Identify Which Ransomware Has Infected Your PC with ID Ransomware

A ransomware is a malware that infects your PC with the intent of extorting money from you in exchange of decrypting some of your files that it has encrypted or for unlocking your PC that it has locked for normal use. Of course, you should not yield to the demands of these cyber-criminals and instead seek help from security professionals to remove the ransomware infection from your PC and possibly decrypt the files encrypted by the malware.

But before you can start to remove the ransomware and repair your PC, you need to know which ransomware has infected your PC. There are so many of them and they all work in more or less the same way. Security firms like Kaspersky have created free tools to decrypt your ransomware encrypted files, but for using this you have to first identify the ransomware.

ID Ransomware

Fortunately, you can easily identify the ransomware using the ID Ransomware site. You have to upload either the ransom demand note file that asks you for money or upload one of the encrypted files to the ID Ransomware web site. It will then make a guess about the possible ransomware that could have been infecting your PC.

I uploaded one of the CryptoLocker ransomware encrypted files to the ID Ransomware web site and it displayed two possible ransomware infections – CryptoLocker and KeRanger. Each of the entries had a link pointing to an online forum that hosts some information about the ransomware.

ID Ransomware

Conclusion: While the ID Ransomware site is very helpful in identifying the ransomware infection, it lacks any links to the very helpful tools from well known security firms like Kasperksky, Trend Micro, ESET, Symantec etc.

You can visit the ID Ransomware site at