Uselessfiles Ransomware

Uselessfiles Ransomware is a troublesome malicious application since it might disable Task Manager to make it more difficult for the computer’s user to get rid of it. Moreover, the sample we tested did not work correctly as it did not encrypt any data, but our researchers say the malware should be able to encipher user’s data. It means if it enters computer all of your files might become useless. Under such circumstances, some users may even consider the offer proposed by the cybercriminals who created Uselessfiles Ransomware. Their ransom note should state the locked files can be decrypted, although they will help only those victims who pay a ransom. Sadly, the price is not so small (300 US dollars) and if you do not want to lose this sum in vain, we advise you not to put up with any demands. Instead, we would recommend erasing the malware. More information about it will be presented further in the text, and if you require any assistance while removing the malicious application manually, you could check the instructions available below.

First of all, we would like to start with the possible malware’s distribution channels. Specialists suspect Uselessfiles Ransomware might be spread through suspicious email attachments, malicious software installers, doubtful advertisements, and other untrustworthy content you could encounter while browsing the Internet. Thus, to protect the computer from threats alike, it is crucial to not only know about safe browsing practices but also use them on a daily basis. Probably, one of the best-known suggestions to stay away from malicious content is to avoid downloading installers from unreliable file-sharing web pages, such as torrent and other P2P file-sharing networks. Another one is to ignore emails coming from unknown sources, especially if they carry a file you did not expect to receive or encourage you to click on some links. Additionally, we would recommend watching out for suspicious pop-up ads asking to update your software, download doubtful tools, and so on. Needless to say, to make the system less vulnerable to threats you could also install a reliable antimalware tool that can stand guard and protect the PC.

Even though the sample we found did not work correctly, we were still able to see how the malicious application works. Right after infecting the computer we used to test Uselessfiles Ransomware the malware changed its previous Desktop picture with a specific image. It is a plain black picture with a text written mainly in red. We believe if the threat would work properly this should happen a little bit after it would encrypt user’s files. According to this message or in other words the ransom note, it can lock user’s documents, photos, videos, databases, and other private files. It is possible the malware might even mark it with some additional extension, but we could not confirm it. In any case, to decrypt all affected files Uselessfiles Ransomware’s developers ask to pay a ransom of 300 US dollars converted to Bitcoins. The note might even say the malicious application’s creators guarantee they will restore user’s files and warn the user not to use antimalware tools as they could delete Uselessfiles Ransomware before the user pays the ransom.

It is essential to understand, these people cannot be trusted, and any guarantees they give do not mean anything since there is no way to ensure it. As you see, once the ransom gets transferred the user cannot take his money back even if the hackers do not keep up to their promises. This is why we advise users not to take any chances and remove the malware. We noticed Uselessfiles Ransomware blocks user’s Task Manager to make it difficult to eliminate the malicious application, but if you use the instructions available below, you should be able to enable it again and erase the threat manually. Clearly, it would be easier to use a reliable antimalware tool as there are tools that can even automatically enable Task Manager and remove such threats for you after performing a full system scan.

Enable Task Manager

1. Open Notepad and paste the following code line:
   REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableTaskMgr /t REG_DWORD /d /0 /f
2. Click File and choose Save.
3. Save the document as TaskManager.bat.
4. Run the newly created file as Administrator.
5. If the Task Manager is still disabled, try restarting the computer.

Erase Uselessfiles Ransomware

1. Press Ctrl+Alt+Delete.
2. Go to the Task Manager.
3. Find the malware’s process, e.g., UselessFiles.
4. Mark this process and click End Task.
5. Exit Task Manager.
6. Tap Win+E.
7. Navigate to:
   %TEMP%
   %USERPROFILE%\desktop
   %USERPROFILE%\downloads
8. Check if you can find the malicious file downloaded before the computer got infected.
9. Right-click it and press Delete.
10. Go to: C:\Windows
11. Right-click a file called UselessFiles.exe and press Delete.
12. Then navigate to: %TEMP%
13. Look for suspicious .bat files and a file called getadmin.vbs.
14. Right-click such data and select Delete.
15. Close File Explorer.
16. Press Win+R.
17. Type Regedit and press OK.
18. Find this location: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run
19. Look for value name called UselessFiles1 and pointing to C:\Windows\UselessFiles.exe
20. Right-click this value name and press Delete.
21. Leave Registry Editor.
22. Empty Recycle bin.
23. Reboot the system.