BitCrypt virus

The BitCrypt virus (also known as BitCrypt 2 virus, Cryptolocker virus, BitCryptor, or CryptorBit virus) is a dangerous malware infection we discovered that is categorized as ransomware and also referred to as an encryption virus (or cryptovirus). The BitCrypt virus blocks access or limits access to a Microsoft Windows PC alike the FBI virus we discovered in 2012 by displaying a full screen page or window (lock-screen) that claims your important files have been encrypted including your photos, videos, documents, etc by using a unique public RSA key and in order to obtain this unique RSA key to decrypt (restore) your encrypted files and/or unlock your computer a ransom must be paid in an allotted amount of time.

The message displayed by the BitCrypt virus should be ignored as files are not fully encrypted and the message is utilized in order to scare victims into paying an unnecessary ransom. If you are infected with BitCrypt malware do not pay the fine and do not click any links or available navigation buttons! Instead use the free removal instructions below or seek professional assistance.

The message displayed on the BitCrypt screen is listed below (please note that the ransomware message may differ from the sample below):

YOUR PERSONAL FILES ARE ENCRYPTED

Your important files encryption produced on this computer: photos, videos, documents, etc. Here is a complete list of encrypted files, and you can personally verify this.

Encryption was produced using a unique public key RSA-2048 generated for this computer. To decrypt files you need to obtain a private key.

The single copy of the private key, which will allow you to decrypt the files, located on a secret server on the Internet; the server will destroy the key after a time specified in this window. After that, nobody and never will be able to restore files... (propery of botcrawl.com)

To obtain the private key for this computer, which will automatically decrypt files, you need to pay 100 USD / 100 EUR / similar amount in another country.

Click >Nest> to select the method of payment and the currency.

Any attempt to remove or damage this software will lead to the immediate destruction of the private key by server.

As you can see this message is primarily used to frighten victims of this dangerous computer infection. In reality, files are not encrypted and this message is only produced to cause further complications. This message is only a threat. Please note, messages and lock-screens may vary.

If you paid the fine please contact your credit card or bank institutions to dispute charges and receive further safety instructions.

How does BitCrypt virus get onto a computer?

The BitCrypt ransomware infection can be contracted via suspicious downloads including freeware, shareware, codecs, torrents, and more, and is also promoted in malicious advertisements and search results.

The BitCrypt virus may be present in exploit kits and may gain access via trojan horses hiding on malicious websites.

• The title of this infection may refer to adware. If this is the case, use these instructions to remove adware.

1. BitCrypt virus removal software

1. We highly recommend writing down the toll free number below in case you run into any issues or problems while following the instructions. Our techs will kindly assist you with any problems.

1-888-986-8411
if you need help give us a call

2. Install the free or paid version of Malwarebytes Anti-Malware software.

Malwarebytes Anti-Malware   Editor’s Choice

Latest versions: Malwarebytes Anti-Malware PRO, Malwarebytes Anti-Malware Free
Release date: 2013

   

3. Once Malwarebytes is installed, open the Anti-Malware program. If you are using the free version of Malwarebytes you will be prompted to update the database, please do so.

4. On the first tab labeled “Scanner” select the Perform full scan option and click the Scan button to perform a full system scan (pictured below).

5.  Malwarebytes will automatically detect the BitCrypt virus and third-party malware on your computer. Once the scan is complete, Malwarebytes will prompt a message stating malicious objects were detected. Select (check) the malicious objects in the list and click the Remove Selected button to completely remove the BitCrypt malware from your computer (The image below shows a file that is NOT selected for removal – ‘Make sure the box is checked in’).

2. System Restore

A System Restore is an easy solution to restore an infected computer to a date and time before it became infected with the BitCrypt computer virus. To learn more please select a link below:

• Windows System Restore Instructions

• Windows 8 Refresh/Reset Instructions

BitCrypt virus removal tips:

If the BitCrypt virus is difficult to remove there are several steps you can use to troubleshoot the removal process:

User accounts

Ransomware often infects 1 user account on Windows systems at a time. Here are some tips to remove ransomware by using different user accounts.

• Log into an account not affected by malware (with administrative rights) and perform a scan with reputable software to detect and remove malware.

• You can also delete the infected account.

• Other options include creating a new user account to remove malware if only 1 Window’s user account is present on the computer system.

Denying flash

Some variants of ransomware use flash and symptoms of the infection can be halted by denying flash via Macromedia’s real-time options. To learn more and deny flash please visit: http://www.macromedia.com/support/documentation/en/flashplayer/help/help09.html

Troubleshoot internet/network issues

Safe Mode With Networking can be used to access the Internet for updates, drivers, removal software, or other files if internet and network connectivity is compromised.