Do you know what SoFucked Ransomware is?
According to our cybersecurity experts, SoFucked Ransomware is a new ransomware-type computer infection that can get onto your computer by stealth and then encrypt your personal files. After encrypting them, it will demand that you pay a ransom for a decryption key to decrypt your files. The bad news is that the cyber criminal behind this ransomware might not send you the key once you have paid. Therefore, we recommend that you remove this malware instead. In this article, we will cover information regarding SoFucked Ransomware’s distribution, functionality, and removal, so if it has infected your PC, then we invite you to read more.
If your computer were to become infected with SoFucked Ransomware, then it will enumerate the information of the PC and its variables and begin the encryption process. Our researchers say that this particular ransomware was configured to encrypt file types such as cpp, gif, css, 7z, cs, zip, jpg, lib, log, xml, pdb, db, snp, pak, json, dat, cer, tcl, png, and many others to compel you to pay the ransom. It appends the encrypted files with an ".fff" file extension which acts as a file marker. This ransomware was set to encrypt files in specific locations only. The list of locations where it encrypts the outlined file types includes the following:
- %PROGRAMFILES%
- %PROGRAMFILES(x86)%
- %LOCALAPPDATA%
- %USERPROFILE%\Desktop
- %USERPROFILE%\Downloads
- %USERPROFILE%\Documents
SoFucked Ransomware was configured to encrypt valuable and (hopefully) personal files to compel you to pay the ransom. The sum to be paid is not specified, however, so you have to contact the cyber criminal to know how much you have to pay. This ransomware was configured to encrypt your files using Advanced Encryption Standard (AES) with a 256-bit length key. This encryption method ensures a strong encryption, and no free decryption tool can crack the encryption of this ransomware.
SoFucked Ransomware screenshot
Scroll down for full removal instructions
Once the encryption is complete, this ransomware drops a ransom note named "READTHISHIT.txt" into each folder where files were encrypted. The note featured an email address to which you have to send an email in order to receive instructions on how to pay the ransom. Again, you should not pay the ransom because there is no guarantee that you will get the promised decryption key.
As far as the distribution methods of SoFucked Ransomware are concerned, researchers say that this ransomware is most likely distributed using email spam. The emails are probably sent from a dedicated server and are disguised as a document from some sort of company. The emails have an attached file that is this ransomware. If you click this file, then your computer will become infected with SoFucked Ransomware. Alternatively, this ransomware can infect your computer if you visit an infected website that was compromised with an embedded exploit kit. Of course, this ransomware can be distributed using some other methods as well.
We hope you found this article insightful and are now ready to remove SoFucked Ransomware . We recommend that you get rid of it because you cannot risk paying the ransom because its developer might not send you the decryption key and the sum of money asked of you might not be worth your files. Please see the guide below on how to delete it. Note that the guide requires you to use SpyHunter’s free scanner to detect this malware.
In non-techie terms:
- Open your browser.
- Go to http://www.spyware-techie.com/download-sph
- Download SpyHunter-Installer.exe.
- Install the program and run it.
- Click Scan Computer Now!
- Copy the file path of the malware from the scan results.
- Press Windows+E keys.
- Enter the file path of the malware in File Explorer’s address box.
- Press Enter.
- Locate, right-click the malicious files and click Delete.
- Empty the Recycle Bin.
In non-techie terms:
SoFucked Ransomware is a highly dangerous computer infection that can encrypt your personal files and then demand that you pay money for a decryption key that is not certain to work. Its creator is only interested in money, so you might not receive that key even after you pay. Therefore, we recommend that you remove this ransomware as soon as you can.