FenixLocker is another ransomware virus that encrypts files using AES cryptography. During encryption, FenixLocker adds the extension ".firstname.lastname@example.org" to the names of compromised files. After successful encryption, FenixLocker creates a text file ("Help to decrypt.txt" or "Cryptolocker.txt"), which contains a ransom note and is placed on the desktop. The updated variants of this ransomware use the extensions ".[email@example.com]" and ".firstname.lastname@example.org!!!" for encrypted files.