CryptPKO Ransomware

CryptPKO Ransomware has been terrorizing PC users for quite some time now. This malicious infection is not one of those pesky applications that you remove via the Control Panel. No, this infection is the real deal. You will not get rid of it using traditional means. The absence of antimalware software usually results in infections, such as CryptPKO Ransomware entering your computer. For this reason, we stress the importance of having an antimalware scanner that offers real-time protection. However, once CryptPKO Ransomware enters your computer and encrypts your personal files it is already too late. The chances of restoring your files are slim but it is still worth a try.

This infection is primarily distributed using email spam. Usually, a dedicated server sends email spam that contains fictitious texts that tend to vary. However, you should pay attention to spam mail that contains attached files. Usually, CryptPKO Ransomware uses a dedicated executable that secretly downloads it. Alternatively, this ransomware can be distributed on websites that share pirated material, such as PC games and other software. Furthermore, it can also be found on websites that feature adult content. So, it goes without saying that you should avoid such websites, and you should not open suspicious emails, especially if they have been redirected to the Junk folder.

So CryptPKO Ransomware’s sole objective is to secretly enter your computer and encrypt your personal files that might be very valuable. It is said that the infection targets files that are used most frequently. Once the infection has found its target it encrypts it and creates a Text Document that reads “HOW TO DECRYPT FILES.txt” in every folder where a file had been encrypted. The document should contain the following text:

Attention!!! Your broke the law!! All your files are encrypted!!
To restore your files visit http://plc.licter.com if the site is not working please write to email stoppiracy@email.su.

You have 5 attempts to enter the code. Above this limit, all the data irreversibly deteriorate.

The schemers might scare or amuse you with statements, such as “Your broke the law.” Of course, you should not believe these statements. You also should not let those pesky schemers to extort money from you, because they might not give you the decryption key after you pay the ransom, and they might even demand more money. As far as we know the ransom is around $25 USD, but it might even be more than that. You may try restoring encrypted files from Shadow Copies. Such copies are created by creating a Windows Back up or a System Restore point. However, your chances of restoring encrypted files are slim.

In any case you do not recommend playing the ransom, especially if the files are not that important. But before you try to restore your files you should remove CryptPKO Ransomware using a dedicated removal tool. Manual removal is very difficult and we do not recommend it for novice PC users. We hope that the provided information was sufficient. Keep in mind that cyber security is of utmost importance, so you should protect it with an antimalware scanner.