Intrusion Prevention

Crypmodadv.Botnet

Description

This indicates that a system might be infected by Crypmodadv Botnet.
Crypmodadv is a ransomware. It will encrypt important files on the victims system and will only provide a password to recover encrypted files after paying a certain amount to the owner.

Affected Products

Any unprotected Windows system is vulnerable to the attack.

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

If required, the signature's action can be set to "Block".
Please use Anti-Virus software to scan and clean the infected devices.