PLANETARY is a ransomware that was discovered by the security researcher Lawrence Abrams. It’s an updated variation of HC7 and it’s spread manually. What we mean is, people behind it hijack computer networks remotely and put this threat on all of the machines that are part of it. But it can also attack individual PCs and it gets to work as soon as it manages to make its way inside of them. It starts attacking files and encrypting them, and the “.PLANETARY” extension gets appended to all of them, without any exception. Once this process is over and done with, a ransom note called “RECOVER.txt” is created and put on the Desktop. The following message can be found inside of it –
‘ALL FILES ARE ENCRYPTED.
TO RESTORE, YOU MUST SEND $700 EQUIVALENT FOR ONE COMPUTER
OR $5,000 FOR ALL NETWORK
PAYMENTS ACCEPTED VIA BITCOIN, MONERO AND ETHEREUM
BTC ADDRESS: [bitcoin_address]
MONERO (XMR) ADDRESS: [monero_address]
CONTACT US WHEN ETHEREUM PAYMENT INFORMATION
BEFORE PAYMENT SENT EMAIL [email protected]
ALONG WITH YOUR IDENTITY: [base64_encoded_computer_name]
INCLUDE SAMPLE ENCRYPTED FILE FOR PROOF OF DECRYPT
NOT TO SHUT OFF YOUR COMPUTER, UNLESS IT WILL BREAK’
First things first – there’s no decryption tool for this virus at the moment. But it still doesn’t mean you have to pay to people responsible for it. As a matter of fact, you can do just the opposite and invest your money into security software like Spyhunter. All of the instructions on how to use it can be found below the article, so your efforts should eventually reward you with needed results, even if you never had to go through something like this before. As soon as they do, you can start recovering your data from backup. It should be pointed out that both of those processes take time, so it’s in your best interest to protect the system from being infected by ransomware.
Doing that doesn’t require much from your side – don’t agree to update your software if the prompt for it gives you suspicions and don’t open the attachments that come with spam emails. Refrain from clicking on links and advertisements hosted on file-sharing services and adult pages, limit your visits to shady sites in general (there may be rootkits hosted on them), and keep Spyhunter updated and running all the time. Adhering to these guidelines should be enough to firmly guard your computer from being attacked by threats like PLANETARY.