Silvertor ransomware is a malicious program that encrypts data
Contents
Silvertor ransomware is categorized as a file-encrypting virus that can lock all data on the infected computer. The affected information is appended with .Silvertor file extension and can no longer be opened or used in any other way. This cyber threat operates as a twitter_can_demo.exe process and leaves README.html file as a ransom-demanding message. Victims are asked to write to iaminfected.sac@elude.in email address after transferring $250 in Bitcoins to 1MZinQ6gWvuwNfSupXL3VrErZ9jay9BXmh cryptocurrency wallet.
It is common that people install ransomware-type infections when they browse of illegal websites. After the infiltration, the file-encrypting virus scans all data on the affected system and starts file encryption. Usually, these malicious programs encode videos, documents, voice memos, photographs, and other files. Unfortunately, the strong cryptographic algorithm makes the information inaccessible for the regular user. In other words, all files with .Silvertor extension cannot be opened or used.
Shortly after the encryption, victims receive a README.html file that serves as a ransom note. Cybercriminals inform users about the attack and claims that none of the commercial decryption tools can help recover the encoded files. Users are offered to pay $250 in Bitcoins to receive the original Silvertor Decryptor from the attackers. Additionally, the crooks threaten to delete the decryption key if the user fails to pay within the first 10 hours of the infection.
The attackers indicate their cryptocurrency wallet (1MZinQ6gWvuwNfSupXL3VrErZ9jay9BXmh) and demand to make the payment in Bitcoins. Such a technique is widely used to help protect criminals’ identities as cryptocurrency transactions are almost impossible to trace. Additionally, Silvertor virus displays a pop-up window that states how much time is left to pay the ransom and it appears every time the user restarts the computer.
Reasons why the crooks cannot be trusted
Even though the ransom note states that this attack is not a scam and the attackers promise to send the decryption key, our experience shows differently. There are numerous cases where criminals that are driven by monetary benefits fail to deliver the decryptor or even demand to pay more. Likewise, users should never reach out to them and follow their demands if they want to avoid financial losses.
Instead, security researchers recommend you to remove Silvertor ransomware virus if you have been infected. There is no simple way to complete the elimination on your own. Usually, file-encrypting viruses have numerous hidden components that are hard to locate and even harder to uninstall. The wisest decision would be to get a professional antivirus software to help you.
Geek’s Advice team recommends using RESTORO as it is a safe and effective software for Silvertor remains’ removal. You can simply install it on your system and run a full scan. The antivirus will identify all ransomware-related elements, put them into quarantine, and delete from your computer. In case you are unable to download the malware removal tool, try booting your PC into Safe Mode. More detailed instructions are appended at the end of this article.
Furthermore, uninstalling the ransomware from your system will not decrypt the affected files. In other terms, the encrypted information remains inaccessible. However, most people store backup copies on external devices. You can use them to recover your files back to the primary state.
Summary
Name | Silvertor ransomware |
Type | File-encrypting virus, Crypto-malware, File locker |
Similar threats | WastedLocker, STOP/DJVU, MAKOP |
Extension | .Silvertor |
Ransom note | README.html |
Executable | twitter_can_demo.exe |
Amount of the ransom | $250 in Bitcoins |
Contacts | iaminfected.sac@elude.in |
Cryptocurrency account | 1MZinQ6gWvuwNfSupXL3VrErZ9jay9BXmh |
Spread | Deceptive uploads on peer-to-peer (P2P) sites |
Symptoms | Files that are marked with .Silvertor extension can no longer be used; A pop-up stating how much time is left to pay the ransom appears on the screen every time the PC is restarted |
Decryption | You can currently restore data from backups only |
Removal | Get rid of this cyber threat with malware removal tool. For virus damage repair, use RESTORO |
Illegal websites carry ransomware-type infections
Many people are still browsing on suspicious and illegal websites to download various content. Usually, it is software cracks where people try to obtain paid programs for free. Unfortunately, cybercriminals have spotted the increased amount of interest to such sites and started using it for their malicious intentions. For example, ransomware and other cyber threat distribution.
The crooks upload ransomware executables disguised under well-known software names on peer-to-peer (P2P) file-sharing websites. Since regular computer users cannot identify an attempt to infiltrate a crypto-malware, they end up installing the infection by themselves. Likewise, it is essential that you download software from official sites only.
Learn how to uninstall Silvertor ransomware virus from your PC
As we have already mentioned, there is no easy way to remove Silvertor ransomware virus from your computer on your own. You can either get in-person help from the professional or use a reputable and recommended malware removal tools. They are highly effective while trying to uninstall malicious programs as they can easily identify all ransomware-related components.
After Silvertor removal, we recommend scanning with RESTORO. It is an easy-to-use application that can quickly repair virus damage to the system. In this case, you should boot your computer into Safe Mode. A more detailed guide on how to uninstall ransomware is appended at the end of this article. Once you get rid of the infection, you can proceed to restore the encrypted data from backups.
OUR GEEKS RECOMMEND
Our team recommends removing malware using a professional antivirus software.
