NoobCrypt is ransomware that can easily get on system and lock down many (or even all) important file from you. This ransomware calls you a noob if you input a wrong decryption key. NoobCrypt is ransomware that stealthily infiltrates systems and encrypts files using asymmetric cryptography. After successful encryption, NoobCrypt creates an image file containing a ransom-demand message. The message informs users of the encryption and demands a ransom payment. Public (encryption) and private (decryption) keys are generated during encryption. It is stated that the private key is stored on remote servers controlled by the developers. Decryption without the private key is impossible and cyber criminals attempt to sell this key to users. The cost of the key is $299 and must be paid within 48 hours, or decryption becomes impossible. Infected users are instructed to pay the ransom in Bitcoins – this allows cyber criminals to remain anonymous. It is also stated that a number of files will be deleted every two hours, that’s why many users afraid for their data and pay for the key. Research shows, however, that details regarding encryption are false. Security researchers has discovered a hard-coded key (“ZdZ8EcvP95ki6NWR2j” or “RedStarPenis”), which users can use to decrypt their files free of charge.
Most of this ransomware identical – they encrypt files and make ransom demands. Most ransomware uses an asymmetric encryption, so the only noticeable difference between them is the size of the virus. Cyber criminals often transfer these viruses via peer-to-peer networks (for example Torrent), spam emails (malicious attachments), fake software update tools (that exploit software bugs/flaws to infect the system), and trojans. You should download your chosen files or software from trusted sources like official download websites, using a direct download link – other third party downloaders and installers often bundle malicious apps. Always be cautious when opening files sent from unrecognized or suspicious email addresses. Keeping your installed applications up-to-date and using a legitimate anti-virus programs is also very important.
If you press “Information button you will see this massage:
Your personal files are encrypted!
Coded in R0MANIA
Your documents, photos, databases and other important files have been encrypted with strongest encryption and unique key, generated for this computer.
Private decryption key is stored on a secret Internet server and nobody can decrypt your files until you pay and obtain the private key.
You have 48 hours to pay 250 NZD in Bitcoins to get the decryption key. Every 2 hours files will be deleted. Increasing in amount every time frame.
If you do not send money within provided timeframe you files will be permanently cryptic and no one will be able to recover them.
In order to pay use a phone of a laptop!
Use “ZdZ8EcvP95ki6NWR2j” or “RedStarPenis” key to decrypt your files free of charge:
How to prevent Fantom and other ransomware viruses:
The best way to protect your computer from infection is to avoid this infection at any cost. We are glad to announce that our anti-ransomware product is now ready for a beta release! GridinSoft Anti-Ransomware beta was developed to protect your computer from cyptoviruses. Try this program, it may save your computer from possible future infection. Help us make GridinSoft Anti-Ransomware better by leaving your feedback! To install this program follow next steps:
- Download GridinSoft Anti-Ransomware.
- Follow the installation instruction.
- Open the program and enable the protection.