Categories
Security

Shrug ransomware attack

ZDNet is reporting that Shrug ransomware is spreading through fake gaming and other software apps starting in July 2018.  The installer program runs as C:\Users\USERNAME\AppData\Local\Temp\shrug.exe and creates “Shrug” entries in the Windows registry.

Instructions on how to disable and remove this ransomware can be found at https://www.zdnet.com/article/shrug-ransomware-victim-heres-how-to-retrieve-your-locked-files-for-free/.