REMOVE THREATS WITH ROBUST ANTIVIRUS
Get INTEGO ANTIVIRUS for Windows to remove ransomware, Trojans, adware and other spyware and malware variants and protect your PC and network drives 24/7. This VB100-certified security software uses state-of-art technology to provide protection against ransomware, Zero-Day attacks and advanced threats, Intego Web Shield blocks dangerous websites, phishing attacks, malicious downloads and installation of potentially unwanted programs.
Use INTEGO Antivirus to remove detected threats from your computer.
GeeksAdvice.com editors select recommended products based on their effectiveness. We may earn a commission from affiliate links, at no additional cost to you. Learn more.
Silvertor ransomware virus Removal Guidelines
Method 1. Enter Safe Mode with Networking
Step 1. Start Windows in Safe Mode with Networking
Before you try to remove the virus, you must start your computer in Safe Mode with Networking. Below, we provide the easiest ways to boot PC in the said mode, but you can find additional ones in this in-depth tutorial on our website – How to Start Windows in Safe Mode. Also, see a video tutorial on how to do it:
Instructions for Windows XP/Vista/7 users
- First of all, turn off your PC. Then press the Power button to start it again and instantly start pressing F8 button on your keyboard repeatedly in 1-second intervals. This launches the Advanced Boot Options menu.
- Use arrow keys on the keyboard to navigate down to Safe Mode with Networking option and press Enter.
Instructions for Windows 8/8.1/10 users
- Open Windows Start menu, then press down the Power button. On your keyboard, press down and hold the Shift key, and then select Restart option.
- This will take you to Windows Troubleshoot screen. Choose Troubleshoot > Advanced Options > Startup Settings > Restart. Tip: If you can't find Startup Settings, click See more recovery options.
- In Startup Settings, press the right key between F1-F9 to enter Safe Mode with Networking. In this case, it is the F5 key.
Step 2. Remove files associated with the virus
Now, you can search for and remove Silvertor ransomware virus files. It is very hard to identify files and registry keys that belong to the ransomware virus, Besides, malware creators tend to rename and change them repeatedly. Therefore, the easiest way to uninstall such type of a computer virus is to use a reliable malware removal program. In addition, we suggest trying a combination of INTEGO Antivirus (removes malware and protects your PC in real-time) and RESTORO (repairs virus damage to Windows OS files).
Method 2. Use System Restore
In order to use System Restore, you must have a system restore point, created either manually or automatically.
Step 1. Boot Windows in Safe Mode with Command Prompt
Instructions for Windows XP/Vista/7 users
- Shut down your PC. Start it again by pressing the Power button and instantly start pressing F8 button on your keyboard repeatedly in 1-second intervals. You will see Advanced Boot Options menu.
- Using arrow keys on the keyboard, navigate down to Safe Mode with Command Prompt option and press Enter.
Instructions for Windows 8/8.1/10 users
- Launch Windows Start menu, then click the Power button. On your keyboard, press down and hold the Shift key, and then choose Restart option with the mouse cursor.
- This will take you to Windows Troubleshoot screen. Choose Troubleshoot > Advanced Options > Startup Settings > Restart. Tip: If you can't find Startup Settings, click See more recovery options.
- In Startup Settings, press the right key between F1-F9 to enter Safe Mode with Command Prompt. In this case, press F6 key.
Step 2. Start System Restore process
- Wait until system loads and command prompt shows up.
- Type cd restore and press Enter, then type rstrui.exe and press Enter. Or you can just type %systemroot%system32restorerstrui.exe in command prompt and hit Enter.
- This launches System Restore window. Click Next and then choose a System Restore point created in the past. Choose one that was created before ransomware infection.
- Click Yes to begin the system restoration process.
After restoring the system, we recommend scanning the system with antivirus or anti-malware software. In most cases, there won't be any malware remains, but it never hurts to double-check. In addition, we highly recommend checking ransomware prevention guidelines provided by our experts in order to protect your PC against similar viruses in the future.
Alternative software recommendations
Malwarebytes Anti-Malware
Removing spyware and malware is one step towards cybersecurity. To protect yourself against ever-evolving threats, we strongly recommend purchasing a Premium version of Malwarebytes Anti-Malware, which provides security based on artificial intelligence and machine learning. Includes ransomware protection. See pricing options and protect yourself now.
System Mechanic Ultimate Defense
If you're looking for an all-in-one system maintenance suite that has 7 core components providing powerful real-time protection, on-demand malware removal, system optimization, data recovery, password manager, online privacy protection and secure driver wiping technology. Therefore, due to its wide-range of capabilities, System Mechanic Ultimate Defense deserves Geek's Advice approval. Get it now for 50% off. You may also be interested in its full review.
Disclaimer. This site includes affiliate links. We may earn a small commission by recommending certain products, at no additional cost for you. We only choose quality software and services to recommend.
Scott Bolton is a senior content strategist in our Geek’s Advice team. He is exceptionally passionate about covering the latest information technology themes and inspire other team members to follow new innovations. Despite the fact that Scott is an old-timer among the Geeks, he still enjoys writing comprehensive articles about exciting cybersecurity news or quick tutorials.
Leave a Reply