Do you know what FilesLocker Ransomware is?
If your screen has been locked by FilesLocker Ransomware, restart your computer immediately. That will disable the screen-locker, and you will be able to hunt down and delete the files that belong to this malicious infection. Of course, the message that is represented using the locker might trick you into believing that you need to pay a ransom to have your personal files decrypted. Unfortunately, the threat is capable of encrypting files, and it is not just a trick to make you give up your savings. That being said, there is no reason for you to pay attention to the demands. First of all, you are unlikely to obtain a decryption key if you follow all demands. Second, it appears that a free decryptor exists. Look for a tool named “FilesLockerDecrypter,” but make sure you do not accidentally execute malware! Of course, whether or not you restore your files successfully, you must remove FilesLocker Ransomware.
According to our malware researchers, there are several different version of FilesLocker Ransomware, and while older versions should be decryptable, we cannot promise you that the version that might have attacked your system can be overcome in the same way too. It would be devastating to face an undecryptable version of this threat because it can encrypt a variety of different kinds of files. In fact, our research team counts at least 369 different types of files, among which are PDF, DOC, JPG, MP3, AVI, and similar types of files. That means that once FilesLocker Ransomware slithers in – which it is likely to do by exploiting unsafe RDP configurations – all of your personal files are at risk. Unfortunately, this is not the only threat that can put your personal files at risk. Because threats like Dharma Ransomware (audit24@qq.com variation), Rabbit Ransomware, and Gillette Ransomware exist, it is crucial that all files are backed up. If malware finds a way in, at least your files will be safe if you create backups.
FilesLocker Ransomware screenshot
Scroll down for full removal instructions
When files are encrypted, the “.[fileslocker@pm.me]” extension is added to their names. Also, an audio message is played several times. This message states: “Attention! Your documents, images, databases and other important files have been encrypted!” As we discussed earlier, FilesLocker Ransomware also launches a screen-locking window. Its purpose is to deliver a message that instructs victims to pay a ransom. It is suggested that if the victim paid a ransom of 0.25 Bitcoin and then sent a message to fileslocker@pm.me, a “decryption tool” would be created. As you now know, it is enough to restart the computer to get rid of this message. To repeat the message, the creator of FilesLocker Ransomware also replaces the Desktop wallpaper using an image file called “WallPaper.bmp,” and two text files called “#解密我的文件#.txt” and “#DECRYPT MY FILES#.txt” are created as well. Deleting these shouldn’t be a problem.
You have to decide for yourself if you want to take the risk of paying the ransom, but if a free decryptor truly exists, there is no point in exposing yourself to the attackers via email or wasting your money. Even if the decryptor did not exist, we would not recommend paying the ransom because trusting that cyber criminals would provide a decryptor is just foolish. We hope that you can recover files – if not using free software, then by replacing corrupted files with backups – and then delete FilesLocker Ransomware. The removal guide below explains how to get rid of this infection manually, but you will not succeed unless you can find the launcher file. What’s the alternative? Installing anti-malware software, and since it can erase threats and reinforce protection at the same time, we suggest taking this path.
Remove FilesLocker Ransomware
- Restart the computer to get past the screen-locker.
- Delete recently downloaded files to eliminate the [unknown name].exe launcher file.
- Delete ransom note files named #解密我的文件#.txt and #DECRYPT MY FILES#.txt.
- Move to the Desktop and Delete the file named WallPaper.bmp.
- Empty Recycle Bin and install a reliable malware scanner to examine your operating system.
In non-techie terms:
FilesLocker Ransomware is a monstrous infection that encrypts files, locks the screen, and then terrorizes victims to push them into paying a huge ransom. The infection was created with the sole purpose of making money, and all information is set up in a way to ensure that the victim obeys. Unfortunately, if the ransom is paid, the decryption tool that is promised in return is unlikely to end up in anyone’s hands. The good news is that a real free decryptor should exist, but whether or not it works for you, you must remove FilesLocker Ransomware, and while you might be more interested in deleting the threat manually, we strongly recommend employing anti-malware software. If we can leave you with one last advice, do not forget that backing up files is very important!