Mr. Dec Virus — How To Remove it and Restore Affected Data

Mr. Dec virus image

The Mr. Dec virus has been discovered in a small attack campaign. While the initial strains do not feature advanced code it is expected that future versions will be much more dangerous. The affected files are renamed with random extensions, read more about the threat in our removal guide.

Threat Summary

NameMr. Dec
TypeRansomware, Cryptovirus
Short DescriptionThe ransomware encrypts sensitive information on your computer system with the .[random-extension] extensions and demands a ransom to be paid to allegedly recover them.
SymptomsThe ransomware will encrypt your files with a strong encryption algorithm.
Distribution MethodSpam Emails, Email Attachments
Detection Tool See If Your System Has Been Affected by Mr. Dec

Malware Removal Tool

User ExperienceJoin Our Forum to Discuss Mr. Dec.Data Recovery ToolWindows Data Recovery by Stellar Phoenix Notice! This product scans your drive sectors to recover lost files and it may not recover 100% of the encrypted files, but only few of them, depending on the situation and whether or not you have reformatted your drive.

Mr. Dec Virus – Distribution Ways

The Mr. Dec virus has been identified in a very small attack campaign that does not give out the primary distribution tactics. As such we expect that the most common methods are going to be used.

Future Mr. Dec virus campaigns can utilize SPAM email messages that rely on social engineering tactics. They use text and graphics that have been hijacked from legitimate sites, products and services in order to blackmail the recipients into infecting themselves. This is done by either attaching the file directly to the messages or hyperlinking the relevant in the body contents. In connection with this payloads can be spread using them. Two of the most popular examples include the following:

*** This is a Security Bloggers Network syndicated blog from How to, Technology and PC Security Forum authored by Martin Beltov. Read the original post at: