Recoverydatas Ransomware

Recoverydatas Ransomware Description

The Recoverydatas Ransomware is yet another threatening malware that has been created by using the infamous Scarab Ransomware as a base. Compared to Scarab, Recoverydatas shows little improvements or changes. The Recoverydatas Ransomware doesn't need to, though, as it can cause significant damage to any system it managed to infiltrate.

Victims of the Recoverydatas Ransomware will suddenly find that all of their private or business-related files have completely different names. Indeed, Recoverdatas substitutes the original name of every file it encrypts with a random string of characters followed by the '.recoverydatas' extension. It drops a ransom note with instructions from the hackers in the form of text files named 'HOW TO RECOVER ENCRYPTED FILES.TXT.'

According to the note, affected users are expected to initiate communication by sending a message to the provided email address - 'recoverydatas@bk.ru.' Although no specific sum is mentioned for the ransom, the hackers state that the payment must be made in Bitcoin, arguably the most popular cryptocurrency. Victims can send up to three files that do not contain important data and do not exceed 10 MB in size to be decrypted for free.

The text on the ransom note of the Recoverydatas Ransomware is:

'Your All files are now encrypted!

 Your personal identifier:

 All your files have been encrypted due to a security problem with your PC.

 Now you should send us email with your personal identifier.

This email will be as confirmation you are ready to pay for decryption key.

You have to pay for decryption in Bitcoins. The price depends on how fast you write to us.

After payment we will send you the decryption tool that will decrypt all your files.

 Contact us using this email address: recoverydatas@bk.ru

 with email pls send your ip adres :

 Free decryption as guarantee!

Before paying you can send us up to 3 files for free decryption.

The total size of files must be less than 10Mb (non archived), and files should not contain

valuable information (databases, backups, large excel sheets, etc.).

 How to obtain Bitcoins?

 * The easiest way to buy bitcoins is LocalBitcoins site. You have to register, click

   'Buy bitcoins', and select the seller by payment method and price:

   hxxps://localbitcoins.com/buy_bitcoins

 * Also you can find other places to buy Bitcoins and beginners guide here:  

   hxxp://www.coindesk.com/information/how-can-i-buy-bitcoins

 Attention!  

 * Do not rename encrypted files.

 * Do not try to decrypt your data using third party software, it may cause permanent data loss. 

 * Decryption of your files with the help of third parties may cause increased price 

   (they add their fee to our) or you can become a victim of a scam.'

Leave a Reply

Please DO NOT use this comment system for support or billing questions. For SpyHunter technical support requests, please contact our technical support team directly by opening a customer support ticket via your SpyHunter. For billing issues, please refer to our "Billing Questions or Problems?" page. For general inquiries (complaints, legal, press, marketing, copyright), visit our "Inquiries and Feedback" page.


HTML is not allowed.