The Proposalcrypt ransomware is a new malware virus which can deal a lot of damage to the computer victims. Read our removal guide for more information about it.
About The ProposalCrypt Ransomware
Malware researchers have discovered a new virus threat known as the ProposalCrypt ransomware. This virus is of unknown origin and is still under investigation by the experts.
Like other famous ransomware variants it encrypts target user data. The list of the file types it affects include the following:
.001, .3fr, .7z, .accdb, .ai, .apk, .arch00, .arw, .asset, .avi, .bar, .bay, .bc6, .bc7, .big, .bik, .bin, .bkf, .bkp, .blob, .bsa, .c, .cab, .cas, .cdr, .cer, .cfr, .class, .con, .cpp, .cpp, .cr2, .crt, .crw, .cs, .cs, .css, .csv, .d3dbsp, .das, .DayZProfile, .dbf, .db0, .dcr, .der, .desc, .dmp, .dng, .doc, .docm, .docx, .dwg, .dxq, .epk, .eps, .erf, .esm, .exe, .ff, .flv, .forge, .fos, .fpk, .fsh, .gdb, .gho, .gif, .h, .hkdb, .hkx, .hplg, .htm, .html, .hvpl, .ibank, .icxs, .im, .indd, .iso, .itdb, .itl, .itm, .iwd, .iwi, .jar, .java, .jpe, .jpeg, .jpg, .js, .kdc, .kf, .layout, .lbf, .litemod, .lnq, .lrf, .ltx, .lvl, .m2, .m3u, .m4a, .map, .mcgame, .mcmeta, .mdb, .mdbackup, .mddata, .mdf, .mef, .menu, .mlx, .mp3, .mp4, .mpq, .mpqge, .mrwref, .ncf, .nrw, .ntl, .odb, .odc, .odm, .odp, .ods, .odt, .orf, .p12, .p7b, .p7c, .pak, .pdd, .pdf, .pef, .pem, .pfx, .pkpass, .png, .png, .ppt, .pptm, .pptx, .psd, .psk, .pst, .ptx, .py, .qdf, .qic, .r3d, .raf, .rar, .raw, .re4, .rgss3a, .rim, .rofl, .rtf, .rw2, .rwl, .sav, .sb, .sb, .sc2save, .sid, .sidd, .sidn, .sie, .sin, .sis, .slm, .snx, .sql, .sr2, .srf, .srw, .sum, .svg, .syncdb, .t12, .t13, .tax, .tor, .torrent, .ttarch2, .txt, .unity3d, .upk, .vdf, .vfs0, .vpk, .vpp_pc, .vtf, .w3x, .wb2, .wma,.wmk, .wmo, .wmo, .wmv, .wotreplay, .wpd, .wps, .x3f, .xf, .xlk, .xls, .xlsb, .xlsm, .xlsx, .zip, .ztmp
The compromised files are renamed by the encryption engine with the .crypted extension. The criminal operators of the ransomware extort the users for a fee of 1 Bitcoin.
The following ransomware note is displayed to the victim:
!!!Warning Message!!!
We are sorry to say that your computer and your files have been encrypted but wait, don’t worry. There is a way that you can restore your computer and all of your files
To get your files fast, please transfer 1 Bitcoin to our wallet address
1Q6bd*****
and click “Check Wallet and Decrypt files” button.
Payment should be confirmed in about 2 hours after payment made.
—
Check Wallet and Decrypt files
—
How to buy Bitcoins?
Please check this website xxxxs://coinatmradar.com where you can find Bitcoin ATM all over the world.
How Does The ProposalCrypt Ransomware Infect Computers
The ProposalCrypt ransomware does not use any non-traditional means of infecting the target hosts. The main disitrubtion methods include spam email messages, browser hijackers, malicious ads and etc.
How To Remove The ProposalCrypt Ransomware and Recover Affected Files
To remove Braincrypt infections from your computer you need to use a trusted anti-spyware tool. There are other software which can also help you out in this situation to a limited extent such as:
- Data Recovery Tools
- Network Sniffers
- Backups