Home Malware Programs Ransomware I Suoi Archivi Sono Stati Cifrati Ransomware

I Suoi Archivi Sono Stati Cifrati Ransomware

Posted: December 12, 2011

The 'I Suoi Archivi Sono Stati Cifrati' PC threat is an Italian-based form of ransomware Trojan that's distributed by a variant of the Blackhole Exploit Kit. SpywareRemove.com malware experts recommend that you keep your web browser up-to-date, use strong security settings and have anti-malware software to prevent any potential 'I Suoi Archivi Sono Stati Cifrati' ransomware attacks against your PC. Unlike most forms of ransomware, 'I Suoi Archivi Sono Stati Cifrati' Trojans don't try to pretend that they're legitimate authorities – instead, they actually encrypt files on your PC and demand payment in return for a decryption solution. However, there's no guarantee that the criminals behind 'I Suoi Archivi Sono Stati Cifrati' ransomware attacks will actually provide you with a decryption key as they promise, and it's recommended that you use freely-available methods of reversing the encryption of your files after you've removed the 'I Suoi Archivi Sono Stati Cifrati' Trojan with an appropriate anti-malware product.

An Exceptionally-Honest Ransomware Attacker

'I Suoi Archivi Sono Stati Cifrati' ransomware Trojans are spread by Blackhole Exploit Kit attacks that use scripted and web browser-based vulnerabilities to infect new computers without permission. As long as you avoid malicious sites, practice safe web-browsing habits and have up-to-date anti-malware security, your PC should be in relatively-little danger of being attacked by a 'I Suoi Archivi Sono Stati Cifrati' ransomware Trojan. However, since 'I Suoi Archivi Sono Stati Cifrati' Trojans are designed for Italian victims, you may want to pay especially-close attention to suspicious Italian sites (which can be recognized by their .it domain suffix).

Once a 'I Suoi Archivi Sono Stati Cifrati' Trojan infects your PC, 'I Suoi Archivi Sono Stati Cifrati will proceed to encrypt up to a thousand or more files, causing them to be effectively-unusable until the encryption is removed. Unfortunately, SpywareRemove.com malware experts note that this isn't a bluff, but an actual encryption attack that can cause permanent damage to the files that are targeted. In most cases, the easiest solution to a 'I Suoi Archivi Sono Stati Cifrati' ransomware Trojan's encryption attack is to remove the 'I Suoi Archivi Sono Stati Cifrati' infection and then restore your files with an automatic backup (such as a System Restore point).

'I Suoi Archivi Sono Stati Cifrati' ransomware Trojans are, as SpywareRemove.com malware researchers note with surprise, exceptionally-honest in that they don't pretend to be delivered by any form of lawful authority. Instead, they state the nature of the attack and offer a solution if the victim is willing to pay $50.00 through Ukash (an online payment service). Naturally, this isn't a recommended or safe solution to any 'I Suoi Archivi Sono Stati Cifrati' infection.

Treating 'I Suoi Archivi Sono Stati Cifrati' with the Level of Respect That It Deserves

'I Suoi Archivi Sono Stati Cifrati' Trojan attacks can be recognized right away by watching for error screens with the following Italian text:

I SUOI ARCHIVI SONO STATI CIFRATI

Alcuni degli archivi e stato cifrati per il nostro virus.
Tutto quello che devi per tornare ad averli e pagare $50.

Che cosa ha passato?
Alcuni dei suoi archivi, come immagini, foto, documenti, archivi ed altri e stato cifrato per il criptografico RSA ed algoritmi Twofish. Senza chiave segreta restaurare gli archivi e impossibile.

Come recuperare i miei archivi?
Per recuperare gli archivi lei deve pagarci $50 attraverso un biglietto Ukash. Dopo avere verificato il suo biglietto gli invieremo la sua chiave per posta eletrronica se lei desidera restaurare gli archivi.

Lei puo ottenere Ukash in migliaia di posti in tutto il mondo, on-line, in chischi e bancomat. Per piu informazione su dove ottenere Ukash visti ukashk.com

Ottenere la chiave segreta
Vedere gli archivi cifrati
Recuperare archivi

The Windows Registry also contains additional information about which files the 'I Suoi Archivi Sono Stati Cifrati' Trojan chose to encrypt from 'HKEY_CURRENT_USER\Software\Encryption Virus\Files.' Regardless of what you choose to do with this information, SpywareRemove.com malware analysts recommend that you delete your 'I Suoi Archivi Sono Stati Cifrati' ransomware with a suitable anti-malware application before you attempt any file-recovery options. Failure to do this may result in the 'I Suoi Archivi Sono Stati Cifrati' Trojan blocking any software that could be used to save your data and can also be considered strong security risk for your PC.

Loading...