Trojan.Encoder.215 is a malicious program belonging to the Trojan.Encoder family. Trojans of this family encrypt files demanding a ransom for their decryption. Files that can be encrypted by the malware include documents, video and audio files, and images.
The following is an example of the text displayed by Trojan.Encoder.215 after it infects the system:
All important data (documents, images, databases, email messages, etc.) on this computer have been encrypted with a unique crypto-secure algorithm.
Even using the most up-to-date computers, file decryption will take about a year.
To decrypt the files, contact our specialist at
specialmist@gmail.com.
You will receive a reply within 12 hours.
Do not try to reinstall the operating system; it will not help.
If you attempt to scan the files using an anti-virus, your files can become corrupted.
If the file structure is modified in any way, it will be impossible to recover the file.
Do not think to threaten us. Otherwise, your files will stay encrypted.
Note that only we can decrypt your files, because we possess special software to do that.
8B BA A2 B0 B8 9C AB F1 CF C1 B8 9C F5 F4 A0 B6 AE 9C DC F2 E1 E6 EA 7B CB C1 A4 B0 E6 DC DE BB A4 BB B8 95 B1 B5 A0 B0 AD D5 DA B8 A7 BA EA B9 8C C7 A2 B0 F3 DD E5 E9 E0 C0 F6 9B B3 B2 CF F0 E2 9D AF AD A7 B3 B6 78 8C B9 A3 E9 E3 A1 AB BE E5 FE BC 9C B1 B8 CE F1 F3 CD EB B4 E7 B9 A8 78 BB 00 D6 B1 B6 9B AB BC A1
Trojan.Encoder.215 saves the text of the demand into C:\decrypting.txt.
If you have fallen victim to a ransomware program, do not transfer money to cybercriminals and never attempt to eliminate the problem by yourself (do not reinstall the operating system and do not delete any files), because such actions can result in all the encrypted data being permanently lost. To recover your files, contact Doctor Web technical support (free decryption service is only available to users who have purchased commercial licenses for Dr.Web products).
