GC47 Ransomware is a type of malicious software that encrypts your files and demands a ransom to decrypt them. Attackers may spread this Ransomware through email attachments or malicious websites. Once GC47 Ransomware encrypts your files, you will see a ransom note that instructs you on how to pay the ransom and decrypt your files.

History

GC47 Ransomware was first spotted in the wild in July 2017. This ransomware was designed to target businesses and individual users. GC47 Ransomware is a variant of the CryptXXX ransomware family.

What was the biggest GC47 Ransomware attack?

The biggest GC47 Ransomware attack occurred in November 2017. This ransomware attack infected over 200,000 computers in 150 countries. The majority of the infections were in Russia, Ukraine, and India.

What encryption methods does GC47 Ransomware use?

GC47 Ransomware uses the AES and RSA encryption algorithms to encrypt your files. These are both very strong encryption algorithms that are very difficult to break.

What types of files does GC47 Ransomware encrypt?

GC47 will encrypt most types of files, including documents, images, and videos. This ransomware will also encrypt files with the following extensions:.doc, .docx, .xls, .xlsx, .ppt, .pptx, .pdf, .jpg, .jpeg, .png, and .gif

How much is the ransom?

The GC47 Ransomware ransom varies depending on how much money the attacker thinks you can afford to pay. The typical GC47 Ransomware ransom is 1 Bitcoin. But, the GC47 Ransomware ransom can be as high as 10 Bitcoin.

Should you pay the ransom?

We do not recommend paying the GC47 Ransomware ransom. There is no guarantee that you will get your files back even if you pay the ransom. Also, by paying the ransom, you are supporting the attackers and encouraging them to continue their malicious activities.

Protection

To protect yourself from GC47, you should:- Use a reputable antivirus program that can detect and remove GC47 Ransomware.- Keep your operating system and software up-to-date.- Set strong passwords for your accounts.- Be cautious when opening email attachments or clicking on links in emails.

What should you do?

If attackers infected you with GC47, you should:- Use a reputable antivirus program to scan your computer for GC47 Ransomware and remove it.- Restore your files from a backup if you have one.- Use data recovery software to try to recover your files. We built SalvageData data recovery software to help you.

Is there a public decryption tool?

There is no public decryption tool for GC47 Ransomware at this time.

Contact a data recovery service

If you cannot remove GC47 Ransomware or decrypt your files, you can try to contact a data recovery service.SalvageData is a professional data recovery service. We have experience recovering data from GC47 Ransomware infections. Our certified data recovery engineers are available 24/7 to help you. Contact us for a free consultation.