Mifr Ransomware

The Mifr Ransomware is a file-locker designed to encrypt important files it finds on infected machines. The authors of this file-encryption Trojan might be using different strategies to propagate it online – email spam, fake social media posts, torrent trackers, and pirated content are just some of the opportunities that Mifr Ransomware's creators may explore. If the Mifr Ransomware ends up running on your machine, it may render many of your files inaccessible. It does this by encrypting their contents. The locked files can be identified by their name – the original filename will have the extension '[.Hiden_pro@aol.com][<VICTIM ID>].mifr' at the end of their name.

The ransomware also drops the message '!INFO.HTA' on the desktop and opens it automatically after the attack is finished. The message says that victims have had their data encrypted, and they need to complete a ransom payment to have it recovered. The criminals offer to unlock several small files for free, as long as the victim sends them to hiden_pro@aol.com or hiden_pro@tutanota.com. It is recommended to accept this offer.

The criminals will only provide a full decryption service if they are paid some money via Bitcoin. However, we advise against accepting this offer since Mifr Ransomware's authors may try to trick you. Ransomware victims should never co-operate with cybercriminals and, instead, they should run an anti-virus scanner to terminate the ransomware. After this, it is time to experiment with popular data recovery tools.