.Cryptohasyou virus. How to remove? (Uninstall guide)

removal by Julie Splinters - - | Type: Ransomware
12

Why should you beware of .Cryptohasyou virus?

.Cryptohasyou virus leaves no doubt that it is a dangerous virus and the one you should look out for. It comes from the ransomware branch of viruses including hundreds of virtually identical viruses such as Locky virus, Rokku and Petya. However, as some of the newer versions of the mentioned viruses have been improved to use JavaScript to run, .Cryptohasyou is still using Word Macros to activate itself. However, this by no means suggests that this virus is less dangerous. In fact, looking at other functionalities, it does not differ from more established and well-structured viruses.
.Cryptohasyou enters computers through infected email attachments. Once the downloaded file is opened it asks the user to enable Word Macros, if it is not yet enabled. It allows the virus to run a script and download an executive virus file. If you a see similar message, do not enable it! Otherwise, the virus will start scanning your computer for files and encrypting them using sophisticated AES-256 and RSA-2048 encryption codes, which are impossible to decrypt without special key. This key is of course, not accessible unless the victim pays a ransom to the virus creators. This virus may affect all sorts of files: video, audio files, pictures, documents and archives are among the main targets since they are usually of the most value to the victims.

YOUR_FILES_ARE_LOCKED.txt file added to every infected folder of the computer, after the encryption is executed. It states that the victim must pay $300 in order to retrieve the files. What is more, by every three days the sum is said to increase by $150. Of course, the money must be transferred in BitCoins, through an anonymous Tor network. However, even after paying the ransom, the victims cannot be entirely sure the access to their files will be granted. It is not uncommon for cyber criminals to simply disappear with files and the money as well. Therefore, it is not advisable to follow the ransomers’ conditions and to remove .Cryptohasyou from the computer as soon as you notice any of the signs this virus may have infected it. Use trustworthy anti-malware tools likeReimage to speed up the whole removal process.

.Cryptohasyou virus example

How is this virus distributed and how can I protect my files from it?

Peer-to-peer networks, fake email attachment and Trojans are the usual ways through which the .Cryptohasyou virus can enter your computer. The worst part is that it is almost impossible to notice your PC has been infected, and the virus is already carrying out its malicious processes in your system. You may notice system slow-downs or other small errors, but apart from that, there is no indication that your system is in danger. Therefore, security experts advise keeping a backup of your files, just in case. Also, it is advisable to obtain a reputable antivirus system to protect you from catching such viruses. It is also essential to keep your antivirus updated so that it can detect the newest and the updated older virus versions. As for the emails, do not trust your email provider to filter all the potentially hazardous content and place it into the “Spam” folder. Malicious emails may as well appear in your regular inbox, looking like legitimate correspondence. If it is already too late for you to take the mentioned precautions and you are already infected with this ransomware you must take care of the .Cryptohasyou removal before it damages your computer even more.

How can I remove .Cryptohasyou virus from my system?

To remove this infection, you must have the proper equipment. You can use the already mentioned SpyHunter or any other antivirus software you think you can trust. Scan your system with this antivirus tool and it will do the rest for you. However, you may want to disconnect your computer from the network before running the antivirus. If you are certain that .Cryptohasyou removal was thorough and successful, then you can try recovering your files from a backup. Nevertheless, you might notice that your antivirus fails to initiate. If such situation occurs, you can try following the instructions provided just below this article.

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use. By Downloading any provided Anti-spyware software to remove .Cryptohasyou virus you agree to our privacy policy and agreement of use.
do it now!
Download
Reimage (remover) Happiness
Guarantee
Download
Reimage (remover) Happiness
Guarantee
Compatible with Microsoft Windows Compatible with OS X
What to do if failed?
If you failed to remove infection using Reimage, submit a question to our support team and provide as much details as possible.
Reimage is recommended to uninstall .Cryptohasyou virus. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

More information about this program can be found in Reimage review.

More information about this program can be found in Reimage review.

Manual .Cryptohasyou virus Removal Guide:

Remove .Cryptohasyou using Safe Mode with Networking

Reimage is a tool to detect malware.
You need to purchase Full version to remove infections.
More information about Reimage.

  • Step 1: Reboot your computer to Safe Mode with Networking

    Windows 7 / Vista / XP
    1. Click Start Shutdown Restart OK.
    2. When your computer becomes active, start pressing F8 multiple times until you see the Advanced Boot Options window.
    3. Select Safe Mode with Networking from the list Select 'Safe Mode with Networking'

    Windows 10 / Windows 8
    1. Press the Power button at the Windows login screen. Now press and hold Shift, which is on your keyboard, and click Restart..
    2. Now select Troubleshoot Advanced options Startup Settings and finally press Restart.
    3. Once your computer becomes active, select Enable Safe Mode with Networking in Startup Settings window. Select 'Enable Safe Mode with Networking'
  • Step 2: Remove .Cryptohasyou

    Log in to your infected account and start the browser. Download Reimage or other legitimate anti-spyware program. Update it before a full system scan and remove malicious files that belong to your ransomware and complete .Cryptohasyou removal.

If your ransomware is blocking Safe Mode with Networking, try further method.

Remove .Cryptohasyou using System Restore

Reimage is a tool to detect malware.
You need to purchase Full version to remove infections.
More information about Reimage.

  • Step 1: Reboot your computer to Safe Mode with Command Prompt

    Windows 7 / Vista / XP
    1. Click Start Shutdown Restart OK.
    2. When your computer becomes active, start pressing F8 multiple times until you see the Advanced Boot Options window.
    3. Select Command Prompt from the list Select 'Safe Mode with Command Prompt'

    Windows 10 / Windows 8
    1. Press the Power button at the Windows login screen. Now press and hold Shift, which is on your keyboard, and click Restart..
    2. Now select Troubleshoot Advanced options Startup Settings and finally press Restart.
    3. Once your computer becomes active, select Enable Safe Mode with Command Prompt in Startup Settings window. Select 'Enable Safe Mode with Command Prompt'
  • Step 2: Restore your system files and settings
    1. Once the Command Prompt window shows up, enter cd restore and click Enter. Enter 'cd restore' without quotes and press 'Enter'
    2. Now type rstrui.exe and press Enter again.. Enter 'rstrui.exe' without quotes and press 'Enter'
    3. When a new window shows up, click Next and select your restore point that is prior the infiltration of .Cryptohasyou. After doing that, click Next. When 'System Restore' window shows up, select 'Next' Select your restore point and click 'Next'
    4. Now click Yes to start system restore. Click 'Yes' and start system restore
    Once you restore your system to a previous date, download and scan your computer with Reimage and make sure that .Cryptohasyou removal is performed successfully.

Finally, you should always think about the protection of crypto-ransomwares. In order to protect your computer from .Cryptohasyou and other ransomwares, use a reputable anti-spyware, such as Reimage, Plumbytes Anti-MalwareWebroot SecureAnywhere AntiVirus or Malwarebytes Anti Malware

About the author

Julie Splinters
Julie Splinters - Malware removal specialist

If this free removal guide helped you and you are satisfied with our service, please consider making a donation to keep this service alive. Even a smallest amount will be appreciated.

More information about the author


  • BrittanBritany

    Ransomware is the worst type of virus, in my opinion…

  • JacoBarry

    My friend just deleted this virus from his PC!!!!

    • ClaireBoucher

      Do you know what software did he use. Because I cannot get rid of it 🙁

      • JacoBarry

        I think he user SpyHunter, Im not sure tho