FilesLocker Ransomware

FilesLocker Ransomware shows a warning written in English and Chinese that urge reading specific a text document. The note’s text instructs the user to pay a ransom to receive a decryption key which ought to decrypt the files affected by this threat. It encrypts user’s personal data with a strong cryptosystem, and so the files become unusable. Even if the data that got locked is irreplaceable, we would advise you not to make any rash decisions. The hackers ask for quite a considerable sum, and even though they promise to hold on to their end of the deal, in reality, there are no guarantees they will do so. In other words, you could be scammed, and if you do not want to risk being tricked, we advise restoring your data from backup copies instead. Of course, for your data’s safety, you should remove the malware first and only then transfer the copies. To erase FilesLocker Ransomware manually you could follow the instructions below the article, and if you cannot decide what to do yet, we encourage you to read the rest of the text.

Based on the languages used in the ransom note it is likely the malicious application ought to be spread in countries where people speak English and Chinese. FilesLocker Ransomware could be spread with Spam emails or via unreliable file-sharing web pages. Naturally, the file carrying the infection may not look malicious on purpose so the user would be unafraid to open it. This is why users should avoid even harmless looking data if it comes from unknown senders or torrent and other questionable web pages. The first thing you should do if you doubt the received file’s reliability is to scan it with a trustworthy antimalware tool that could tell you whether it is dangerous or not. There is always time to examine the file first, even if the message, it comes with, urges to open it immediately. In fact, in such case, you should be even more cautious because hackers often distribute such threats with letters claiming the user has to open the attached file as soon as possible.

After FilesLocker Ransomware infects the system, it should try to remain unnoticed until it finishes encrypting user’s files. It could target various personal files, such as photos, videos, archives, and so on. During the encryption process, all of the targeted files should become marked with a second extension called .[fileslocker@pm.me] one by one. The moment this process is over, FilesLocker Ransomware is supposed to play a message saying: “Hello, Attention! Your documents, images, databases and other important files have been encrypted!” while using Text-to-Speech function. Then, it should open a window with a message written in English and Chinese. According to the English version, the user’s files were locked and to learn how to get them back he should read a text document called #DECRYPT MY FILES#.txt. As for the Chinese version, it urges to read a paper with a Chinese title. The contents of both documents are the same even if they are written in different languages.

To be more accurate, FilesLocker Ransomware’s ransom notes claim the user would have to pay 0.25 Bitcoins to receive his decryption key. Currently, 0.25 BTC is around 983 US dollars, so it is not a small sum considering many ransomware applications demand to pay from 20 to 200 US dollars. However, to pay the sum, the user is asked to contact the hackers first so they could explain how to make the payment. They even suggest decrypting a few files free of charge just to prove to victims they have the needed decryption tools. The problem is you cannot know the hackers will give away these means as easy as they promise.

Needless to say, if you do not want to put your savings at risk, we would advise you not to put up with any demands. Encrypted data can be replaced with backup copies if you have them. Just before attempting to restore any files, you should clean the system. To erase FilesLocker Ransomware manually you could follow the steps available below, but it might be easier to install a reliable antimalware tool and do a system scan with. Afterward, you ought to be able to remove all identified threats by pressing the given deletion button.

Eliminate FilesLocker Ransomware

1. Tap Ctrl+Alt+Delete.
2. Launch Task Manager.
3. Look for the malware’s process.
4. Select the process and press End Task.
5. Leave the Task Manager.
6. Click Win+E.
7. Find these locations:
   %TEMP%
   %USERPROFILE%\desktop
   %USERPROFILE%\downloads
8. Look for the threat’s installer, right-click it and press Delete.
9. Find the malware’s ransom notes (#DECRYPT MY FILES#.txt), right-click them and choose Delete.
10. Exit File Explorer.
11. Empty Recycle bin.
12. Restart the system.