Do you know what Skull Ransomware is?
Cyber security experts have concluded that Skull Ransomware is a dangerous ransomware-type computer infection that can infect unprotected computers and encrypt a user’s files. Then, the ransomware demands that the user pay 400 USD in Bitcoins for a decryption tool. Hence, this application is part of s cyber extortion scheme. Nevertheless, you cannot trust the cyber criminals because they might not keep their word and send you the decryption program. Therefore, we recommend that you remove this program as soon as possible. If you want to find out more about it, we invite you to read this article as it contains the newest, most relevant information available.
If your computer were to become infected with this ransomware, then it will encrypt most of your valuable files. Our malware analysts say that this particular ransomware was configured to target many file types that include file groups such as images, videos, audio files, file archives, executable files, and documents, among others. The encryption methods used to encrypt your files are not yet known, but what we believe that it should use an AES or RSA encryption algorithm to do that. Whatever the case may be, it is clear that the encryption method used ensures a secure encryption because there is no free decryption tool available at this time.
While encrypting your files, Skull Ransomware appends them a random 6-character file extension. It might also change the original file names of the encrypted files. Once the encryption is complete, this ransomware drops a ransom note named How_To_Decrypt_Your_Files.html that, when opened, loads http://adartmark.com/blog_howto.html in your web browser. The note demands you pay 400 USD in Bitcoins. You can send the coins to one of the three provided Bitcoins wallet addresses. Once you have paid, you have to send the transaction number, full computer hostname, and the Bitcoin wallet address you sent the ransom payment from to Skull.and.bones2017@protonmail.com. The cyber criminals promise you send you the link to a decryption tool that will decrypt your files. However, we want to point out that you may be deceived. The cyber criminals might not send you the link but keep your money. Therefore, you should not trust them.
Now let us take a look at how Skull Ransomware can infect your PC. Our malware analysts say that there is no concrete evidence that could tell us how this ransomware is distributed. Nevertheless, our experiences malware analysts say that it is more than likely that this particular ransomware can infect your PC via email. They say that its developers have set up an email server dedicated to sending this ransomware to random email addresses across the world. The emails can have a dropper file of this ransomware attached to them. The emails can be disguised as business-related correspondence, tax return forms, or invoices. The attached file can pose as PDF document while it is an EXE file in fact. The developers can add a fake second extension to convince you that it is a PDF document.
In summary, Skull Ransomware is just another malicious application set to encrypt your files in an effort to extract money from you. However, you should not comply with the cyber criminals’ demands but remove this ransomware instead because the cyber criminals might not keep their word and send you the decryption software. You can use an anti-malware program such as SpyHunter or delete it manually using our guide presented below.
How to delete this ransomware manually
- Press Win+E keys.
- In the File Explorer’s address box, enter the following file paths.
- %USERPROFILE\Downloads
- %USERPROFILE\Desktop
- %TEMP%
- Identify the ransomware’s executable.
- Right-click it and click Delete.
In non-techie terms:
Skull Ransomware is a newly discovered ransomware-type application that is disseminated using deceptive methods, so it can infect your PC by stealth. Once on it, it will infect your valuable files and then demand that you pay a ransom to get your files back. The criminals demand 400 USD which might not be worth your files. Also, the criminals might not send you the promised decryption program once you have paid, so we recommend that you remove it altogether.