How to remove RYKCRYPT ransomware

RYKCRYPT ransom note:

All your files have been encrypted!


All your files have been encrypted due to a security problem with your PC. If you want to restore them, write us to the e-mail; encoderdecryption@gmail.com
Write this ID in the title of your message : [REDACTED]
In case of no answer in 24 hours write us to theese e-mails: encoderdecryption@yandex.ru
You have to pay for decryption in Bitcoins. The price depends on how fast you write to us. After payment we will send you the decryption tool that will decrypt all your files.

Free decryption as guarantee
Before paying you can send us up to 1 file for free decryption. The total size of files must be less than 1Mb (non archived), and files should not contain valuable information. (databases,backups, large excel sheets, etc.)

How to obtain Bitcoins
The easiest way to buy bitcoins is LocalBitcoins site. You have to register, click 'Buy bitcoins', and select the seller by payment method and price.
https://localbitcoins.com/buy_bitcoins
Also you can find other places to buy Bitcoins and beginners guide here:
http://www.coindesk.com/information/how-can-i-buy-bitcoins/

Attention!
Do not rename encrypted files.
Do not try to decrypt your data using third party software, it may cause permanent data loss.
Decryption of your files with the help of third parties may cause increased price (they add their fee to our) or you can become a victim of a scam.

This is the end of the note. Below you will find a guide explaining how to remove RYKCRYPT ransomware.

What is RYKCRYPT ransomware?

RYKCRYPT is a recently discovered ransomware virus. It belongs to a group of ransomware known as the VoidCrypt family. Zendaya is another recent example of a VoidCrypt virus.
Like every other ransomware program, RYKCRYPT encrypts the victims’ files so that it can ask money for decrypting them. The affected files are also renamed; each of them now includes a unqiue victim ID, the hacker’s e-mail, and .RYKCRYPT file extension in their name. That is done to ensure that the attack will not be written off as a simple computer malfunction.
The virus communicates its demands through a text file named “unlock-info.txt”. You can read its full text on the image above, although it doesn’t mean that you should; the hackers don’t mention much in terms of valuable information. They want to be paid in BitCoin, but don’t specify how much money they want.
Trying to cooperate with these hackers is not a very good idea. For one, they might not decrypt your files even after receiving payment. Alternatively, they might decrypt your files but then attack you again a few days later.
Thankfully, there are several ways to remove RYKCRYPT ransomware and decrypt .RYKCRYPT files without involving the criminals. Read about them in the guide below.

Scroll to top