Vovalex is likely the first ransomware written in D

It is distributed as a warez copy of the CCleaner Windows utility. When executed, the ransomware will launch a legitimate CCleaner installer and copy itself to a random file name in the %Temp%folder.