About this ransomware

If you find your files unopenable and they have .cryptfile attached to them, they were encrypted with the JabaCrypter ransomware. Due to the fact that file are encrypted, ransomware is considered to be one of the most dangerous malware you can encounter. And the fact that getting the infection is very easy only adds to the dangerousness of the threat. And files are not always recoverable, which makes it even worse.

Once your files have been encrypted, you will notice a ransom note, asking you to pay a ransom in order to get your files back. Giving into the demands is not the recommended option because you could be just wasting your money. You should not forget you are dealing with cyber crooks, and what’s stopping them from simply taking your money and not providing anything in return. Investing into backup would be a better option because you would be able to avoid this kind of situation in the future. And if you have made backup prior to the infection, you can just delete JabaCrypter and then recover files.


How is ransomware distributed?

Ransomware can come attached to emails, or from malicious software/update ads. The former is quite widespread and most ransomware employ this method. It can be attached to a legitimate looking email but there are usually signs that can help you figure out if it’s safe to open an attachment. First of all, you need to inspect the contents of the email and check the sender. Does the sender’s address look legitimate, are they claiming to be from a legitimate company, are there a lot of grammar mistakes and are you prompted to open the attachment as soon as possible? All of these things should be considered. If the sender claims to be some big company, like Amazon or eBay, make sure the email address matches the ones used by those companies. Check whether your name is used in the greeting, because if it’s a company with whom you had business before, they will always use your name. For example, if Amazon were to email you, they would automatically input the name you have given them into the greeting. They would never use Customer, Users, Member, etc. Malicious emails also often contain a lot of grammar mistakes, so if the email looks serious but has countless mistakes, something may not be right.

What does it do?

As is usual for ransomware, it will encrypt your files and ask that you pay to get them back. It will use a powerful encryption algorithm to encrypt the files, and once that is done, you will notice the .cryptfile file extension added to all affected files. The files targeted will be documents, photos, videos, etc., basically everything you may hold important. A readme.html file will then appear, with crooks explaining what happened in Russian. This allows one to guess that the intended victims are Russian.

The note will mock the victim and demand that they contact crooks via jabanenok@gmail.com with the ID they were given. They would then inform the user how much they should pay in order to get the decryptor. Paying crooks money is not a wise choice. There is nothing stopping them from just taking your money while providing you with nothing. You could end up losing not only your files but money as well.

Backup is the primary tool to fight ransomware. If you save copies of your files somewhere, you wouldn’t need to worry about losing them. Had you had backup, you could just remove JabaCrypter. As it is, you can try other file recovery options or wait for malware researchers to create a free decryption tool.

JabaCrypter removal

To uninstall JabaCrypter, you should use anti-malware software. If you are reading this report, that indicates you may not be very experienced when it comes to computers, thus might end up doing more harm than good if you attempt manual elimination. Instead, you should download anti-malware software and have it get rid of the ransomware.

Automated Removal Tools

  • wipersoft

    WiperSoft Review Details WiperSoft (www.wipersoft.com) is a security tool that provides real-time security from potential threats. Nowadays, many users tend to download free software from the Intern ...

  • mackeeper

    Is MacKeeper a virus? MacKeeper is not a virus, nor is it a scam. While there are various opinions about the program on the Internet, a lot of the people who so notoriously hate the program have neve ...

  • malwarebytes-logo2

    While the creators of MalwareBytes anti-malware have not been in this business for long time, they make up for it with their enthusiastic approach. Statistic from such websites like CNET shows that th ...


Quick Menu

Step 1. Delete JabaCrypter using Safe Mode with Networking.

Remove JabaCrypter from Windows 7/Windows Vista/Windows XP
  1. Click on Start and select Shutdown.
  2. Choose Restart and click OK. Windows 7 - restart
  3. Start tapping F8 when your PC starts loading.
  4. Under Advanced Boot Options, choose Safe Mode with Networking. Remove JabaCrypter  - boot options
  5. Open your browser and download the anti-malware utility.
  6. Use the utility to remove JabaCrypter
Remove JabaCrypter from Windows 8/Windows 10
  1. On the Windows login screen, press the Power button.
  2. Tap and hold Shift and select Restart. Windows 10 - restart
  3. Go to Troubleshoot → Advanced options → Start Settings.
  4. Choose Enable Safe Mode or Safe Mode with Networking under Startup Settings. Win 10 Boot Options
  5. Click Restart.
  6. Open your web browser and download the malware remover.
  7. Use the software to delete JabaCrypter

Step 2. Restore Your Files using System Restore

Delete JabaCrypter from Windows 7/Windows Vista/Windows XP
  1. Click Start and choose Shutdown.
  2. Select Restart and OK Windows 7 - restart
  3. When your PC starts loading, press F8 repeatedly to open Advanced Boot Options
  4. Choose Command Prompt from the list. Windows boot menu - command prompt
  5. Type in cd restore and tap Enter. Uninstall JabaCrypter  - command prompt restore
  6. Type in rstrui.exe and press Enter. Delete JabaCrypter  - command prompt restore execute
  7. Click Next in the new window and select the restore point prior to the infection. JabaCrypter  - restore point
  8. Click Next again and click Yes to begin the system restore. JabaCrypter  removal - restore message
Delete JabaCrypter from Windows 8/Windows 10
  1. Click the Power button on the Windows login screen.
  2. Press and hold Shift and click Restart. Windows 10 - restart
  3. Choose Troubleshoot and go to Advanced options.
  4. Select Command Prompt and click Restart. Win 10 command prompt
  5. In Command Prompt, input cd restore and tap Enter. Uninstall JabaCrypter  - command prompt restore
  6. Type in rstrui.exe and tap Enter again. Delete JabaCrypter  - command prompt restore execute
  7. Click Next in the new System Restore window. Get rid of JabaCrypter  - restore init
  8. Choose the restore point prior to the infection. JabaCrypter  - restore point
  9. Click Next and then click Yes to restore your system. JabaCrypter  removal - restore message

Site Disclaimer

2-remove-virus.com is not sponsored, owned, affiliated, or linked to malware developers or distributors that are referenced in this article. The article does not promote or endorse any type of malware. We aim at providing useful information that will help computer users to detect and eliminate the unwanted malicious programs from their computers. This can be done manually by following the instructions presented in the article or automatically by implementing the suggested anti-malware tools.

The article is only meant to be used for educational purposes. If you follow the instructions given in the article, you agree to be contracted by the disclaimer. We do not guarantee that the artcile will present you with a solution that removes the malign threats completely. Malware changes constantly, which is why, in some cases, it may be difficult to clean the computer fully by using only the manual removal instructions.

Leave a Reply