Skip to content
  • Active
  • Severity: High
  • Ransomware
  • Windows
  • Verified · May 2017

How to remove FailedAccess ransomware virus

A step-by-step removal guide for affected devices. Follow the verified procedure below — most readers complete it in under 10 minutes.

Gabriel E. Hall · Passionate web researcher

FailedAccess ransomware itself is a foolish virus that was defeated already

FailedAccess virus is a computer virus that is also known under CryptoSomware virus name. It is yet another open-source ransomware based[1] malware variant that encrypts files on Desktop\projet sans fils\test folder only. During the encryption, the malicious program marks each file with .FailedAccess file extension. It seeks to corrupt all kinds of important records, such as documents, photos, videos, and audio files. The reason why this virus targets only one location on the computer is that it is a test version of the virus. However, even before the ransomware managed to emerge in public, malware analysts released a decryptor for it. The decryptor is called Stupid Decryptor, and it works for other poorly-programmed HiddenTear spin-offs such as JeepersCrypt, SnakeEye, and others.

FailedAccess ransomware encrypts files

The virus displays a window called “You are Hacked by J.H,” which says:

Your all files are encrypted
If you to decrypt send some money on given address and take you key
Good by

The ransomware is clearly created by someone who lacks programming and of course English-speaking skills, because not only the virus’ code, but also the message left for the victim is full of mistakes. If your PC was infected, you should remove FailedAccess malware immediately with the help of software that is capable of deleting ransomware-type viruses; therefore we recommend using FortectIntego or MalwarebytesMalwarebytes software. After deleting the virus, you can use the decryptor that is described at the end of the article, right below FailedAccess removal tutorial.

FailedAccess virus

Learn how this virus spreads

Ransomware-type[2] viruses usually spread via malicious spam[3], and if we think about the banality of this virus, it is clear that its developer simply isn’t experienced enough to employ advanced malware distribution techniques such as exploit kits[4] or malvertising[5]. Therefore, the biggest chance to infect your PC with such or similar low-level ransomware virus is to open an email attachment or link sent by someone you don’t know. We suggest you carefully look at the email address of the sender every time someone sends you an email message before even opening it. You must realize that legitimate emails sent by reputable companies usually have company’s name after @ sign, and scammers try to create similar-looking fakes just to convince the victim to open them. For example, joshua-amazon-support@india.com doesn’t actually work at Amazon. Keep that in mind and stay clear of such deceptive emails that deliver malware-laden attachments.

Remove FailedAccess ransomware

If your computer has been compromised, we have no doubts that you are looking for a way to remove FailedAccess virus the easiest and fastest way possible. Therefore, there are no doubts that the safest and quickest method to exterminate the malicious software is to run a system check with professional malware removal software. For this case, our team recommends using the FortectIntego software. Before you run it, begin FailedAccess removal by rebooting your computer according to this tutorial we provided.

Did this guide help?

Be the first to comment

Spyware News
Privacy preferences

We use cookies to improve your experience and analyze traffic. Some cookies enable embedded content like videos and social posts. Choose what you allow — you can change this anytime.