It also appends filenames with the victim's unique ID and developer's email address. DrWeb renames all encrypted files by adding the '.drweb' extension. Cyber criminals use these programs to generate revenue by encrypting victims' data and forcing them to purchase a decryption tool. DrWeb ransomware belongs to the Dharma family and was discovered by Jakub Kroustek. It is possible that this is done to discredit the name of legitimate software. DrWeb ransomware removal instructions What is DrWeb?ĭrWeb is the name of legitimate anti-virus software, however, some cyber criminals also name their ransomware 'DrWeb'.
