BeethoveN Ransomware

The BeethoveN Ransomware is an encryption ransomware Trojan that is based on HiddenTear, an open source ransomware platform that has spawned countless ransomware variants since its first appearance in August 2015. The BeethoveN Ransomware has numerous variants, and there is very little to differentiate the BeethoveN Ransomware from other HiddenTear variants. The BeethoveN Ransomware was first observed on June 11, 2017. Unfortunately, once the BeethoveN Ransomware encrypts the victims' files, they will be no longer recoverable.

This Beethoven Symphony will Hurt Your Files

The BeethoveN Ransomware carries out a typical ransomware tactic, which involves encrypting the victims' files and then demanding the payment of a large ransom from the victim. The BeethoveN Ransomware uses a strong encryption method that cannot be decrypted without access to the decryption key. The BeethoveN Ransomware may be delivered using corrupted email attachments contained in spam email campaigns. The BeethoveN Ransomware will identify the files that have been encrypted in its attack with the file extension 'BeethoveN' added to the end of each affected file's name as an extension. The BeethoveN Ransomware will encrypt a wide variety of file types in its attack, targeting user-generated files but preserving the files that are necessary for Windows to function.

How the BeethoveN Ransomware Demands Payment from Its Victims

The main purpose of the BeethoveN Ransomware is to demand the payment of a ransom from the victims, with a payment made out using BitCoin. After encrypting the victims' files, the BeethoveN Ransomware will display a program window named 'BeethoveN' and the following instructions for payment:

'YOUR FILES HAVE BEEN ENCRYPTED
All your personal files have been encrypted. You can find a list of them in FILEUST.txt on your desktop ♪
They have been encrypted with military grade AES-256 bit encryption, combined with RSA-2048 bit encryption. This encryption is impossible to break without the private key ♪
The unique private key for your files is stored on our servers, however it will be deleted exactly 168 hours after the encryption process finished ♪
Unless you have recent backups, thee is no way to recover those files which have been lost without the private key ♪
To get the private key (and recover your files), you must pay a ransom, which you can do from our website ♪
After you make the online payment, click Decrypt Files and we will verify with the server that the payment was successful. The private key will then be downloaded from the server and be used to automatically decrypt all your files ♪
Please visit xxxx://127.0.0.1:8030 in your web browser and login with the ID below to decrypt your files ♪
ANY ATTEMPTS TO REMOVE THIS PROGRAM MAY RESULT IN YOUR PRIVATE KEY BEING PERMANENTLY INACCESSIBLE, MEANING YOU CAN NEVER RECOVER YOUR FILES ♪
It is recommended that you do not shutdown your computer until you have successfully paid for and decrypted your files. In the event that this program is closed, you can find a copy on your desktop named BeethoveN.exe which you can use to decrypt your files
[xxxxs://soltec6d5qinsppi.hiddenservice.net/]
REFERENCE ID: 123
button [Decrypt Files]'

After the victim agrees to pay the ransom and clicks on the 'Decrypt Files' button, the following message will appear on the victim's computer:

'Files Decypted
Thankyou for choosing to decrypt your files. If any have been missed, please place them on your desktop then click "Rescan" to decrypt them ♪
Have a nice day 🙂 ♪
button [Rescan]
button [Select File Manually]'

Dealing with the BeethoveN Ransomware

Unfortunately, since the files affected by the BeethoveN Ransomware attack cannot be decrypted, affected computer users should take steps to prevent the BeethoveN Ransomware infection and its harmful effects. Having file backups is the best protection against the BeethoveN Ransomware and other encryption ransomware Trojans. If a computer user can recover the affected files from the backup, then the people responsible for the BeethoveN Ransomware attack lose any power they enjoy over the victim that allows them to demand a ransom payment.

SpyHunter Detects & Remove BeethoveN Ransomware