The message likewise states that the people must contact the Craa authors within 72 hours upon the minute of the data encryption. In order to acquire the key and restore the essential information, the users are informed to connect with the frauds by means of email or by telegram and to pay the ransom in the quantity of $980. The decrypting key is hosted on a special server under the complete control by the crooks who have released the Craa infection into the world wide web. One more peculiarity of the Craa virus is that the users are not able to get access to the key. “Don’t worry, you can return all your files!”, from text file message: It is exceptionally difficult to recuperate the information without the appropriate key in place. Nevertheless, there is no doubt that each computer owner might be released an unique decryption key, which is absolutely distinct. The method to secure the files used by Craa is not totally researched. Regretfully, this declaration is definitely real. The caution basically indicates that the information has been encrypted and the only service to get access to it is to use an unique standalone key. The alert mentioned by _readme.txt requesting for the random os very similar to the notices given by other ransomware dangers belonging to the DJVU family. As soon as the encryption is achieved, Craa puts its own special text document ( _readme.txt) into all the folders that save the encrypted files. For instance, the file “price_list.xls”, once modified by Craa, will be titled as “price_”. Craa virus adds its own “.craa” to all the encrypted data. Logically, as soon as the file encryption is effectively achieved, the users are not able to get access to them.

Michael Gillespie, the well-known virus researcher, very first discovered this new name in the DJVU ransomware family.Ĭraa was created for the sole purpose to encrypt all popular file types. Craa is a destructive software working as common ransomware.

Anti malware software free