In order to get the key and bring back the essential information, the users are told to get in touch with the frauds via e-mail or by telegram and to pay the ransom in the amount of $980. The decrypting key is hosted on an unique server under the complete control by the criminals who have introduced the Cool virus into the web. One more peculiarity of the Cool infection is that the users are not able to get access to the key. “Don’t worry, you can return all your files!”, from text file message: It is extremely tough to recover the data without the proper type in place. Nevertheless, there is no doubt that each computer owner might be provided an unique decryption key, which is definitely unique. The method to encrypt the files utilized by Cool is not totally investigated. Regretfully, this declaration is definitely real. The warning essentially indicates that the files have been secured and the only solution to get access to it is to use a distinct standalone key. The alert stated by _readme.txt requesting for the random os really similar to the notices offered by other ransomware dangers coming from the DJVU family. As soon as the file encryption is accomplished, Cool puts its own unique text document ( _readme.txt) into all the folders that save the encrypted files. For instance, the file “price_list.xls”, once crypted by Cool, will be entitled as “price_”. Cool ransomware adds its own “.cool” to all the encrypted data. Rationally, as soon as the encryption is effectively achieved, the users are unable to get access to them.

Michael Gillespie, the popular virus researcher, first discovered this new name in the DJVU ransomware family.Ĭool was developed for the sole purpose to encrypt all popular file types. Cool is a destructive software application working as typical ransomware.

Gridinsoft anti malware 3.0.35 key