Rpc Ransomware 🔐 (. Rpc File) — Removal Guide

What is known about the Rpc virus?

The scheme of renaming is the following: victim_id.[contact_email].RPC. As a part of encryption, a file named, for example, “report.docx” will be changed to “report.docx.id-9ECFA84E.[].RPC”.

In every directory that contains the encoded files, a recinfo.txt text document will be created. It is a ransom money note. Therein you can find information about the ways of contacting the racketeers and some other information. The ransom note usually contains a description of how to buy the decryption tool from the racketeers. You can get this decoding tool after contacting through email. That is how they do it.

The recinfo.txt document coming in package with the Rpc ransomware states the following:

all your data has been locked us
You want to return?
write email  or 

In the screenshot below, you can see what a folder with files encrypted by the Rpc looks like. Each filename has the “.RPC” extension appended to it.

How did my machine catch Rpc ransomware?

There are currently three most popular ways for malefactors to have the Rpc virus planted in your digital environment. These are email spam, Trojan infiltration and peer networks.

If you open your mailbox and see letters that look like familiar notifications from utility services providers, delivery agencies like FedEx, web-access providers, and whatnot, but whose addresser is unknown to you, beware of opening those emails. They are most likely to have a harmful item enclosed in them. So it is even riskier to open any attachments that come with letters like these.

Another option for ransom hunters is a Trojan virus model³. A Trojan is a program that infiltrates into your machine disguised as something legal. For example, you download an installer of some program you need or an update for some program. However, what is unboxed turns out to be a harmful program that compromises your data. As the update file can have any name and any icon, you have to make sure that you can trust the resource of the things you’re downloading. The best thing is to use the software companies’ official websites.

As for the peer-to-peer networks like torrent trackers or eMule, the danger is that they are even more trust-based than the rest of the Web. You can never know what you download until you get it. So you’d better be using trustworthy resources. Also, it is reasonable to scan the directory containing the downloaded objects with the antivirus as soon as the downloading is complete.