How to remove PUBG ransomware

PUBG is a new ransomware virus that demands victims to play PlayerUnknown's Battlegrounds game

PUBG ransomware is one of the latest crypto ransomware^[1] that has been spotted on the wild on the first half of April 2018. However, likewise RensenWare, it's a poorly developed troll that mimics ransomware virus to make people play a game called PlayerUnknown's Battlegrounds. Once installed, PUBG ransomware encrypts files and folders located on the desktop with .PUBG file extension and then provides a “ransom” note, which instead of a demand for money asks the victim to participate in a PlayerUnknown's Battlegrounds^[2] gameplay to decrypt files.

The developers of the PUBG does not seem to have intentions to extort people's money or damage their files. They are more likely having fun of victims making them play the PlayerUnknown's Battlegrounds game, which is a multiplayer online battle royal game. The victim is asked to play the game for 1 hour. The PUBG ransom note says:

PUBG ransomware
Your files, images, musics, documents are Encrypted!
Your files is encrypted by PUBG Ransomware!
but don't worry! It is not hard to unlock it.
I don't want money!
Jus play PUBG 1Hours!
Or restore code is xxxxxxxxxxxxxxxxxx

The researchers who detected it claim that it's “more like a joke” than hazardous ransomware. It might infiltrate PCs in many ways, including but not limited to spam email, fake software updates or drive-by-download. Anyway, once installed it runs a PUBG_Ransomware.exe file and starts data encryption procedure that targets files, folders, and subdirectories located on the desktop only.

Locked files get the .PUBG file extension. Subsequently, a “ransom” not or PUBG instructions window is generated on the desktop, and the victim is required to either play the game for 1 hour. The virus checks the running processes and specifically looks for the process named TslGame. It's directly related to the PlayerUnknown's Battlegrounds game, so if the ransomware detects this process running, the decryptor is activated, and all locked files are recovered.

Nevertheless, playing a game is not a must. Alternatively, victims can merely enter the s2acxx56a2sae5fjh5k2gb5s2e code into the PUBG ransomware program and click Restore button.

In a nutshell, PUBG virus is not a severe infection, so don't fall for panic if you found your files locked with .PUBG file extension. The virus is decryptable in the simplest way possible, so all you have to do is to enter the decryption code provided on the program, play the PlayerUnknown's Battlegrounds, or run a file named TslGame.exe.

Nevertheless, once you decrypt the files, do not forget to remove PUBG ransomware from the system. Despite the fact is atypical crypto-malware that does not seek for money, it's developers are unknown. The virus might open the back door to other malicious cyber infections. Thus, don't forget to initiate full PUBG removal. For this purpose, try using FortectIntego, SpyHunterCombo Cleaner, or MalwarebytesMalwarebytes.

Ransomware distribution methods

Ransomware virus can infect PCs in many ways. Nevertheless, spam email attachments or malspam remains the most actively used technique to spread this menace, NoVirus.uk^[3] experts claim. Although there's no hundred percent protection from malicious emails, you can maximize the protection be keeping a professional anti-malware running. Besides, regularly update its definitions.

Being careful with suspicious email messages is yet another essential piece of advice. Do not fall for opening emails with catchy subject names, suspicious senders or empty body text section. Always look for grammar and typo mistakes.

Apart from malspam, people may download ransomware believing that they are downloading a software update for Java, Flash Player, Google Chrome, Windows Defender, etc. Phishing websites to which you may be redirected when visiting illegal sites can also be infected.

Learn how to uninstall PUBG ransomware

Luckily, this particular ransomware is not malicious and can hardly damage personal files permanently. It's yet another troll that makes fun of PC users. Nevertheless, it's a cyber infection that has to be addressed just like any other virus.

To remove PUBG virus, use a professional anti-virus. Run a full system scan and eliminate all the findings that it reports. In case PUBG removal is blocked by a malicious file or program, you may need to boot the system into Safe Mode with Networking.