.AURORA File

An AURORA file is a file encrypted by the Aurora Virus, a trojan horse utilized by cybercriminals. It contains a user's file, such as a .WMV, .MP4, .XLSX, or .PDF file, encrypted with the 2048 bit RSA key. AURORA files became prevalent in 2018 and are similar to .LOCKY and .ODIN files.

The Aurora virus is highly dangerous malware. It is commonly referred to as ransomware, where the purpose of the virus is to take your files hostage and force you to pay the perpetrator (typically approximately $100 USD of bitcoin) to unlock your files. The virus is a trojan horse that is typically introduced through a personal .DOC file attached to an email. Once the virus affects your computer it begins scrambling your files, renaming them, and encrypting them. The virus then generates a .TXT ransom note named HOW_TO_DECRYPT_YOUR_FILES.txt, which informs you of the takeover and what you need to do to recover your files.

There is no program currently available to effectively restore your files. If you backup your files you can execute a full system restore. Otherwise, the only known way to decrypt your infected files is to pay the perpetrator for the private key and decrypt program.