Do you know what German Jigsaw .spaß is?
German Jigsaw .spaß is a German version of Jigsaw Ransomware, an older ransomware infection that is known well to malware researchers. Even though it is no doubt a newly-released version, research has shown that it does not differ much from the previous versions of Jigsaw Ransomware. It encrypts files on affected computers with the intention of obtaining money from them. Files this threat locks include .jpg, .ppsx, .avi, .mov, .mpeg, .asx, .ps, .as, .xla, .h, .php, .rar, and .ses, to name only a few popular extensions. You will be asked to pay a ransom to save your personal files. It might seem to be the easiest and quickest way to get files back, but, in our opinion, it is not an option to consider. Transferring money to ransomware creators is not an effective solution to the problem, believe us. It is simply because there are no guarantees that the special tool that can unlock encrypted data will be sent to you after you send money to cyber criminals. Even if you agree to pay a ransom, it does not mean that German Jigsaw .spaß will be removed from your system automatically. It is not very likely that it will be removed from the system for you. Do not worry; we will help you to remove German Jigsaw .spaß in this report.
There are two files German Jigsaw .spaß drops on affected computers once executed. The first one drpbx.exe is placed in the folder %LOCALAPPDATA%\Drpbx, whereas the second one Chrome32.exe can be found in %LOCALAPPDATA%\Google (x86). Even though it may seem to be a legitimate Google Chrome file at first glance, we can assure you that this file is malicious. It even has a point of execution in the system registry, which allows it to start working on system startup. This also clearly shows that you will not disable the ransomware infection you have encountered by simply restarting your computer.
German Jigsaw .spaß screenshot
Scroll down for full removal instructions
The first symptom that will show you that German Jigsaw .spaß has entered your system successfully is a screen with a timer, a ransom note, and images from Jigsaw opened on Desktop. The ransom note will inform you that your personal files have been encrypted. Also, it will warn you that 1000 files will be deleted if the window is minimized or you turn off/restart the computer. It will also tell you that some personal files will be deleted from your system every day. It seeks to convince you to make a payment immediately, but, in our opinion, this is definitely not what you should do. We know you need to unlock your personal files badly, but we also know that sending Bitcoin to the developer of German Jigsaw .spaß may not have the desirable effect. In other words, there are no guarantees that the .spaß filename extension will be removed from your files and thus your files will be fixed. You probably do not know much about ransomware infections, so you probably also do not know that a bunch of users who decide to send money in exchange for the decryption tool do not even get it from cyber criminals. The chances are high that you will be one of them, so we would recommend that you find an alternative way to fix your files. You could easily retrieve your files if you have a backup, but we, unfortunately, cannot promise that it will be easy to get files back if you have never backed them up in your life.
Malware researchers already know how malicious software is usually distributed these days. According to them, a bunch of users are responsible for the appearance of crypto-threats on their systems themselves. As has been observed, users often open email attachments that contain malware out of curiosity and thus get infected with ransomware or other harmful infections immediately. We would also not be surprised if you told us that malware has appeared on your system after downloading new software from the web because a bunch of shady websites promote computer threats these days.
German Jigsaw .spaß cannot stay active on your system. This malicious application must be erased completely because it has a point of execution. In other words, if you do nothing, it will continue working and checking your system to find new files to encrypt every time you turn on your computer.
Delete German Jigsaw .spaß
- Press Ctrl+Shift+Esc.
- Open Processes.
- Right-click on the malicious process that belongs to German Jigsaw .spaß.
- Select End Process or End task.
- Close Task Manager.
- Open Windows Explorer (tap Win+E).
- Delete these two files:
- %LOCALAPPDATA%\Google (x86)\Chrome32.exe
- %LOCALAPPDATA%\Drpbx\drpbx.exe
- Tap Win+R.
- Insert regedit and click OK.
- Move to HKCU\Software\Microsoft\Windows\CurrentVersion\Run.
- Delete the Chrome32.exe Value from this registry key.
- Empty Trash.
In non-techie terms:
German Jigsaw .spaß is a serious threat that has been developed to obtain money from users. To extract money from them, it locks files following the successful entrance and opens a window on their screens. Never pay money to malicious software developers – nine times out of ten, they do not help users to unlock their personal files. They only want money. No worries; you will close the window opened and delete German Jigsaw .spaß yourself manually if you simply follow the above-provided instructions.