TraNs Ransomware
Threat Scorecard
EnigmaSoft Threat Scorecard
EnigmaSoft Threat Scorecards are assessment reports for different malware threats which have been collected and analyzed by our research team. EnigmaSoft Threat Scorecards evaluate and rank threats using several metrics including real-world and potential risk factors, trends, frequency, prevalence, and persistence. EnigmaSoft Threat Scorecards are updated regularly based on our research data and metrics and are useful for a wide range of computer users, from end users seeking solutions to remove malware from their systems to security experts analyzing threats.
EnigmaSoft Threat Scorecards display a variety of useful information, including:
Ranking: The ranking of a particular threat in EnigmaSoft’s Threat Database.
Severity Level: The determined severity level of an object, represented numerically, based on our risk modeling process and research, as explained in our Threat Assessment Criteria.
Infected Computers: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
See also Threat Assessment Criteria.
| Threat Level: | 80 % (High) |
| Infected Computers: | 916 |
| First Seen: | June 21, 2017 |
| Last Seen: | February 5, 2023 |
| OS(es) Affected: | Windows |
The TraNs Ransomware is an encryption ransomware Trojan that PC security researchers discovered in the second week of June in 2017. The TraNs Ransomware is being used against home computers rather than businesses or Web servers, which usually involves attacks from more high-profile and sophisticated threats. The TraNs Ransomware may be delivered to the victims using spam email messages. These emails may be presented as Microsoft Word document attachments, which will use corrupted scripts to download and install the TraNs Ransomware onto the victim's computer. Once the TraNs Ransomware has been installed on the victim's computer, it will carry out an attack that involves encrypting the victims' files and taking them hostage to demand the payment of a $550 USD ransom in exchange for a decryption program.
How the TraNs Ransomware Infection Works
The TraNs Ransomware will infect computers running the Windows operating system, and is capable of infecting 32-bit and 64-bit computers. The TraNs Ransomware will affect most versions of Windows in use currently and will target the user-generated files located on all local drives, external memory devices connected to the infected computer, and directories shared on a network. The files that may become compromised in a TraNs Ransomware infection include documents associated with software such as Microsoft Office, Libre Office, and Adobe Photoshop, as well as photos and other media, such as music and movies. During its attack, the TraNs Ransomware will change the affected files' names by adding one of the following two extensions to the end of each affected files' name:
'.TraNs'
'TraNs.TraNs550DonE'
After encrypting the victim's files, the TraNs Ransomware will deliver a ransom note that takes the form of a text file named 'HOW TO DECRYPT YOUR FILES.txt,' dropped on the infected computer's desktop and in directories where the TraNs Ransomware encrypted content. The following is the message contained in the TraNs Ransomware ransom note:
'ATENTION!
Many of your documents, photos, videos, databases and other files are no longer accessible because they have been encrypted.
Maybe you are busy looking for a way to recover your files, but do not waste your time.
Nobody can recover your files without our decryption service.
You must pay 550$ via BTC for the decryption key
You have 4 days to pay for my services. After this period, you will lose all your files.
Step 1 - Create an account www.localbitcoin.com
Step 2 - Buy bitcoin worth 550 USD
Step 3 - Send the amount to this address: 1F6nfAKenZvzSg7RLjM4JhuzV4Aix5i4A4
Step 4 - Contact us on this email: bkmf@gmx.com with subject : DECRYPT KEY FOR ID-CLIENT-76785007
After these steps you receive softwere + key and tutorial for decryption.
For any questions please contact us at this email address: bkmf@gmx.com'
Dealing with the TraNs Ransomware Infection
The TraNs Ransomware demands $550 USD to be paid in BitCoins. However, PC security researchers strongly advise computer users to refrain from paying these ransoms. Apart from the fact that there is no guarantee that the people responsible for the TraNs Ransomware will deliver the decryption key – they are just as likely to re-infect your computer, ignore you, or demand more money – paying these ransoms enables con artists to continue creating ransomware Trojans like the TraNs Ransomware. Instead of paying the ransom, you should recover your files from a backup copy. Having file backups on the cloud or an external memory device is the best protection against threats like the TraNs Ransomware because it allows computer users to recover from an attack and take away the power that enables these people to demand ransom payments from the victims. Besides file backups, a reliable security program that is fully up-to-date can remove the TraNs Ransomware infection, although it will not help you recover the compromised files. Since the TraNs Ransomware may be delivered using spam email messages, it is also paramount to learn how to handle this kind of unwanted content.
Submit Comment
Please DO NOT use this comment system for support or billing questions. For SpyHunter technical support requests, please contact our technical support team directly by opening a customer support ticket via your SpyHunter. For billing issues, please refer to our "Billing Questions or Problems?" page. For general inquiries (complaints, legal, press, marketing, copyright), visit our "Inquiries and Feedback" page.