What is CryptoLocker Portuguese virus and how does it function?
CryptoLocker Portuguese virus, just like its predecessor, belongs to ransomware[1] category. Once installed on a target computer system, it works silently and unnoticeably encrypts all victim’s files one after another, adding .id-[victim’s ID]_steaveiwalker@india.com_ file extensions to files on its way. We call this CryptoLocker version Portuguese because it refers to its victims in this language – the ransom note is written not in English, but in the Portuguese language. The ransom note itself is called COMO_ABRIR_ARQUIVOS.txt. In this text document, the victim finds information about the virus and what has it done to the computer and files stored in it.
The ransomware crooks who created CryptoLocker Portuguese ransomware want to get 1 Bitcoin; otherwise, they refuse to give up the decryption key, which is securely stored on their private servers. According to them, there is no way to recover files without a special decryption software, which only they can provide. They claim to be using Rijndael[2] encryption, which is simply a different name to AES encryption. They want 1 Bitcoin[3] transferred to their Bitcoin wallet, and they ask the victim to make a photo or a screenshot of a completed transaction. Then the victim is supposed to send this screenshot to steaveiwalker@india.com or steveiwalker@163.com email address and wait for decryption instructions. However, ransomware crooks give you no guarantees that they will fulfill their promises after your transfer that 1 BTC to them. They can quickly make off and take your money with them, leaving no decryption solution to you. The best way to retrieve your files is to use a backup after CryptoLocker Portuguese virus removal is finished. If you do not have a program to remove CryptoLocker Portuguese virus, we highly recommend using FortectIntego or SpyHunterCombo Cleaner.
How did I get infected?
Ransomware similar to CryptoLocker Portuguese virus spreads via email spam, malvertising[4], phishing websites[5] and pirated software. You must avoid these ransomware infection sources if you want to keep your computer safe and sound. Please stay away from emails coming from unknown people and never agree to install any type of programs sent to you via email, and of course keep clear of any files transferred to you by suspicious individuals or companies. To keep your PC protected, use anti-malware program and of course update all software regularly. Creating backups is a must, so if you do not have them yet, take care of this matter immediately!
How to remove CryptoLocker Portuguese virus?
It is imperative to remove CryptoLocker Portuguese virus correctly. This task is essential to make your computer safe to use again, so please do not try to do it in a rush. We advise you to rely on professional malware removal tools for a successful CryptoLocker Portuguese ransomware removal. Instructions on how to do it are given down below.
Was this guide helpful?
4 comments