FenixLocker

FenixLocker is another ransomware virus that encrypts files using AES cryptography. During encryption, FenixLocker adds the extension ".centrumfr@india.com" to the names of compromised files. After successful encryption, FenixLocker creates a text file ("Help to decrypt.txt" or "Cryptolocker.txt"), which contains a ransom note and is placed on the desktop. The updated variants of this ransomware use the extensions ".[help24decrypt@cock.li]" and ".help24decrypt@qq.com!!!" for encrypted files.