Home Malware Programs Ransomware Deathfiles Ransomware

Deathfiles Ransomware

Posted: January 25, 2021

The Deathfiles Ransomware is a threatening piece of malware whose name is not a lie – it does have the ability to kill your files by encrypting their contents and rendering them useless. Fortunately, this damage may not be permanent, but recovering the lost files will not be an easy task. The easiest and most trustable way to undo the damage that the Deathfiles Ransomware causes is to restore the files from a backup. However, if you do not have a backup copy available, then you might need to resort to alternative data restoration solutions.

When the Deathfiles Ransomware infiltrates a system successfully, it will encrypt the majority of important files. After this, it uses the '.deathfiles' extension to mark their names. Usually, the last thing that the Deathfiles Ransomware does is to drop the ransom message 'Recovery_Instructions.html.' It appears that the Deathfiles Ransomware uses an identical ransom note as the one used by the MedusaLocker Ransowmare. It is possible that these two file-lockers might share the same code.

Sadly, the Deathfiles Ransomware is not compatible with free decryption tools. Its authors claim to be in possession of a working decryptor, but they offer to sell it in exchange for Bitcoin. We assure you that trying to pay for their software is a bad idea, and you are most likely going to end up being tricked if you try to do this.

The Deathfiles Ransomware's authors use the emails dec_helper@dremno.com and dec_helper@excic.com for contact, but they also use a TOR-based website to accept payments and messages. You should ignore their offer and, instead, proceed to use a reliable anti-malware scanner to terminate Deathfiles Ransomware's files. After this, you should look for popular data restoration tools and methods, which might help you restore your data.

Loading...