Welcome to mirror list, hosted at ThFree Co, Russian Federation.

github.com/nextcloud/ransomware_protection.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorJoas Schilling <coding@schilljs.com>2021-05-17 10:29:10 +0300
committerJoas Schilling <coding@schilljs.com>2021-05-17 10:29:10 +0300
commit4bd0373d0f275fb287b3f78c12c403a520aa4990 (patch)
tree54c84cfcf3a5c4d6aa0c1b4be0bd9cc69390a8da /resources
parentd028cfed698a4b1f5bbe62771be02d9e7eee8aae (diff)
Also handle extension list from azureedge.net
Signed-off-by: Joas Schilling <coding@schilljs.com>
Diffstat (limited to 'resources')
-rw-r--r--resources/extensions.txt58
1 files changed, 55 insertions, 3 deletions
diff --git a/resources/extensions.txt b/resources/extensions.txt
index 5c26611..cd4448f 100644
--- a/resources/extensions.txt
+++ b/resources/extensions.txt
@@ -364,7 +364,6 @@ _ryp
install_flash_player.exe
.wkgdiba
.NEXTCRY
-\._([\d\-]+)_(.*)\.777$
(.*)\.encoded\.([A-Z0-9]{9})$
^decipher_ne@outlook\.com_
^unCrypte@outlook\.com_
@@ -377,5 +376,58 @@ hydracrypt_ID_([\w]{8})$
^(.*).encrypted.(.*)$
\.EnCrYpTeD$
^locked-(.*)\.([a-zA-Z]{4})$
-\abcde$
-^umbrecrypt_ \ No newline at end of file
+^umbrecrypt_
+.onion
+.axx
+.ccc
+.globe
+.good
+.enciphered
+.r5a
+.cryptowall
+.loli
+.lol!
+.keybtc@inbox_com
+.rrk
+.legion
+.maya
+.serp
+.ytbl
+.dale
+.pdcr
+.1cbu1
+.venusf
+.R16m01d05
+.encr
+.kernel_time
+.Dexter
+.raid10
+.realfs0ciety@sigaint.org.fs0ciety
+.atlas
+.bin
+.vbransom
+.cryeye
+.crypte
+.paym
+.spora
+.dll
+.alcatraz
+.pzdc
+.ruby
+.pays
+.rdm
+.kyra
+.kernel_complete
+.payrms
+.a5zfn
+.noproblemwedecfiles​
+.lcked
+.paymts
+.kernel_pid
+.ifuckedyou
+.conficker
+.info
+.paymrss
+.pec
+.vxlock
+.pubg