'.good File Extension' Ransomware

The '.good File Extension' Ransomware is a file-locker, which was spotted by malware researchers who came across complaints by multiple users who stated that their important files were inaccessible, and the '.good' extension had been added to their names recently. The culprit of this problem has been identified as the '.good File Extension' Ransomware, and it appears to share a lot of similarities with the Shiva Ransomware, a file-encryption Trojan, which uses a significant portion of the code found in the HiddenTear project. Unfortunately, while the original HiddenTear is decryptable, this can't be said for Shiva Ransomware and the '.good File Extension' Ransomware – victims of these threats might need to look for alternative file recovery solutions since paying the ransom sum is guaranteed to be a bad choice.

The '.good File Extension' Ransomware's attack will not just encrypt and rename the files; it also will drop off a lengthy ransom message, which reveals the demands of the attackers. Their instructions are stored in the file 'HOW_TO_RECOVER_FILES.txt,' which is usually found on the desktop. Its contents reveal that the attackers want to receive a ransom payment via Bitcoin, and they also promise to decrypt up to three files free of charge to prove that they are trustworthy. While we advise you to take advantage of the free decryption option, you should not agree to send them any money because you will be sponsoring their future malicious projects.

Unfortunately, there is not much you can do to get your files back after the '.good File Extension' Ransomware has completed its attack. Some ransomware versions are decryptable via free software, but this is not the case with this one, and the only guaranteed way to get your files back is to recover them from an unharmed file backup. If a backup is not ready for use, then there are some 3rd party file restoration utilities, which might be successful partially. Before trying to recover any files, you must make sure to run a trustworthy anti-virus scanner that will ensure the '.good File Extension' Ransomware's full removal.