Click on screenshot to zoom
Danger level 7
Type: Trojans
Common infection symptoms:
  • Installs itself without permissions
  • Connects to the internet without permission


Trojan.Ruftar is a serious infection that will not allow you to access your photos, documents, and other files after the infiltration on your system. This infection acts very similarly as Cryptowall and CryptoDefense. It means that Trojan.Ruftar will lock your files and demand a ransom for the private key. We do not recommend paying any money because you will lose them and there are no guarantees that you will gain access to your files. Even though you are not going to pay money, you should still delete Trojan.Ruftar from the system because this software might do different kinds of suspicious activities behind your back, for instance, connect to the internet without your permission and even attract other undesirable programs onto your computer. Unfortunately, the removal of Trojan.Ruftar might seem challenging, which is why we recommend that you continue reading the article.

The researchers of have done a research and found out that Trojan.Ruftar might encrypt various files with such extensions as .psd, .mpeg, .xlsm, .ppt, .csv, .pdf, .cer and others. It means that you will not be able to access them. Trojan.Ruftar uses RSA encryption method in order to encrypt files and then sends public and private keys to its server. If you restart your computer, you will notice a warning stating that your files have been arrested. In addition, you will be asked to write an email to for the resolution of the situation. Unfortunately, it does not seem that this “customer support” will help you; it might just ask you to pay a ransom in order to receive the key.

Keep in mind that there are plenty of similar infections out there, which is why we recommend backing up the most important files and keeping an antimalware tool enabled all the time. Besides, it is also not advisable to click on suspicious advertisements, download programs from unreliable sources, and open spam emails, especially if they are sent by unknown senders. If you follow our advice, there are no doubts that you will be able to avoid various undesirable programs.

You will not be able to remove Trojan.Ruftar yourself; thus, we recommend scanning the system with a licensed malware remover. Unfortunately, this will not help you to decrypt your files because private and public keys are known to cyber criminals only. If you do not have any security tool installed on the system, we recommend that you do so as soon as possible because there are much more serious threats out there that are just waiting for the opportunity to enter your system.

Download Spyware Removal Tool to Remove* Trojan.Ruftar
  • Quick & tested solution for Trojan.Ruftar removal.
  • 100% Free Scan for Windows

Post comment — WE NEED YOUR OPINION!

Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.