Attention! All your files are encrypted!


Attention! All your files are encrypted! message means the scareware that is another tool designed by scammers to swindle the money. Identified as Trojan.Ransom.HM, this malware is aimed at people who like to use file-sharing services, like download movies, music and other stuff. The program is found to encrypt the files on victim’s computer and additionally demand 50 euros in order to restore them.

This scamware is distributed through illegal copies of music, movies and other files, in most of the cases. As soon as it is executed, it drops some files that can’t be executed normally and additionally displays the alert saying that there are illegal programs found on your PC. Besides, this virus encrypts all extensions by adding .EnCiPhErEd to file extension and tends to change default icons to a pink common icon.

Every folder on the target PC is usually renamed to “HOW TO DECRYPT FILES.txt” and included this message:

Attention! All your files are encrypted!

You are using unlicensed programms!
To restore your files and access them,
send code Ukash or Paysafecard nominal value of  EUR 50 to the e-mail
During the day you receive the answer with the code.
You have 5 attempts to enter the code. If you exceed this date all data is irretrievably spoiled. Be careful when you enter the code!

Of course, you should never pay this 50 Euro deposit. Several anti-malware companies develop tools to unencrypt the data for free. In order to fix your computer, we recommend you to remove  Trojan.Ransom.HM with a help of this tool.

The best prevention for this encryption trojan is doing regular backups.


About the author

 - Passionate web researcher

I have been working with project for a while now and I would like to think that our research team has managed to raise awareness about cyber security. I study the newest infections, help out with manual instructions and answer questions that our users might have.


One thought on “Attention! All your files are encrypted!

1 Comment

Leave a Reply

Your email address will not be published. Required fields are marked *