How to remove HELP_YOUR_FILES virus

What should I know about HELP_YOUR_FILES virus?

HELP_YOUR_FILES is just another release from the developers of CryptoWall ransomware. It is closely related to CryptoWall 3.0 virus, Cryptowall 4.0 and HELP_DECRYPT virus. If you have never heard about any of these threats, you should know that they belong to ransomware category, which is considered one of the most dangerous malware categories. Viruses that belong to this category use advanced techniques for the infiltration of their target computers. In addition, they can easily encrypt your important files and demand to pay a ransom.

When HELP_YOUR_FILES ransomware tries to infect the system, it presents itself as a legitimate attachment of an email. It can present itself as notification from bank, an invoice and similar file that should be opened. As soon as it infects computer, this threat encrypts the majority of the files (audio, video, text and similar files) on different PC partitions. Typically, it does that with the help of RC4 code. Beware that HELP_YOUR_FILES virus can easily encrypt these and similar extensions: .txt, .ppt, .jpg, .gif, .pdf, .mp3, .mp4, .flv, .wmv. Once this virus modifies these files, it replaces their names with random symbols (ysjo96d.9d4, etc.) and stars displaying such warning message on the victim’s screen:

You may notice that every folder, which contains encrypted files, contains one of these files – HELP_YOUR_FILES.PNG, HELP_YOUR_FILES.HTML or HELP_YOUR_FILES.TXT. These files provide information related to the decryption of encrypted files. As you can see, this virus asks to pay 700$ ransom via Bitcoins. The user must pay the recovery price during the estimated time; otherwise the virus may ask for a doubled or tripled amount of money. It is also known that HELP_YOUR_FILES may block tools that can be used for the decryption of your files. Unfortunately, but you will not be able to get your files back to you without paying a fine. In this case, the backups should help you. If you have them, you should NOT pay the ransom because it is not going to help you. In this case, you should remove HELP_YOUR_FILES virus from your computer. You can do that with the help of FortectIntego.

How can HELP_YOUR_FILES ransomware infect my computer?

This virus is mostly spread via fake e-mails, so you should NEVER open letters from unknown senders or download attachments from such letters. This ransomware works like a Trojan – it can be sent to the victim as a “PENALTY.TX.EXE,” “REWARD.TXT.EXE,” “RESUME.TXT.EXE” and similarly named files. Inexperienced computer users may not understand what these extensions mean – and .txt extension does not mean that it is a text document, because it is followed by .exe extension, which means that it is a program. Another tip is to avoid browsing unreliable websites on the web – you can never know if such website does not contain a hyperlink that can automatically initiate and execution of an infectious file like HELP_YOUR_FILES virus. Especially avoid clicking on unreliable links on pornographic websites – they frequently provide infected URLs that can initiate an execution of malicious files.

In addition to that, you should always install software to your computer very carefully. Please pay attention to each installation step and make sure you do not skip any important statements. Spare a few minutes and review the “Privacy Policy” and “Terms of Use” documents – and if you find any questionable statements that the program you are about to install promotes optional applications, check the settings of the installation setup. You should always opt for “advanced/custom” installation mode, and then deselect each agreement to install unfamiliar programs. You should see a whole list of them.

How to remove this virus?

Sadly, the encrypted files cannot be recovered if you do not have an external backup drive. You can try one of these tools, but there is no guarantee that they will help you to fix your computer: R-Studio, Photorec. The HELP_YOUR_FILES virus, which is also known as CryptoWall 4.0, can be eliminated with the help of steps that are given below. You can also install our recommended anti-malware program – FortectIntego and remove HELP_YOUR_FILES malware automatically.