'.cryptes File Extension' Ransomware
The '.cryptes File Extension' Ransomware is an encryption ransomware Trojan that was first observed on July 25, 2018. The '.cryptes File Extension' Ransomware is a variant of HiddenTear, an open source ransomware platform that has been responsible for countless ransomware variants in recent years. It is important to take precautions against threats like the '.cryptes File Extension' Ransomware, which has the potential to prevent you from accessing your files permanently.
How You Will Know that Your PC was Attacked by the '.cryptes File Extension' Ransomware
The '.cryptes File Extension' Ransomware typically enters a computer after the victim opens an unsolicited email attachment. Once the '.cryptes File Extension' Ransomware has been installed, the '.cryptes File Extension' Ransomware will use the AES 256 encryption to make the victim's files inaccessible. The '.cryptes File Extension' Ransomware will let the attacked files marked with the file extension '.cryptes,' which will be added to the end of each file's name. The '.cryptes File Extension' Ransomware targets the user-generated files, which may include files with the following file extensions:
.ebd, .jbc, .pst, .ost, .tib, .tbk, .bak, .bac, .abk, .as4, .asd, .ashbak, .backup, .bck, .bdb, .bk1, .bkc, .bkf, .bkp, .boe, .bpa, .bpd, .bup, .cmb, .fbf, .fbw, .fh, .ful, .gho, .ipd, .nb7, .nba, .nbd, .nbf, .nbi, .nbu, .nco, .oeb, .old, .qic, .sn1, .sn2, .sna, .spi, .stg, .uci, .win, .xbk, .iso, .htm, .html, .mht, .p7, .p7c, .pem, .sgn, .sec, .cer, .csr, .djvu, .der, .stl, .crt, .p7b, .pfx, .fb, .fb2, .tif, .tiff, .pdf, .doc, .docx, .docm, .rtf, .xls, .xlsx, .xlsm, .ppt, .pptx, .ppsx, .txt, .cdr, .jpe, .jpg, .jpeg, .png, .bmp, .jiff, .jpf, .ply, .pov, .raw, .cf, .cfn, .tbn, .xcf, .xof, .key, .eml, .tbb, .dwf, .egg, .fc2, .fcz, .fg, .fp3, .pab, .oab, .psd, .psb, .pcx, .dwg, .dws, .dxe, .zip, .zipx, .7z, .rar, .rev, .afp, .bfa, .bpk, .bsk, .enc, .rzk, .rzx, .sef, .shy, .snk, .accdb, .ldf, .accdc, .adp, .dbc, .dbx, .dbf, .dbt, .dxl, .edb, .eql, .mdb, .mxl, .mdf, .sql, .sqlite, .sqlite3, .sqlitedb, .kdb, .kdbx, .1cd, .dt, .erf, .lgp, .md, .epf, .efb, .eis, .efn, .emd, .emr, .end, .eog, .erb, .ebn, .ebb, .prefab, .jif, .wor, .csv, .msg, .msf, .kwm, .pwm, .ai, .eps, .abd, .repx, .oxps, .dot.
The '.cryptes File Extension' Ransomware's Ransom Demand
The '.cryptes File Extension' Ransomware attack's purpose is to demand a ransom payment from the victim. The '.cryptes File Extension' Ransomware delivers a ransom note named 'HOW TO DECRYPT ALL MY FILES.txt,' which will be dropped on the infected computer's desktop. The'.cryptes File Extension' Ransomware ransom note demands that the victim contact the criminals via email and make a ransom payment using Bitcoin reads:
'All your files have been encrypted!
All your files have been encrypted due to a security problem with your PC. If you want to restore them, write us to the e-mail: dekode@qq.com
In case of no answer in 24 hours write us to theese e-mails: supdecrypt@foxmail.com or supportdecryption@cock.li
You have to pay for decryption in Bitcoins. The price depends on how fast you write to us. After payment we will send you the decryption tool that will decrypt all your files.
Free decryption as guarantee
Before paying you can send us up to 5 files for free decryption. The total size of files must be less than 10Mb (non archived), and files should not contain valuable information. (databases,backups, large excel sheets, etc.)
How to obtain Bitcoins
The easiest way to buy bitcoins is LocalBitcoins site. You have to register, click 'Buy bitcoins', and select the seller by payment method and price.
hxxps://localbitcoins[.]com/buy_bitcoins
Also you can find other places to buy Bitcoins and beginners guide here:
hxxp://www.coindesk[.]com/information/how-can-i-buy-bitcoins
Attention!
Do not rename encrypted files.
Do not try to decrypt your data using third party software, it may cause permanent data loss.
Decryption of your files with the help of third parties may cause increased price (they add their fee to our) or you can become a victim of a scam.'
Computer users should ignore the contents of this ransom note. The best way to deal with the '.cryptes File Extension' Ransomware and similar threats is to have file backups. Backups enable you to restore any compromised data without having to interact with the criminals responsible for the attack.
