BitCryptor is Windows ransomware from 2015 that replaced CoinVault after Dutch police seized CoinVault's command server. It reuses most of that code but drops the Dutch-language text and every reference to its predecessor, and it adds a background task that checks whether the victim has paid; the operators demanded bitcoin. It is a separate family from BitCrypt. Two suspects were arrested in the Netherlands in September 2015, and the last keys were then pulled from the operators' servers, so Kaspersky's free CoinVault Decryptor, which No More Ransom distributes, also unlocks BitCryptor files. Keep the encrypted files and run the tool before considering anything else.
Sources: Kaspersky, Kaspersky, No More Ransom, PCWorld
Decryptor: A free decryptor is available. Checked 2026-10-30.
Sources: Kaspersky
Dealing with an active incident? Our incident response team is available 24/7.
Emergency response: +1 (877) 364-5161