CryptoHitman Ransomware Data Recovery

What is CryptoHitman?

CryptoHitman is a ransomware that encrypts your files and demands ransom for the decryption key. It adds the “.crhitman” extension to encrypted files and leaves a ransom note named “DECRYPT_INSTRUCTIONS.txt” in every folder containing encrypted files. This note contains information on how to pay the ransom and decrypt your files.

How does CryptoHitman infect your computer?

Attackers usually spread CryptoHitman Ransomware through email attachments or malicious websites. Once the ransomware is downloaded onto your computer, it will encrypt your files and demand a ransom for the decryption key.

How much is the ransom?

The CryptoHitman Ransomware will demand a ransom of 2 Bitcoins. Attackers will give you a deadline of 5 days to pay the ransom, or it will double the ransom amount.

History of CryptoHitman 

The CryptoHitman Ransomware was first seen in May 2017. It is a variant of CryptoMix Ransomware.

The biggest difference between CryptoHitman Ransomware and CryptoMix is that CryptoHitman uses the “.hitman” extension for encrypted files, while CryptoMix uses the “.crypz” extension.

What was the biggest CryptoHitman Ransomware attack?

On May 12, 2017, CryptoHitman Ransomware encrypted the files of the San Francisco Municipal Transportation Agency. The ransomware demanded a ransom of 100 Bitcoins.

What encryption methods does CryptoHitman Ransomware use?

CryptoHitman uses the AES and RSA encryption algorithms.

What types of files does CryptoHitman encrypt?

CryptoHitman Ransomware will encrypt most types of files on your computer, including documents, photos, and videos. It will also encrypt files on any external drives that are connected to your computer.

Protection

There are several things you can do to protect yourself from CryptoHitman Ransomware attacks:

– Keep your antivirus software up to date

– Don’t open email attachments from unknown senders

– Don’t click on links in email messages from unknown senders

– Be cautious when downloading files from websites

– Back up your important files regularly

What to do if you are infected with CryptoHitman Ransomware?

Do not pay the ransom. There is no guarantee that you will get your files back even if you do pay.

There are a few things you can do to try to remove CryptoHitman Ransomware on your own, but we do not recommend this, as it is very difficult to remove and there is a chance you could make things worse.

1. Try to use a free ransomware decryption tool (if one is available) to see if it can decrypt your files.
2. If you don’t have a backup of your files, you may be able to use data recovery software to recover at least some of them.

SalvageData data recovery software is built to help you recover your files.

Is there a public decryption key for CryptoHitman Ransomware?

No, there is no public decryption key.

It is important to seek professional help immediately to remove the ransomware and protect your computer from further damage. CryptoHitman Ransomware is a serious threat to your computer and should not be taken lightly.

Contact a data recovery service

SalvageData is America’s top choice for data recovery services. We have a 96% success rate and our certified engineers are standing by to help you recover your files.

Call 24/7 +1 (800) 972-3282 to speak to a SalvageData representative today.