Alpha Crypt Ransomware is a new version of Tesla Crypt ransomware that spreads along attachments of spam emails and once inside, locks important files without leaving any change to recover them, unless you pay for the decryption key. The ransom starts from $500 and it must be paid in Bitcoins. Unfortunately, even after paying it, there is little chance you will get the key and retrieve your files.
You must remove Alpha Crypt Ransomware as soon as possible and try restoring locked files from a back up. It is also highly recommended to take a better care of your computer’s protection. Make sure you have not only an anti-virus installed, but also some reliable anti-malware, like Spyhunter or Malwarebytes. These programs can prevent similar ransomware in future.
About Alpha Crypt Ransomware
When installed, Alpha Crypt Ransomware scans your computer’s drives and looks for certain file extensions. The needed files re found, it encrypts them using .ezz extension. Here is a list of files attached by Alpha Crypt Ransomware:
.sql, .mp4, .7z, .rar, .m4a, .wma, .avi, .wmv, .csv, .d3dbsp, .zip, .sie, .sum, .ibank, .t13, .t12, .qdf, .gdb, .tax, .pkpass, .bc6, .bc7, .bkp, .qic, .bkf, .sidn, .sidd, .mddata, .itl, .itdb, .icxs, .hvpl, .hplg, .hkdb, .mdbackup, .syncdb, .gho, .cas, .svg, .map, .wmo, .itm, .sb, .fos, .mov, .vdf, .ztmp, .sis, .sid, .ncf, .menu, .layout, .dmp, .blob, .esm, .vcf, .vtf, .dazip, .fpk, .mlx, .kf, .iwd, .vpk, .tor, .psk, .rim, .w3x, .fsh, .ntl, .arch00, .lvl, .snx, .cfr, .ff, .vpp_pc, .lrf, .m2, .mcmeta, .vfs0, .mpqge, .kdb, .db0, .dba, .rofl, .hkx, .bar, .upk, .das, .iwi, .litemod, .asset, .forge, .ltx, .bsa, .apk, .re4, .sav, .lbf, .slm, .bik, .epk, .rgss3a, .pak, .big, wallet, .wotreplay, .xxx, .desc, .py, .m3u, .flv, .js, .css, .rb, .png, .jpeg, .txt, .p7c, .p7b, .p12, .pfx, .pem, .crt, .cer, .der, .x3f, .srw, .pef, .ptx, .r3d, .rw2, .rwl, .raw, .raf, .orf, .nrw, .mrwref, .mef, .erf, .kdc, .dcr, .cr2, .crw, .bay, .sr2, .srf, .arw, .3fr, .dng, .jpe, .jpg, .cdr, .indd, .ai, .eps, .pdf, .pdd, .psd, .dbf, .mdf, .wb2, .rtf, .wpd, .dxg, .xf, .dwg, .pst, .accdb, .mdb, .pptm, .pptx, .ppt, .xlk, .xlsb, .xlsm, .xlsx, .xls, .wps, .docm, .docx, .doc, .odb, .odc, .odm, .odp, .ods, .odt
Once the encryption is finished, the program displays a warning on your computer screen saying that all your important files are encrypted. To get a private key for decrypting your files, it tells you to make a payment of 0.7 BTC. Payment verification may take up to 12 hours, but even after that, there are no guarantees, you will get your files back. You should better save your money and never make this payment.
Update: the decrypter is now available at here: link. You can download it absolutely for free and successfully decrypt your files.
It is strongly recommended to recover your files fro ma backup if you have it. If not try using some files recovery tools, like R-Studio or Photorec. Then remove Alpha Crypt Ransomware as soon as possible. We have developed a guide how to do it using system restore. You can find it below this article.
Distribution Methods of Alpha Crypt Ransomware
As mentioned, often Alpha Crypt Ransomware is distributed as an attachment in spam emails. Be more careful with what you open, especially if you get it from unknown senders.if you have already become a victim of cybercriminals, immediately remove Alpha Crypt Ransomware from your system and make sure you protect your computer better in future.