SoFucked Ransomware

SoFucked Ransomware is a program designed to encrypt many of the files on your computer and then demand that you pay money for a decryption tool/key that you can get from this ransomware’s developer only. The problem is that the cost can be too high. Furthermore, the cybercriminal might not send you the key/tool once you have paid. For this reason, we recommend that you remove this ransomware from your computer instead of complying with the demand. This ransomware can infect your PC if you do not have an anti-malware application on it and start encrypting your most valued files almost immediately. To find out more about this program, read the information presented below.

There is no concrete information on how this ransomware can be distributed, but we suspect that it must be distributed like many other ransomware is — via email. Indeed, email spam is the most often used way to distribute ransomware. SoFucked Ransomware’s developer might have set up a dedicated email server to spam the inboxes off random people in an effort to infect as many computers as possible. The emails can be disguised as tax return forms, receipts, invoices, and so on. The emails should have an attached file that may look like a PDF document. In reality, however, that file can be an executable file in disguise and infect your PC with this ransomware. Nevertheless, there are plenty of other distribution methods such as security exploits embedded on infected websites, RDP exploits, bundling with pirated and legitimate applications, and so on. If your PC is unprotected, then this ransomware can slither into your computer without your knowledge or consent.

If SoFucked Ransomware were to infect your PC, then it will enumerate your system’s information and system variables. Then it will start encrypting your files using Advanced Encryption Standard (AES.) This ransomware was configured to encrypt many file formats and among them we find file types such as 7z, cs, zip, jpg, lib, log, xml, pdb, db, snp, pak, json, dat, cer, tcl, png, vbs, txt, and rar. This ransomware was configured to encrypt file types that are likely to hold valuable information for which you would be inclined to pay the ransom. The places where it was set to encrypt your files includes %PROGRAMFILES%, %PROGRAMFILES(x86)%, %LOCALAPPDATA%, %USERPROFILE%\Desktop, %USERPROFILE%\Downloads, and %USERPROFILE%\Documents. It was also set to delete all shadow copies of your files using the “vssadmin.exe delete shadows /all /quiet” command to prevent you from restoring any files.

Once the encryption is complete, SoFucked Ransomware will drop a ransom note named "READTHISHIT.txt" is folders where files have been encrypted. The note says that you need to contact this ransomware’s creators by sending then an email to Sofucked@freespeechmail.org. Then, you should know how and how much to pay for the decryption key. However, you should not take the cyber criminal’s word for it because you might not get the key.

Therefore, we recommend that you remove this ransomware because there is no guarantee that your files will be decrypted. SoFucked Ransomware is a dangerous computer infection that can enter your PC secretly, so if you do not have, and do not want to get it, then get an anti-malware program such as SpyHunter to protect your PC from it. However, if your PC has already been infected then please you the said anti-malware tool or our guide to delete it. Note that the locations where this ransomware is located are suggestions as the main executable can be dropped to a random location.

Removal Guide

1. Press Win+E keys.
2. In the File Explorer’s address box, enter the following file paths.
   • %USERPROFILE\Downloads
   • %USERPROFILE\Desktop
   • %TEMP%
3. Identify the ransomware’s executable.
4. Right-click it and click Delete.
5. Empty the Recycle Bin.