NSMF Ransomware

NSMF Ransomware is a newly discovered ransomware that was designed to encrypt your personal files and demand money to get them back, only it does not work which is great luck if your PC has been infected with it. This program only semi-functional but you should not underestimate it as it can be updated and it may start encrypting files. We recommend that you remove it as soon as you can because of the risk of it coming to life and encrypting your files. To find out more about this ransomware, we suggest you read this whole article as it contains information about this program’s functions, possible distribution methods, as well as how you can get rid of it safely.

While NSMF Ransomware was created with the intention to encrypt the files of unfortunate users who did not take cyber security seriously, this program does not do that. We think that this is due to the fact that its server may be down, so this ransomware does not receive instructions to encrypt the files as well as the encryption key that is probably unique for each user. Also, this ransomware can still be in its development phase and this is echoed by the fact that this current version was configured to encrypt files located on the desktop. Hence, it is a test version that quickly encrypts files on the desktop to see how it functions. If this program were actually able to encrypt your files, then it would append them with an “.nsmf” file extension that would signal to you that these particular files have been encrypted and that is why you cannot open them.

NSMF Ransomware was configured to drop a ransom note on the desktop once the encryption has been completed. The note states that you need to send its creators an unreasonable 5 BTC which is an approximate 10,000 USD. This outrageous sum is not worth paying no matter how precious your files, in most cases at least. It is not worth paying ten grand for some pictures, documents, and audio files that this program may encrypt. Also, given the fact that it encrypts files located on the desktop only, it is clear that the money is not worth the files. The ransom note also features a Bitcoin wallet to send the payment but, again, you do not have to pay anything, so just ignore the demands. Now, let us see how this program’s creators distribute it.

Your computer can be infected with NSMF Ransomware via a number of ways. We have received information that certain infected websites can feature security exploits and automatically download this ransomware if you were to interact with certain content, such as watching an embedded video, and so on. Also, websites that distribute pirated content is also a good environment for distributing this ransomware, so fake download buttons can be featured on such websites. Last but not least, email spam can also be used as it is a good way of distributing ransomware far and wide. The malicious emails can contain this ransomware as an attached file that can infect your PC when you open it.

So there you have it — that is all of the relevant information currently available on this particular ransomware. It is semi-functional as it is incapable of encrypting any of your files. Still, you should not play with fire and remove it as soon as the opportunity arises because there is no telling when it will start working as it should. We recommend that you use the guide below which includes using SpyHunter’s free scanner to detect this ransomware’s randomly named executable that is also dropped in a random location depending on the distribution method used.

How to remove NSMF Ransomware

1. Open your web browser.
2. Go to http://www.pcthreat.com/download-sph
3. Download SpyHunter-Installer.exe and run it.
4. Launch the program and click Scan Computer Now!
5. Copy the file path of the malware from the scan results.
6. Simultaneously press Windows+E keys.
7. Enter the file path of the malware in File Explorer’s address box.
8. Press Enter.
9. Find and right-click the malicious file and then click Delete.
10. Empty the Recycle Bin.