How to remove 3nCRY ransomware virus

3nCRY ransomware starts attacking virtual community in autumn 2017

3nCRY ransomware is a new computer virus that seeks to encode data on victim’s computer. Once installed, it immediately starts scanning the computer system for files that have specific file extensions. Typically, it targets images, videos, documents, archives, and other valuable files.

After encrypting them, the virus adds .3nCRY file extension after the original one and leaves a ransom note called READ_ME.txt in the folder containing the encrypted files.

The ransom note provides instructions in several different languages including English, Spanish, Portuguese, Chinese and Russian^[1]. Surprisingly, criminals do not provide any contact details. Therefore, all that the victim can do is to pay 0.5 Bitcoin^[2] to the provided address and wait.

Unfortunately, it is unknown how criminals can decrypt victim’s files without unique identification number or other measures that criminals usually use. We doubt that 3nCRY ransomware authors will restore your files after receiving the payment from you, so better keep your money to yourself!

This ransomware clearly aims to extort computer users who failed to take proper security measures before ransomware attack. That is why we usually recommend installing a good anti-malware software (FortectIntego or SpyHunterCombo Cleaner), keeping programs up-to-date and creating a data backup. Without these measures, users usually lose their files forever because data encoded by crypto-ransomware hardly ever get restored without a special decryption key^[3].

We recommend you to remove 3nCRY as soon as it is possible and start looking for your data backup right away. If you do not have it, try suggested data recovery methods (below the article). Do not delay 3nCRY removal as it increases the risk of receiving even more malware on your computer.

Distribution of malicious software and ways to protect your PC

Speaking of delivery of the malicious software, ransomware travels similarly to Trojans and other illegal software. It tends to arrive in a completely different form and usually pretends to be a regular and safe file such as document (invoice, subpoena, receipt).

Such file usually arrives via email, so users should be cautious and not open random email attachments, especially those sent by strangers. Nowadays, cyber frauds no longer need to use .exe files to infect computers – they distribute files with malicious scripts that download ransomware from infected domains. Such files can be called malware downloaders.

Apart from staying away from strange-looking emails, you should not forget to install software updates on time. Criminals never skip an opportunity to exploit vulnerable systems and use security holes to transmit malicious files to computers.

In addition, you should protect your PC with anti-malware which will help to identify and stop malicious attempts to compromise your computer. Finally, create a data backup just to be sure that your files are safe in case the computer gets hit by data damaging program.

Remove 3nCRY malware from your PC

There is no better way to remove 3nCRY virus than to run a decent anti-malware software and let it scan your computer thoroughly. A good security software will identify problems and threats that might be hard to notice on your own. Wipe all the spyware and malware from your computer and finish 3nCRY removal using one of the programs listed below.