targets in its attack include:

.jpg, .jpeg, .raw, .tif, .gif, .png, .bmp, .3dm, .max, .accdb, .db, .dbf, .mdb, .pdb, .sql, .dwg, .dxf, .cpp, .cs, .h, .php, .asp, .rb, .java, .jar, .class, .py, .js, .aaf, .aep, .aepx, .plb, .prel, .prproj, .aet, .ppj, .psd, .indd, .indl, .indt, .indb, .inx, .idml, .pmd, .xqx, .xqx, .ai, .eps, .ps, .svg, .swf, .fla, .as3, .as, .txt, .doc, .dot, .docx, .docm, .dotx, .dotm, .docb, .rtf, .wpd, .wps, .msg, .pdf, .xls, .xlt, .xlm, .xlsx, .xlsm, .xltx, .xltm, .xlsb, .xla, .xlam, .xll, .xlw, .ppt, .pot, .pps, .pptx, .pptm, .potx, .potm, .ppam, .ppsx, .ppsm, .sldx, .sldm, .wav, .mp3, .aif, .iff, .m3u, .m4u, .mid, .mpa, .wma, .ra, .avi, .mov, .mp4, .3gp, .mpeg, .3g2, .asf, .asx, .flv, .mpg, .wmv, .vob, .m3u8, .dat, .csv, .efx, .sdf, .vcf, .xml, .ses, .qbw, .qbb, .qbm, .qbi, .qbr , .cnt, .des, .v30, .qbo, .ini, .lgb, .qwc, .qbp, .aif, .qba, .tlg, .qbx, .qby , .1pa, .qpd, .txt, .set, .iif, .nd, .rtp, .tlg, .wav, .qsm, .qss, .qst, .fx0, .fx1, .mx0, .fpx, .fxr, .fim, .ptb, .ai, .pfb, .cgn, .vsd, .cdr, .cmx, .cpt, .csl, .cur, .des, .dsf, .ds4, , .drw, .eps, .ps, .prn, .gif, .pcd, .pct, .pcx, .plt, .rif, .svg, .swf, .tga, .tiff, .psp, .ttf, .wpd, .wpg, .wi, .raw, .wmf, .txt, .cal, .cpx, .shw, .clk, .cdx, .cdt, .fpx, .fmv, .img, .gem, .xcf, .pic, .mac, .met, .pp4, .pp5, .ppf, .nap, .pat, .ps, .prn, .sct, .vsd, .wk3, .wk4, .xpm, .zip, .rar.

Apart from the addition of the new file extension, the '.myjob File Extension' Ransomware will often add a string corresponding to a contact email to each file's name. A typical renaming pattern associated with a threat like the '.myjob File Extension' Ransomware may look something like this:

..id-.[goodjob24@foxmail.com].myjob

The '.myjob File Extension' Ransomware's Ransom Demand

The '.myjob File Extension' Ransomware delivers a ransom message in a text file named 'FILES ENCRYPTED.txt,' which the user will see on the infected computer's desktop following the encryption of the files. The ransom message contained in this text file reads:

'all your data has been locked by us
You want to decrypt?
Write to email goodjob24@foxmail.com'

Computer users must ignore the ransom demand associated with the '.myjob File Extension' Ransomware. As with most encryption ransomware Trojans, computer users should refrain from paying these ransoms, which allows criminals to continue developing and releasing threats like the '.myjob File Extension' Ransomware. Instead, computer users should take steps to protect their data by using file backups and storing these backups on secured locations. A security program also should be used to prevent threats like the '.myjob File Extension' Ransomware from being installed in the first place, and remove the '.myjob File Extension' Ransomware after its attack.