Do you know what is UltraCrypter? We classify it as a ransomware. It is easy to find out that your PC is infected with UltraCrypter and the sign is obvious. When your system gets this item inside, all your files will be encrypted at first, and then it will blackmail the users to pay for huge amount of money to rescue these files. That is the main task of ransomware. If you continue to keep it on your PC, such tragedy will occur time by time. Therefore, we advice you to learn more about this malicious stuff and get rid of it with the instruction here.
UltraCrypter is an updated version of CryptXXX ransomware. As with CryptXXX, UltraCrypter is distributed using the Angler Exploit Kit. In fact, these viruses are practically identical. UltraCrypter uses an asymmetric RSA-4096 algorithm to encrypt many of the files stored on the infiltrated system. Therefore, public (encryption) and private (decryption) keys are generated and are stored on remote servers. Decryption without the private key is impossible. Furthermore, UltraCrypter adds a .cryp1 extension to the name of each encrypted file. Following successful encryption, UltraCrypter generates three different files: .bmp (which is also set as the desktop wallpaper); .txt, and; .html. These files have an identical naming format - [Victim’s personal ID].
They also contain an identical message stating that files have been encrypted and that the victim must pay a ransom to download a decryption tool. To receive detailed payment instructions, users must visit a Tor browser link provided. The size of ransom is equivalent to 1.2 Bitcoin ($567.6). If this is not paid within the given time frame, it will double to 2.4 BTC. Specifying a certain time frame and increasing the size of ransom if not paid is behavior common to ransomware-type viruses. UltraCrypter allows victims to decrypt one selected file free of charge - this is to prove that the encryption is possible. CryptXXX and UltraCrypter attempt to mimic the CryptoWall and TeslaCrypt viruses. Unfortunately, there currently are no tools capable of restoring files encrypted by UltraCrypter. Viruses such as UltraCrypter are one of the main reasons why you should maintain regular data backups, since the only other solution is to restore your files and/or system from a backup.
