Return to site

Avast restore deleted file

broken image
broken image

It also informs victims that the price of a decryption tool and unique key depends on whether they will contact the attackers within or after 72 hours from the attack. The '_readme.txt' file instructs victims to contact cybercriminals using or email address. Screenshot of a message encouraging users to pay a ransom to decrypt their compromised data: Cool is part of the Djvu ransomware family.

broken image
broken image

cool' extension to filenames (for example, it renames ' 1.jpg' to ' 1.jpg.cool', ' 2.jpg' to '2.jpg.cool') and creates the ' _readme.txt' file - a ransom note. Cool is ransomware that prevents victims from accessing files by encrypting them.