8chan Ransomware

8chan Ransomware is a malicious threat that asks to contact its creators through the supdec@8chan.co email address. It is not an option we would recommend since it is entirely possible the cybercriminals behind this infection could scam you and leave you empty-handed. Even though the malware encrypts various personal files located on the computer, victims can still recover them from backup. Also, our researchers say the malicious program is a new variant of Scarab Ransomware and consequently, there is a possibility its damaged files could be decrypted with tools created by volunteer IT specialists. Therefore, if you have no other way to unlock your data, it might be a good idea to see if anyone managed to create a decryptor, just make sure the tool comes right from the website of the security specialists who created it; otherwise, you might end up with more threats on the system. As for more details about 8chan Ransomware’s working manner and its removal, we encourage you to read the rest of our article.

According to our researchers, it is most likely the malware is being distributed through Spam emails, unsafe RDP (Remote Desktop Protocol) connections, and other similar channels. Naturally, to stay away from threats like 8chan Ransomware in the future, users should watch out for suspicious files received from unknown senders or other untrustworthy data downloaded from the internet, for example, software installers, updates, etc. In addition, we would advise updating the operating system and all other programs that could be out of date. Plus, if you have any old and weak passwords, you should change them to strong ones right way. Doing all of this might help users eliminate possible system’s vulnerabilities that could be used to gain access to the computer and plant malware directly. No doubt, another good idea would be to employ a reliable antimalware tool as such applications are designed to guard the PC against various malicious programs.

However, if you are not so cautious and end up receiving 8chan Ransomware, all your personal files should become encrypted, and they may have one of the following second extensions: .decrypts@8chan.co, .777@8chan.co, .recover@8chan.co, and so on. Besides, victims should see a text document called HOW TO RECOVER ENCRYPTED FILES-[used_extension].txt on their Desktop or other directories containing encrypted data too. It is a ransom note from the infection’s creators and accordingly it carries instructions on how to contact these people to unlock damaged files. The problem is, once the user approaches them the hackers might try to extort money from him and sadly, there are no guarantees they will hold on to their words. Meaning, the threat’s developers could start asking for even more money or just never reply you. Thus, if you do not wish to lose your money in vain, we would recommend finding other ways to decrypt your files.

Users who do not want to put up with any demands and risk their savings should delete the malware with no hesitation. The process might be a bit complicated as the threat could place randomly titled files in different directories, but if you follow the instructions located a bit below this article, we will try to guide you through it. Nonetheless, if you do not think you can get rid of 8chan Ransomware manually, you could install an antimalware tool of your choice and use it to eliminate the malicious program.

Lastly, it is crucial to mention that if the malware enters the system, it may drop even more malicious programs on it. Our researchers report, 8chan Ransomware placed a Trojan infection on the computer they tested it with. This is why, if you decide to erase the threat manually, it might still be a good idea to scan the system with a reliable antimalware tool too. In case the ransomware came not alone, the antimalware tool of your choice might help you detect and remove the other infection before it causes more trouble. Should you need any additional assistance or have questions about the threat, keep it in mind, you can leave us a message below the text too.

Erase 8chan Ransomware

1. Press Ctrl+Alt+Delete.
2. Go to the Task Manager.
3. Find the malware’s process.
4. Mark this process and click End Task.
5. Exit Task Manager.
6. Tap Win+E.
7. Go to these directories:
   %TEMP%
   %USERPROFILE%\desktop
   %USERPROFILE%\downloads
8. See if you can find the malicious file you opened before the threat appeared.
9. Right-click the suspicious file and press Delete.
10. Navigate to:
    %APPDATA%\Microsoft
    %TEMP%
11. See if you can find recently added files that could belong to the infection.
12. Right-click the suspicious files and press Delete.
13. Look for ransom notes, for example, HOW TO RECOVER ENCRYPTED FILES-[used_extension].txt, right-click them and press Delete.
14. Exit File Explorer.
15. Tap Win+R.
16. Insert Regedit and press Enter.
17. Find this location: HKU\[users_ID]\Software\Microsoft\Windows\CurrentVersion\Run
18. Search for a suspicious value name with a random title, right-click it and select Delete.
19. Exit Registry Editor.
20. Empty Recycle bin.
21. Reboot the PC.