Therefore, it might be possible to recover files using file recovery software.

Note, however, that Spyhunter encrypts only file headers. Most ransomware-type programs encrypt data using cryptography algorithms ( symmetric or asymmetric) that make decryption, without using a specific decryption tool or key, impossible. Note that SpyHunter anti-virus suite and Enigma developers have no association with this ransomware.Ĭyber criminals use SpyHunter's name to adversely affect its reputation - this is a case of defamation. As mentioned, SpyHunter is the name of a legitimate anti-spyware computer program, however, the ransomware developers disguise their malicious program as legitimate software. The email message should contain a unique ID (appointed to each victim).

They encourage victims to contact them within 72 hours via the email address. They go on to mention that they specialize in creating and removing viruses. Spyhunter's ransom message states that all files are encrypted and can only be decrypted with the help of cyber criminals who developed this ransomware. This version was discovered by Karsten Hahn. It is possible that Spyhunter is a version of GarrantyDecrypt (another ransomware infection).

It also creates the ' $HOWDECRYPT$.txt' text file containing a ransom message. spyhunter' extension to each encrypted file.įor example, ' 1.jpg' becomes ' 1.jpg.spyhunter'. Developers (cyber criminals) use it to encrypt victims' data (by blocking access) unless a ransom is paid. Spyhunter is the name of a legitimate anti-malware program, however, cyber criminals have recently started to exploit this name in their ransomware campaign.

Spyhunter malware tool review