Payerranso Ransomware

The Payerranso Ransomware is a file-locker that is yet to be associated with any of the ransomware families that cybersecurity researchers have had to deal with recently. This may mean that the authors of the Payerranso Ransomware have crafted this project from scratch and they have not borrowed code from any other popular file-lockers. It appears that the Payerranso Ransomware is focused on French-speaking and English-speaking users since its ransom note features these two languages.

Just like other file-encryption Trojans, the Payerranso Ransomware also relies on a swift and damaging file-encryption attack that aims to leave the victim with a hard drive full of encrypted documents, images, archives, databases and other important files. After the Payerranso Ransomware determines that there are no other files to encrypt, it may drop the ransom note ‘Message_Important.txt’ and replace the desktop wallpaper with an image that tells the user to open the ransom note for further details. The text in both the text-file and the desktop wallpaper is available in French and English.

The message urges victims to write to the emails 'guillaumecoudert2@gmail.com' and 'guillaumecoudert@yahoo.fr' for further instructions on how to recover their files. We’d like to let you know that you should not expect that the attackers will help you for free - they are likely to demand a significant ransom payment in exchange for their services, and you should never agree to send money to anonymous cybercriminals.

Even if you end up paying the attackers, they may not supply you with anything in return. The suggestion is to avoid cooperating with cybercriminals at all costs since you would be risking a lot if you send them your hard-earned money. Instead, you should take the required steps to remove the Payerranso Ransomware with the assistance of an up-to-date PC security tool. The removal of the file-locker will not undo the damage caused to your files, and you may need to use alternative data recovery options or try to restore from a backup copy of your files.