File Informer Ransomware

Posted: June 2, 2017

Threat Metric

The Threat Meter is a malware assessment that SpywareRemove.com's research team is able to give every identifiable malware threat. Our Threat Meter includes several criteria based off of specific malware threats to value their severity, reach and volume. The Threat Meter is able to give you a numerical breakdown of each threat's initial Threat Level, Detection Count, Volume Count, Trend Path and Percentage Impact. The overall ranking of each threat in the Threat Meter is a basic breakdown of how all threats are ranked within our own extensive malware database. The scoring for each specific malware threat can be easily compared to other emerging threats to draw a contrast in its particular severity. The Threat Meter is a useful tool in the endeavor of seeking a solution to remove a threat or pursue additional analytical research for all types of computer users.

The following fields listed on the Threat Meter containing a specific value, are explained in detail below:

Threat Level: The threat level scale goes from 1 to 10 where 10 is the highest level of severity and 1 is the lowest level of severity. Each specific level is relative to the threat's consistent assessed behaviors collected from SpyHunter's risk assessment model.

Detection Count: The collective number of confirmed and suspected cases of a particular malware threat. The detection count is calculated from infected PCs retrieved from diagnostic and scan log reports generated by SpyHunter.

Volume Count: Similar to the detection count, the Volume Count is specifically based on the number of confirmed and suspected threats infecting systems on a daily basis. High volume counts usually represent a popular threat but may or may not have infected a large number of systems. High detection count threats could lay dormant and have a low volume count. Criteria for Volume Count is relative to a daily detection count.

Trend Path: The Trend Path, utilizing an up arrow, down arrow or equal symbol, represents the level of recent movement of a particular threat. Up arrows represent an increase, down arrows represent a decline and the equal symbol represent no change to a threat's recent movement.

% Impact (Last 7 Days): This demonstrates a 7-day period change in the frequency of a malware threat infecting PCs. The percentage impact correlates directly to the current Trend Path to determine a rise or decline in the percentage.

Threat Level:	8/10
Infected PCs:	3,223

First Seen:	June 2, 2017
Last Seen:	September 17, 2022
OS(es) Affected:	Windows

The File Informer Ransomware caught the attention of SpywareRemove.com researchers with its ransom message that looks like to the one used by the WannaCryptor Ransomware (WanaCrypt0r Ransomware). It seems like the File Informer Ransomware's authors are the latest example of cyber crooks who attempt to piggyback on another ransomware's fame, and therefore increase their chances of receiving money from scared victims. The good news is that the File Informer Ransomware is not associated with the WannaCryptor Ransomware. However, the File Informer Ransomware's encryption algorithm is yet to be researched closely so that it is impossible to tell whether it would be possible to recover the files that the File Informer Ransomware has locked.

The File Informer Ransomware also may be referred to as 'Brickr Ransomware' because of the file extension it applies to encrypted files. For example, if the File Informer Ransomware encrypts a file named 'invoice.xlsx,' it will modify the name to 'invoice.xlsx.brickr.' This name change is applied to every locked file so that victims of the File Informer Ransomware will be able to find out how much damage the attack has caused quickly. When the attack is complete, the File Informer Ransomware will leave two separate ransom notes for the victim to see – one of them is displayed in a window titled 'File Informer' automatically, while the other one can be found in the file 'READ_DECRYPT_FILES.txt.' In addition to this, it also will change the desktop background to an image containing general information about the attack, and it tells users that their data was encrypted and the only way to recover it is to pay the perpetrators.

'!!!!!!!!!!!!!! READ THIS TEXT CAREFULLY !!!!!!!!!!!!!!

All of your personal files (documents, photos, videos,archives and other files) were locked and are not usable at the moment. To verify this fact, try to open some of your files and use them.

To get your files back you need to buy a secret key. We are the only people who have the secret key. Nobody but us can restore your files. Not even antiviruses or IT experts .
To verify this fact, we can decrypt 1 of your files for free. Send us the file to email shown below (Contact Email:) and we will send it unlocked back to you for free.

To buy the decryption key and get your files back:
1)send the price shown below (Price: ... USD) to the Bitcoin address shown below (Bitcoin Address: ...).
2)After you complete the payment, please contact us via email (Contact Email:) shown below. Email example: "Hello I need to decrypt my files. My ID is :(ID shown below)". We will send you the key within 12 hours.
3) After you get your key, click "Unlock Files" button and enter the key. Your files will get unlocked.'

The ransom sum that the File Informer Ransomware's operators demand is rather low – just $55. Naturally, they demand to receive the money via a Bitcoin transaction, and that's why they provide their victims with a Bitcoin wallet where payments should be sent to. Despite the small payment required, we advise our readers not to agree to send money to the File Informer Ransomware's authors. Even if they end up getting the money, it is very unlikely that they'll help the victims decrypt their files.

Unfortunately, undecryptable ransomware has become a huge problem because fully recovering from its attack is rarely a possibility. In spite of this, you can rest assured that sending money to the attackers will not solve your problem. It is recommended to eliminate the File Informer Ransomware by using a trustworthy anti-malware scanner. As for the encrypted data, you can attempt to recover it via 3rd-party file restoration utilities.

File Informer Ransomware

Threat Metric

Leave a Reply