new fake cryptolocker circulating on the internet a few days ago in the institution where my wife works they catch it with cryptolocker like virus that in all external signs resembles normal cryptolocker virus i asked her to send me several encrypted files together with their unencrypted copies to analyze them and the first thing i noticed was the difference in their size the encrypted files are smaller than the originals something that will not happen when encoding with rsa especially rsa as in the message for ransom claimed this cryptolocker simply use some sort of data compression like in rar format does anyone have more information about this virus