How to remove EnkripsiPC ransomware virus

Crucial facts about EnkripsiPC ransomware

EnkripsiPC virus is a new file-encrypting malware which mainly targets Indonesian users since the ransom message is published in the respective language. It clearly follows the manner of CryptoLocker since the ransom note has a striking resemblance to the mentioned virus. Though the former ransomware is said to have ended its notorious activity ^[1], its termination has inspired countless hacker wannabees to maintain the activity of file-encrypting malware. Interestingly, that this time the virus originates from Indonesia. The source contains the information that the virus encodes all files named in the Indonesian language. Nonetheless, it does not mean that users living in other regions are safe from this virtual menace. After the malware gets into a computer, it marks all files with .fucked file extensions. If you notice that all your files are blocked and contain the previous extension, do not panic but instead concentrate on EnkripsiPC removal. For that purpose, it would be better to rely on FortectIntego. This application will effectively remove EnkripsiPC and all its components.

CryptoWall, CryptoLocker, and Locky gave rise for the boom of ransomware which encrypt the files using AES algorithm. The effectiveness of such virtual threats lies in several factors. Firstly, the hackers communicate via the network granting anonymity or single-use email addresses. Secondly, AES encryption is easy to use but provide elaborate and difficult decryption keys which cannot be guessed. What is more, vivid and huge informational resources covering this particular topic enlightened many interested users on how to simply encode the files ^[2].

Likewise, ransomware business is booming. Though the market is controlled by several cyber gangs which regularly publish a new version of Locky (the latest – Osiris ransomware) and Cerber, the idea of profiting from ransomware appeals to the bright minds of different nationals. While US, UK, Germany, France, Japan and South Koreans and other nationals from wealthy states are a prevalent target, the crook started to take a glance to other countries of ^[3]. In this regard, this virus, alternatively known as Indonesian ransomware, v3 virus, or IDRANSOMv3 malware, also exclusively prefers targeting Indonesia netizens. For now.

Furthermore, the hacker introduces themselves as humanpuff69. However, it is not known whether the ransomware will evolve into a major threat or it will flash like a temporary manifestation of a protest against something or someone. In comparison with the previous threat, it does not set a time limit. What is more, it demands a ridiculously low ransom – 50 000 or 100 000 Indonesian rupiahs which stand for approximately 4 USD and 7 dollars respectively. Even if the amount seems to be very low, do not expect to get your files back ^[3]. What is more, EnkripsiPC ransomware developers provide three email addresses in case you decide to contact them: fulldoang@gmail.com, mgfakhri@gmail.com, and muhlubaid69@gmail.com. Believe it or not, but the gearheads even provide their Facebook profile – muhammad.f.nazeeh. All in all, this ransomware does not compete with other notorious ransomware, but certain features suggest that with enough attention and development, EnkripsiPC malware might even evolve into a serious threat.

Distributing the malware

Though spam emails remain to be the main channel for spreading this sort of malware ^[4], this virtual infection seems to employ less popular methods of infiltration. Specifically, EnkripsiPC hijack might occur if you are not careful and install questionable tools. Virus researchers have detected that it might sneak into the device via corrupted installers, such as Installer Install Program. Afterward, Enkripsi PC malware leaves AutoUBLhack0.97.exe and CheatPBG161218.exe binaries. Then it becomes only a matter of time when the virus entangles your system.

EnkripsiPC eradication procedure

Due to the multiple new file-encrypting threats, the ransomware market has become one of the most profitable ones ^[5]. Fortunately, not all threats are complex. In this regard, EnkripsiPC removal should not cause any inconveniences if you entrust the procedure to FortectIntego or MalwarebytesMalwarebytes. Update the program before the scanning the device. After that, restart the device and repeat the procedure. Keep in mind that the program does not decrypt the files. For that, you might use backups or additional tools. Check out our recommendations below. Remove EnkripsiPC virus fully and proceed to data recovery procedure.