DDE Ransomware

The DDE Ransomware is a file-encryption Trojan, which seems to use the same background image that the Crypt888 Ransomware utilizes. However, we can't confirm for certain whether both threats are related or if they belong to the same group of cybercriminals. The sample of the DDE Ransomware that malware researchers discovered online does not appear to be complete, and its current state only allows it to encrypt the files in the 'Download' folder. While this means that the DDE Ransomware's attack will not be that destructive, it is important to note that the file-encryption routine works reliably, and a future variant of this file-locker might be able to cause a significant amount of damage if it is not stopped on time.

Despite not being fully functional, the DDE Ransomware is still a threat, and you should take the necessary measures to ensure that it will never be able to harm your files. Spotting the DDE Ransomware's attack is quite difficult, and victims are likely only to notice it when it is too late to stop it. All files that this ransomware encrypts will have the '.encrypted' extension added to their names, and the other notable change that victims are guaranteed to notice is that their wallpaper will be replaced by a red image that contains a short ransom message.

The ransom note is another proof that the ransomware is far from finished – it includes the e-mail address no-reply@gmail.com for contact. However, this address doesn't belong to the authors of the DDE Ransomware certainly, and sending a message to it would be useless. If your files were locked by the DDE Ransomware, then we advise you to get rid of the threatening program with the assistance of a trustworthy anti-virus scanner immediately. Eliminating the DDE Ransomware will not get your files back so that you might need to resort to using 3rd-party file recovery software and methods that might not be successful completely.