'decryptgarranty@airmail.cc' Ransomware
The 'decryptgarranty@airmail.cc' Ransomware is an encryption ransomware Trojan. The 'decryptgarranty@airmail.cc' Ransomware is a variant of the GarrantyDecrypt Ransomware, an encryption ransomware variant released on October 10, 2018. The 'decryptgarranty@airmail.cc' Ransomware variant was released on November 29 of the same year, uses an identical ransom note, and seems to carry out an attack that is identical to its predecessor virtually. The 'decryptgarranty@airmail.cc' Ransomware is being distributed to the victims through corrupted spam email attachments mainly, which may use macro scripts that download and install the 'decryptgarranty@airmail.cc' Ransomware onto the victim's computer. The 'decryptgarranty@airmail.cc' Ransomware receives its name because this is the email address that the criminals use to establish contact with the victims of the attack.
How the 'decryptgarranty@airmail.cc' Ransomware Attack Works
The 'decryptgarranty@airmail.cc' Ransomware is designed to block access to the victim's files, using a strong encryption algorithm to make numerous user-generated files inaccessible. The 'decryptgarranty@airmail.cc' Ransomware attack encrypts the files, which will be marked with the file extension "'decryptgarranty"'and no longer readable. The 'decryptgarranty@airmail.cc' Ransomware's attack targets numerous file types, which may include media files, documents and databases. Threats like the 'decryptgarranty@airmail.cc' Ransomware tend to target files with a wide variety of file extensions, including the following:
.jpg, .jpeg, .raw, .tif, .gif, .png, .bmp, .3dm, .max, .accdb, .db, .dbf, .mdb, .pdb, .sql, .dwg, .dxf, .cpp, .cs, .h, .php, .asp, .rb, .java, .jar, .class, .py, .js, .aaf, .aep, .aepx, .plb, .prel, .prproj, .aet, .ppj, .psd, .indd, .indl, .indt, .indb, .inx, .idml, .pmd, .xqx, .xqx, .ai, .eps, .ps, .svg, .swf, .fla, .as3, .as, .txt, .doc, .dot, .docx, .docm, .dotx, .dotm, .docb, .rtf, .wpd, .wps, .msg, .pdf, .xls, .xlt, .xlm, .xlsx, .xlsm, .xltx, .xltm, .xlsb, .xla, .xlam, .xll, .xlw, .ppt, .pot, .pps, .pptx, .pptm, .potx, .potm, .ppam, .ppsx, .ppsm, .sldx, .sldm, .wav, .mp3, .aif, .iff, .m3u, .m4u, .mid, .mpa, .wma, .ra, .avi, .mov, .mp4, .3gp, .mpeg, .3g2, .asf, .asx, .flv, .mpg, .wmv, .vob, .m3u8, .dat, .csv, .efx, .sdf, .vcf, .xml, .ses, .qbw, .qbb, .qbm, .qbi, .qbr , .cnt, .des, .v30, .qbo, .ini, .lgb, .qwc, .qbp, .aif, .qba, .tlg, .qbx, .qby , .1pa, .qpd, .txt, .set, .iif, .nd, .rtp, .tlg, .wav, .qsm, .qss, .qst, .fx0, .fx1, .mx0, .fpx, .fxr, .fim, .ptb, .ai, .pfb, .cgn, .vsd, .cdr, .cmx, .cpt, .csl, .cur, .des, .dsf, .ds4, , .drw, .eps, .ps, .prn, .gif, .pcd, .pct, .pcx, .plt, .rif, .svg, .swf, .tga, .tiff, .psp, .ttf, .wpd, .wpg, .wi, .raw, .wmf, .txt, .cal, .cpx, .shw, .clk, .cdx, .cdt, .fpx, .fmv, .img, .gem, .xcf, .pic, .mac, .met, .pp4, .pp5, .ppf, .nap, .pat, .ps, .prn, .sct, .vsd, .wk3, .wk4, .xpm, .zip, .rar.
The 'decryptgarranty@airmail.cc' Ransomware's Ransom Demand
After the 'decryptgarranty@airmail.cc' Ransomware has encrypted the victim's files, the 'decryptgarranty@airmail.cc' Ransomware delivers a ransom note named '#RECOVERY_FILES#.txt' in the form of a text file dropped on the infected computer's desktop. The text of the 'decryptgarranty@airmail.cc' Ransomware ransom note reads:
'All your files have been ENCRYPTED
Do you really want to restore your files?
Write to our email - decryptgarranty@airmail.cc
and tells us your unique ID'
PC security specialists strongly advise computer users to refrain from paying the 'decryptgarranty@airmail.cc' Ransomware ransom or communicating with the criminals responsible for the 'decryptgarranty@airmail.cc' Ransomware attack since it is not the right decision because it only allows them to continue creating these threats and may expose you to further attacks. The criminals will often ask for thousands of dollars for the decryption key, and may not have any intention of helping the victim recover from the attack.
Preventing a 'decryptgarranty@airmail.cc' Ransomware Attack
The best protection against attacks like the 'decryptgarranty@airmail.cc' Ransomware is to have file backups stored on trustworthy places. This allows the victims of the 'decryptgarranty@airmail.cc' Ransomware to restore their data easily without contacting the criminals responsible for the 'decryptgarranty@airmail.cc' Ransomware infection. Apart from file backups, computer users should use a security program that is fully up-to-date to prevent and remove threats like the 'decryptgarranty@airmail.cc' Ransomware, even if security programs are not capable of decrypting compromised files.
