How does.PC-FunHACKED!-Hello Ransomware work?
If you discover .PC-FunHACKED!-Hello Ransomware, you need to check which files were encrypted by this malicious threat. According to our malware analysts, the infection can encrypt personal files and attach the “.PC-FunHACKED!-Hello” extension to their names. The sample of the infection that was tested in our internal lab behaved in an odd manner, and the extension repeated itself many times creating a very long one. All in all, if you were informed that files were encrypted, you notice a new extension attached to their names, and you can no longer open your files, there is no doubt that they were encrypted. So, what should you do to decrypt them? It is believed that a “Jigsaw decrypter” tool exists, and so you might want to look for that. Just be careful, because you do not want to install useless or malicious software posing as a decryptor. Whether or not you are able to decrypt data, do not forget that you must remove .PC-FunHACKED!-Hello Ransomware ASAP.
According to our research team, .PC-FunHACKED!-Hello Ransomware is a variant of the well-known Jigsaw Ransomware. This threat was first discovered years ago, but new variants keep emerging. It appears that the infection even looks like the original Jigsaw infection. The interface of the window that the threat launches after the encryption is certainly the same. It is believed that the threat spreads in the same way as well – using spam emails. Note that the spam emails created by cyber attackers can be very convincing, and the launchers could be concealed to trick you into opening them. Once the file is executed, .PC-FunHACKED!-Hello Ransomware strikes immediately. First, it encrypts files. Then it creates a file named “Address.txt” on the Desktop and launches a window entitled “Form1.” Even if close the widow, you still have the TXT file to refer to, and it should include the Bitcoin address that is also shown via the window along with the ransom demands.
.PC-FunHACKED!-Hello Ransomware screenshot
Scroll down for full removal instructions
According to the ransom note that .PC-FunHACKED!-Hello Ransomware delivers via the window, cyber attackers are playing “a game,” and the rules include sending “at least $100 worth of Bitcoin” to the attackers’ Bitcoin wallet (1Hd3tU8MDmuVotMgGJTJ7svzvPey6bfUgm). According to the message, files can be deleted if the ransom is not transferred right away. It is suggested that a few files can be deleted every hour that passes. After the first 24 hours, the number of files that are deleted increases. If the computer is turned off and restarted, 1000 files are eliminated at once. Unfortunately, we can confirm that this is not a trick to make you pay the ransom faster. That being said, you lost your files the moment they were encrypted, and cyber attackers are unlikely to restore them. Hopefully, you find a working decryptor. Now, let’s focus on the removal of .PC-FunHACKED!-Hello Ransomware.
We do not recommend deleting .PC-FunHACKED!-Hello Ransomware manually because this infection is extremely aggressive and complicated. The launcher file’s name and location are unknown too because they can be unique in every case. The guide below shows the basic steps that might help you remove the threat, but we cannot guarantee that you will succeed. On the other hand, if you employ a legitimate anti-malware program, it will have no trouble identifying and removing .PC-FunHACKED!-Hello Ransomware components. If other threats exist, they will be eliminated too. Moreover, your operating system will get the protection it needs to fend off malware.
Remove .PC-FunHACKED!-Hello Ransomware
- Launch Task Manager (right-click on the Taskbar and choose Start Task Manager).
- Go to Processes and scan the list to find malicious ones.
- Right-click the malicious process and choose Open file location to find the malicious .exe file.
- To kill the process, click End process, and to erase the file, right-click it and choose Delete.
- Right-click and Delete the ransom note file called Address.txt.
- Empty Recycle Bin and immediately run a full system scan to check for malicious leftovers.
In non-techie terms:
The malicious .PC-FunHACKED!-Hello Ransomware can silently encrypt your files and then demand a ransom for their decryption. The threat not only encrypts files but also starts deleting them after a set time. At first, you have one hour, and attackers expect you to pay a ransom of $100 in that time. Paying the ransom might seem like your only option, but it is the last thing you should consider doing. According to malware experts, a decryption tool called “Jigsaw decrypter” exists, and you want to apply it to get your files decrypted. Then, you want to delete .PC-FunHACKED!-Hello Ransomware from your operating system as soon as possible. While expert users might be able to remove this malware manually, we encourage every single victim to employ anti-malware software. If threats exist, they will be eliminated automatically, and your system’s protection will be reinstated too.