[email protected] is a file extension added to encrypted files by a ransomware. By “ransomware” we mean: “a malicious software that kidnaps your files”… In other words, [email protected] encrypts files present in your computer and requests a payment if you want to have them back.
What’s different about [email protected]?
This malware goes specially after the following file formats: .PFD, .PTT, .DOC, .XLS, .TXT, .JPG; once it has encrypted them it will add a different file extension looking like this: [email protected]
This ransomware will also create a file (picture) where you’ll see the instructions to be able to pay. This file is called fud.bmp and will be open automatically when you try to open one of your files.
It says that your computer has been attacked by an encoder-virus, meaning all your files have been encrypted and it also explains that without the original key you won’t be able to get them back. In order to attain this key you must send an email to “[email protected]” using the subject “encryption” plus the id seen in the new file extension added to your files. These hackers also ask you to refrain yourself from sending threats, as it won’t do you any good…
Could we recover our encrypted files?
It’s a tough question with no easy answer; you could always try using Shadow Explorer to recover a Windows automatic backup, if such option was activated in your OS (keep reading for further explanations). You should know that attempting to break the encryption by force doesn’t work 99.9% of the time.
How can I protect myself from ransomware?
First of all, do not download silly tools from the Internet, and in any case your could use Hitman.Alert 3, a free software which includes a capability to protect you from ransomware.
How to remove [email protected] ?
Remove [email protected] with MalwareBytes Anti-Malware
Malwarebytes Anti-Malware is a light-weight anti-malware program that is excellent at removing the latest detections.
- Download Malwarebytes Anti-Malware to your desktop.
Premium Version Free Version (without Real-time protection) - Install MalwareBytes Anti-Malware using the installation wizard.
- Once installed, Malwarebytes Anti-Malware will automatically start and you will see a message stating that you should update the program, and that a scan has never been run on your system. To start a system scan you can click on the Fix Now button.
- If an update is found, you will be prompted to download and install the latest version.
- Malwarebytes Anti-Malware will now start scanning your computer for [email protected].
- When the scan is complete, make sure that everything is set to Quarantine, and click Apply Actions.
- When removing the files, Malwarebytes Anti-Malware may require a reboot in order to remove some of them. If it displays a message stating that it needs to reboot your computer, please allow it to do so.
Remove [email protected] with HitmanPro
HitmanPro is a second opinion scanner designed to rescue computers that have become infected with viruses, spyware, Trojans, rootkits and other malware, despite continuous protection from up-to-date antivirus software.
- You can download HitmanPro from the below link:
Download HitmanPro - Double-click on the file named HitmanPro.exe (for 32-bit versions of Windows) or HitmanPro_x64.exe (for 64-bit versions of Windows).
- Click on the Next button, to install HitmanPro on your computer.
- HitmanPro will now begin to scan your computer for [email protected] malicious files.
- When it has finished it will display a list of all the malware that the program found as shown in the image below. Click on the Next button, to remove [email protected] virus.
Click here to go to our support page.