What is Canadian ransomware?
Canadian ransomware is a new ransomware program, which means it’s a program that was made to encrypt files so that the hackers could demand money for their decryption. These demands need to be communicated to the victim somehow. This is why Canadian ransomware, as well as most other ransomware programs, creates a ransom note after encrypting the files.
The note, “DECRYPT YOUR FILES.txt”, is displayed on the image above. As you can see it is very short and straight to the point. The hacker wants to be contacted via e-mail, and demands 50 Canadian dollars (approximately 38 US dollars) for the decryption.
Canadian ransomware also renames the files after encrypting them, adding .canadian file extension. For example, “moose.jpg” would be renamed to “moose.jpg.canadian”.
Although the virus doesn’t ask for much money, contacting the hacker might still present a risk. Demonstrating that you’re willing to pay might make you a target for a future attack, for one. It’s also possible that the hacker would refuse to decrypt your files to avoid wasting time on someone who has already paid.
This is why you should familiarize yourself with other ways to remove Canadian ransomware and decrypt .canadian files. You may do so by reading the guide below.