Вирус заблокировал фото и вордовские файлы. Добавилось разшерение файлов .crypt
Сообщение которое вылетает при открытии файлов:
YOUR ID: 3401
If you see this screen or read warning.txt.
It means you IP address: 18.104.22.168 was included in WCAP Black List.
From your PC was infringement one or more of the following items:
1. Viewing, listening, downloading or distributing audio or video files protected
2. Spam or Ddos attack.
3. Downloading or distributing illegal content (child porno, phishing, etc.)
4. Downloading or distributing Software protected Copyright Law.
The result of these infringement you PC and file was blocked. The decision was made
about blocking on the basis of Digital Millennium Copyright Act (DMCA) amendment
1272 of 06/10/2011
You can remove you IP from black list and unlock PC and files paying money penalty
STEP 1: Buy a MoneyPak in amount of $100 at the nearest store.
STEP2: Fill in the fields on the screen, and click Make Payment. Alternate send as an e-
mail at WCAPLLC@yahoo.com . Indicate your WCAP ID in the message title and provide
STEP 3: Check your e-mail. We will send you Unlock code once payment is verified. Your
computer will roll back to the ordinary state.
Q: Where can I purchase a MoneyPak?
A: MoneyPak can be purchased at thousands of stores nationwide, including major
retailers such as Wal-Mart, Walgreens, CVS/pharmacy, Rite Aid, Kmart, Kroger and
Meijer. Click here to find a store near.
Q: How do I buy a MoneyPak at the store?
A: Pick up a MoneyPak from the Prepaid Product Section or Green Dot display and take
it to the register. The cashier will collect your cash and load it onto the MoneyPak.
Q: How I can make sure that you can really decipher my files?
A: You can send ONE any ciphered file on email WCAPLLC@yahoo.com (Indicate your ID
and /test decrypt/ phrase in the message title), in the response message you receive
the deciphered file.
WARNING!!!: If you don’t pay money penalty 100$ within 72 HOURS, all your
computer data will be deleted.
WARNING!!! Dont remove this screen this may complicate or make impossible the
decryption. Even after removing the screen, files will remain encrypted. You can confirm
this moving crypt file to another PC.