Remove Jigsaw Ransomware and Decrypt Files

Remove Jigsaw Ransomware and Decrypt Files

Nasty NEW Crypto JIGSAW ransomware that taunts its victims and by encrypting the data files and then deleting them every hour if they don't pay the ransom. Once infected, this Jigsaw ransomware will delete 1000 files from your computer every time the ransom is restarted by rebooting the computer system or by terminating the ransoms process, this is to make you pay sooner. The worst part is that you are on a timer and if you don't pay by the end of the timer, it will delete all the data on your computer.

Thankfully there is a decryption tool that has been developed by MalwareHunterTeam​, DemonSlay335​, and Lawrence Abrams from bleeping computer.

link below for the decryption tool.

Here is the message on the screen of the ransom

Your computer files have been encrypted. Your photos, videos, documents, etc....
But, don't worry! I have not deleted them, yet.
You have 24 hours to pay 150 USD in Bitcoins to get the decryption key.
Every hour files will be deleted. Increasing in amount every time.
After 72 hours all that are left will be deleted.
If you do not have bitcoins Google the website local bitcoins.
Purchase 150 American Dollars worth of Bitcoins or .4 BTC. The system will accept either one.
Send to the Bitcoins address specified.
Within two minutes of receiving your payment your computer will receive the decryption key and return to normal.
Try anything funny and the computer has several safety measures to delete your files.
As soon as the payment is received the crypted files will be returned to normal.

Thank you

Need help with your computer problems? join my forum

[TimsComputerRepair]

That is nasty. You where quite on this one Britec. Good Job!

[thingyee]

Its not that hard to make a virus like this. The developer even has left the default visual studio icon for the program. Also no title bar name.

[FLUFFSQUEAKER]

I always smile if i see the default Visual Studio icon in the upper left corner of a virus windows :3

[irishfever]

I've been a sub of yours for a long time! Another helpful video. As always.

[lornaedgar]

Another brilliant video by Britec. Does the Police ever investigate who creates these viruses? Has anyone been caught/prosecuted under Computer Misuse Act?

[craterface]

I never would have known about this virus if you hadn't made this video. Thank you.

[jtodd]

Doesn't these type of programs just essentially rename the files instead of encrypting them? I've noticed they just renamed the files from "picture.jpg" to "picture.cryptovirus" as an example? I was able to rename the extension back to, ".jpg" and the file was back. It was never actually, "encrypted". Maybe they're not all like this? Just an observation. Great video.

[newnuu]

If you move the computer's clock back a few days, would you get more time to pay them / remove the virus?

[dreadnodanonymous]

The best way from your data being further damage is always save on a disc frequent. I use sandbox to open program if I'm unsure if the developer is to be trusted. Very informative by the way

[Megadoomable]

Question:
When this ransomware "deletes" files, does it simply delete it or does it overwrite it with zeroes?

[zxztv]

Thanks Brian :-D
Ooow that looks annoying, the words for today is "Backup your files!!".
.
I would lift the hard drive out of the system and place it on a usb cable, then its just dead code, cleanup and use that smashing decriptor.
if i did it on a machine direct, then the internet would be physically disconnected, dont want any sneaky code downloading it again lol.

[curtisbryant]

@Britec09 just downloaded the jigsaw decrypter I want to let you know that it can be download it now.

[ruthdelgado]

I have a question for you what will happen if you kill the ting when it's not done with encryption fix

[immenseTie]

As of May 2016 the Jigsaw Decryptor link did not work...Any ideas plz?

[gmadiva]

Thanks Brian. Your videos are so helpful. Quick question if you don't mind. I want to try and watch some free tv online and/or series. Do you think these websites are "safe" and/or do you know of a good one. I live in the States. Thanks so much old chap! Cheers!

[sooraj]

Have you ever gotten ransomware unintentionally?

[saxophn]

When you download the decrypter wouldn't it become encrypted?

[ridersdynasty]

how to remove cerber3 ransomeware virus plz plz plz help me out

[An.Individual]

What is the common deployment method of the Jigsaw virus?

[SkyeArteM]

Does this specific ransomware encrypt data files with custom file extensions such as .kra or .swf files?
Just curious

Very informative video, looking forward to more in the future.