Computers on Focus - Online Security Guide

08:40 am
29 March 2023

ProposalCrypt Ransomware Virus Removal Instructions

The Proposalcrypt ransomware is a new malware virus which can deal a lot of damage to the computer victims. Read our removal guide for more information about it.

About The ProposalCrypt Ransomware

Malware researchers have discovered a new virus threat known as the ProposalCrypt ransomware. This virus is of unknown origin and is still under investigation by the experts.

Like other famous ransomware variants it encrypts target user data. The list of the file types it affects include the following:

.001, .3fr, .7z, .accdb, .ai, .apk, .arch00, .arw, .asset, .avi, .bar, .bay, .bc6, .bc7, .big, .bik, .bin, .bkf, .bkp, .blob, .bsa, .c, .cab, .cas, .cdr, .cer, .cfr, .class, .con, .cpp, .cpp, .cr2, .crt, .crw, .cs, .cs, .css, .csv, .d3dbsp, .das, .DayZProfile, .dbf, .db0, .dcr, .der, .desc, .dmp, .dng, .doc, .docm, .docx, .dwg, .dxq, .epk, .eps, .erf, .esm, .exe, .ff, .flv, .forge, .fos, .fpk, .fsh, .gdb, .gho, .gif, .h, .hkdb, .hkx, .hplg, .htm, .html, .hvpl, .ibank, .icxs, .im, .indd, .iso, .itdb, .itl, .itm, .iwd, .iwi, .jar, .java, .jpe, .jpeg, .jpg, .js, .kdc, .kf, .layout, .lbf, .litemod, .lnq, .lrf, .ltx, .lvl, .m2, .m3u, .m4a, .map, .mcgame, .mcmeta, .mdb, .mdbackup, .mddata, .mdf, .mef, .menu, .mlx, .mp3, .mp4, .mpq, .mpqge, .mrwref, .ncf, .nrw, .ntl, .odb, .odc, .odm, .odp, .ods, .odt, .orf, .p12, .p7b, .p7c, .pak, .pdd, .pdf, .pef, .pem, .pfx, .pkpass, .png, .png, .ppt, .pptm, .pptx, .psd, .psk, .pst, .ptx, .py, .qdf, .qic, .r3d, .raf, .rar, .raw, .re4, .rgss3a, .rim, .rofl, .rtf, .rw2, .rwl, .sav, .sb, .sb, .sc2save, .sid, .sidd, .sidn, .sie, .sin, .sis, .slm, .snx, .sql, .sr2, .srf, .srw, .sum, .svg, .syncdb, .t12, .t13, .tax, .tor, .torrent, .ttarch2, .txt, .unity3d, .upk, .vdf, .vfs0, .vpk, .vpp_pc, .vtf, .w3x, .wb2, .wma,.wmk, .wmo, .wmo, .wmv, .wotreplay, .wpd, .wps, .x3f, .xf, .xlk, .xls, .xlsb, .xlsm, .xlsx, .zip, .ztmp

The compromised files are renamed by the encryption engine with the .crypted extension. The criminal operators of the ransomware extort the users for a fee of 1 Bitcoin.

The following ransomware note is displayed to the victim:

!!!Warning Message!!!
We are sorry to say that your computer and your files have been encrypted but wait, don’t worry. There is a way that you can restore your computer and all of your files
To get your files fast, please transfer 1 Bitcoin to our wallet address
and click “Check Wallet and Decrypt files” button.
Payment should be confirmed in about 2 hours after payment made.

Check Wallet and Decrypt files

How to buy Bitcoins?
Please check this website xxxxs:// where you can find Bitcoin ATM all over the world.

How Does The ProposalCrypt Ransomware Infect Computers

The ProposalCrypt ransomware does not use any non-traditional means of infecting the target hosts. The main disitrubtion methods include spam email messages, browser hijackers, malicious ads and etc.

How To Remove The ProposalCrypt Ransomware and Recover Affected Files

To remove Braincrypt infections from your computer you need to use a trusted anti-spyware tool. There are other software which can also help you out in this situation to a limited extent such as:

  • Data Recovery Tools
  • Network Sniffers
  • Backups

DOWNLOAD REMOVAL TOOL FOR ProposalCrypt Ransomware
The free version of SpyHunter will only scan your computer to detect any possible threats. To remove them permanently from your computer, purchase its full version. Spy Hunter malware removal tool additional information/SpyHunter Uninstall Instructions

Leave a Reply

Your email address will not be published. Required fields are marked *

Time limit is exhausted. Please reload the CAPTCHA.