Remove DC Ransomware

The Dharma Ransomware is still one of the more prominent file-encryption Trojans being spread online. Unfortunately, victims of this threat are unlikely to have access to a reliable data recovery option. The reason for this is because the Dharma Ransomware uses a very safe file-locking mechanism that can only be reverse by obtaining a decryption key from the server of its creators. One of the latest versions of the Dharma project is titled the DC Ransomware and, sadly, it is also impossible to decipher. Another recent variant is the WORM Ransomware.

The DC Ransomware is likely to reach most of its victims through spearphishing emails, which are designed to look like messages from legitimate companies and entities. In reality, however, they bear a malicious attachment, which carries the DC Ransomware payload. Once a victim executes the dangerous file, they may unknowingly unleash the file-encryption Trojan on their system.

The DC Ransomware Attack

When this ransomware gets to work, it will immediately lock a long list of file formats. Interestingly enough, the DC Ransomware appears to target some critical file types too – such as executable files. This means that victims of this malware might be unable to run many of their applications. In addition to this, the threat will also lock documents, archives, media, and other data.

The DC Ransomware marks files by applying the following suffix to their name – '.id-<VICTIM ID>.[dc1@imap.cc].DC.' It also delivers the ransom message 'FILES ENCRYPTED.txt.' It is not a surprise that DC Ransomware's creators ask victims to pay a ransom sum via Bitcoin. We advise you not to trust them, because it is very likely that you will get scammed if you send them any money. Instead, it is better to use an antivirus tool to eliminate the malware, and then experiment with the available data recovery tools and options.