CryptoViki Ransomware

CryptoViki Ransomware Description

The CryptoViki Ransomware is part of a large family of ransomware that is growing rapidly. Like many other ransomware Trojans, the CryptoViki Ransomware may be delivered to its victims through the use of spam email attachments. Once the CryptoViki Ransomware enters a computer, it will encrypt the victim's data systematically. The CryptoViki Ransomware does this to demand a ransom payment from the victim in exchange for the decryption key that is needed to recover the affected files. Effectively, ransomware Trojans like the CryptoViki Ransomware take the victims' files hostage and then extort the victims, demanding a large ransom. Although it is still not clear who is responsible for the CryptoViki Ransomware attack, there are clear relationships between the CryptoViki Ransomware and other recently released ransomware Trojans.

How the CryptoViki Ransomware Attacks a Computer

Victims of the CryptoViki Ransomware infection may first receive an email message with an attachment or embedded link, often using some social engineering tactic to trick the victim into opening the attached content. When the victim does this, the macros in the attachment will download and install the CryptoViki Ransomware on the victim's computer. To begin its attack, the CryptoViki Ransomware will make an index of all files on the victim's computer that are eligible for its encryption attack. The CryptoViki Ransomware targets user generated files and looks for image, media, text, database files, as well as many other types of content. Using a fusion of the RSA and AES encryptions, the CryptoViki Ransomware will make the victim's files completely inaccessible, encrypting them and storing the encryption key (which is itself encrypted with a different encryption algorithm) to its Command and Control server and away from the victim's reach. This is an encryption technique that is typical of most ransomware Trojans active today. The files encrypted by the CryptoViki Ransomware will have the file extension '.viki' added to the end of their file names, making it simple to identify a CryptoViki Ransomware infection and to know which files have been encrypted in the attack.

How Con Artists may Profit from a CryptoViki Ransomware Infection

After encrypting its victims' files, the CryptoViki Ransomware will demand payment of a ransom. To do this, the CryptoViki Ransomware drops a text file named 'readme.txt' on the infected computer's desktop. This file contains the following text:

'Your files have been encrypted.
To decrypt them, You need to write a letter
to the email address cryptoviki@gmail.com .
Next, you will receive all necessary instructions.
Attempts to decipher alone will not lead to anything other than irretrievable loss of information.
If you still want to try, make a backup of the files, or in the case they change the decryption will be impossible under any circumstances.

It is important to refrain from following the instructions in the CryptoViki Ransomware file. Paying these ransoms allows the extortionists to continue creating threats like the CryptoViki Ransomware. Furthermore, there is no guarantee that these people will restore the affected data after the ransom is paid. They are just as likely to ask for more money, ignore the victim, or reinfect the victim's computer.

Dealing with a CryptoViki Ransomware Infection

If the CryptoViki Ransomware has been installed on your computer, PC security analysts strongly advise removing it with a security product that is fully up-to-date. After the CryptoViki Ransomware has been removed, the affected files should be replaced with backup copies. Backup copies of all files are the single best protection against threats like the CryptoViki Ransomware since it removes any power the con artists have over the victim completely. If computer users can restore their files from a backup, then the extortionists have no leverage over the victim. In fact, once file backups become used by all computer users commonly, ransomware attacks like the CryptoViki Ransomware will become ineffective, and the con artists will have to find a different way of extorting computer users.

Infected with CryptoViki Ransomware? Scan Your PC for Free

Download SpyHunter's Spyware Scanner
to Detect CryptoViki Ransomware
* SpyHunter's free version is only for malware detection. If SpyHunter detects malware on your PC, you will need to purchase SpyHunter's malware removal tool to remove the malware threats. Read more on SpyHunter. If you no longer wish to have SpyHunter installed on your computer, follow these steps to uninstall SpyHunter.

Security Doesn't Let You Download SpyHunter or Access the Internet?


Solutions: Your computer may have malware hiding in memory that prevents any program, including SpyHunter, from executing on your computer. Follow to download SpyHunter and gain access to the Internet:
  • Use an alternative browser. Malware may disable your browser. If you're using IE, for example, and having problems downloading SpyHunter, you should open Firefox, Chrome or Safari browser instead.
  • Use a removable media. Download SpyHunter on another clean computer, burn it to a USB flash drive, DVD/CD, or any preferred removable media, then install it on your infected computer and run SpyHunter's malware scanner.
  • Start Windows in Safe Mode. If you can not access your Window's desktop, reboot your computer in "Safe Mode with Networking" and install SpyHunter in Safe Mode.
  • IE Users: Disable proxy server for Internet Explorer to browse the web with Internet Explorer or update your anti-spyware program. Malware modifies your Windows settings to use a proxy server to prevent you from browsing the web with IE.

If you still can't install SpyHunter? View other possible causes of installation issues.

Technical Information

File System Details

CryptoViki Ransomware creates the following file(s):
# File Name Size MD5 Detection Count
1 file.exe 73,728 696452bdc9b90e64b76b69ef02ad5afb 37

Site Disclaimer

Leave a Reply

Please DO NOT use this comment system for support or billing questions. For SpyHunter technical support requests, please contact our technical support team directly by opening a customer support ticket via your SpyHunter. For billing issues, please refer to our "Billing Questions or Problems?" page. For general inquiries (complaints, legal, press, marketing, copyright), visit our "Inquiries and Feedback" page.

IMPORTANT! To be able to proceed, you need to solve the following simple math.
Please leave these two fields as is:
What is 11 + 10 ?