What is Alpha Crypt Virus?
Alpha Crypt is a file-encrypting ransomware program that targets all version of Windows. It is a variant of Tesla Crypt ransomware. It was first released at the end of April 2015.
Alpha Crypt usually targets different video games. Some of the targets are: RPG Maker, Call of Duty, Dragon Age, StarCraft, MineCraft, World of Warcraft, World of Tanks, and Steam. However, you should keep in mind that Alpha Crypt can also encrypt your documents and images as well.
How does it work?
After the successful infiltration, Alpha Crypt encrypts files found on the victim’s computer using the AES CBC 256-bit encryption algorithm. It spreads via the Angler exploit kit and creates a randomly named executable file in the %AppData% folder, after which it performs a scan for all available drives, including removable media, network shares, and DropBox mappings. Once all drives are located, it begins locking files using AES encryption and deletes Shadow Volume Copies to prevent data restoration.
What is so special about Alpha Crypt Virus?
When a file is encrypted by Alpha Crypt ransomware it will change the file extension to .ezz. Victims will not be able to access files encrypted by the Alpha Crypt virus. The ransomware may also delete Shadow Volume Copies of files so that victims won’t be able to recover encrypted files.
When the encryption has finished, you will receive a note with information on how to pay the ransom and decrypt your files.
Will I get my data back if I pay the ransom?
There is a possibility of paying the ransom to the hackers. But there's no guarantee it will work, because cybercriminals aren't exactly the most trustworthy group of people. Also, paying the ransom may encourage these bad guys to continue and even expand their operations. We strongly suggest that you do not send any money to these cyber criminals, and instead address to the law enforcement agency in your country to report this attack.
How did I get infected with Alpha Crypt Virus?
You can get infected from prohibited torrent files, malicious advertisements, and on websites that host malware. However, Alpha Crypt ransomware is usually distributed through fraudulent email message content and email attachments.
What you need to keep in mind is that if you open the attachment which is being distributed through the Angler Exploit Kit you will trigger Alpha Crypt ransomware simply by running the .exe file which will then install it.
How to remove Alpha Crypt from a PC?
According to MRG Effitas reports, one of the best anti-ransomware tools is Zemana AntiMalware and you can download it for free (it comes with 15-days free trial). It will successfully detect Alpha Crypt on your PC and remove it.
However, if you decide to continue using the Trial and do not wish to purchase the Premium subscription at the end of the trial, your Zemana AntiMalware program will disable premium features. All other (basic) features will remain unchanged.
Zemana AntiMalware as an Alpha Crypt removal tool for your PC
You have to remove this malware permanently. Zemana AntiMalware will effectively detect and completely remove this malware from your computer.
To do so, please follow the steps below:
- STEP 1: Download and run Zemana AntiMalware.
- STEP 2: Once download, install the software on your PC. You can do this by double-clicking on ZAM program icon on your desktop or in your download files.
- STEP 3: Press the "Scan" button.
- STEP 4: When the scan is complete, click "Next".
- STEP 5: Restart your computer if you are prompted to do so.
