MAme Vse Ransomware

The Mame Vse Ransomware is a crypto locker malware threat that is designed to target users from the Czech Republic primarily, judging by the fact that the instructions it leaves for its victims are written in Czech entirely and feature no translations in other languages. It still possesses the typical characteristics of a ransomware threat, though. The Mame Vse Ransomware uses a powerful encryption algorithm to render nearly all files on the compromised system inaccessible and unusable effectively. Every encrypted file will have '.mame vse' appended to its original filename as a new extension. The Mame Vse Ransomware delivers the instructions from the hackers in two different ways. It creates a text file named 'HOW TO DECRYPT FILES.txt' in every folder containing locked data while changing the affected compute's default background image simultaneously.

This is where what can be considered as part of the typical behavior for a ransomware threat ends.

The names of the text files dropped by the Mame Vse Ransomware might lead the victims of this ransomware to believe that inside it, they will find what steps they need to take to restore their precious private or business-related files. The message found in the files, however, doesn't even mention the encrypted data. Instead, in a rather brief message, the criminals make some obviously false claims in an attempt to carry out a popular tactic. They make bogus claims about infecting the user's computer with a Trojan, taking control over a supposed webcam, and making explicit videos of the user visiting adult websites. No specific sum is mentioned in the 'HOW TO DECRYPT FILES.txt,' but they contain a Bitcoin cryptocurrency wallet.

Although the message displayed in the desktop image is longer considerably, it also contains zero information about a potential decryption tool or key for the locked data. It simply makes more bogus claims similar to the ones from the text files but includes several additional details. The criminals threaten to release the explicit video to all of the user's contacts unless the sum of 40,000 CZK (Czech koruna) in Bitcoin is sent to their cryptocurrency wallet. The amount is equal to approximately $1700.

While the claims made by the Mame Vse Ransomware can be safely ignored, affected users are still left to deal with their files being locked. The best course of action is to look for an appropriate backup that was created before the ransomware infection. Keep in mind that to prevent the newly restored files from being encrypted all over again, the Mame Vse Ransomware must be removed from the compromised computer with a professional anti-malware program.

The original text found in the 'HOW TO DECRYPT FILES.txt' file is:

'vás masturbující. BTC PENEZENKA _ 1FFNafaNRAkvTB84GELkQXpDEiJK32CGdJ Zveøejnil jsem virus na pornografickém webu, a pak jste jej nainstalovali do svého operaèního systému. Po klepnutí na tlaèítko Pøehrát na porno video, v tom okamžiku byl mùj trojan stažen do vašeho zaøízení. Po instalaci vám pøední fotoaparát natáèí video pokaždé, když masturb.'