'Your Files Have Been Blocked' Ransomware

The 'Your Files Have Been Blocked' Ransomware is an encryption ransomware Trojan that was observed on an online anti-virus program (which is used by con artists to test their ransomware variants). The 'Your Files Have Been Blocked' Ransomware is being developed by a programmer that goes by the online username 'Kamil' and seems to be a variant in the HiddenTear ransomware family. HiddenTree is an open source ransomware Trojan released in 2015 that has spawned countless threat variants, which include the 'Your Files Have Been Blocked' Ransomware. The 'Your Files Have Been Blocked' Ransomware runs as an executable file named 'Important.ex' and encrypts its victims' files. The 'Your Files Have Been Blocked' Ransomware, as soon as the victim's files are encrypted, will display a ransom note in a window with the name 'Your Files Have Been Blocked,' which contains the 'Your Files Have Been Blocked' Ransomware's ransom note and instructions for the victim. The 'Your Files Have Been Blocked' Ransomware is not the work of sophisticated threat creators, lacking various features and being unfinished, and is similar to countless other HiddenTear variants that are being used to attack computer users currently.

The Unnecessary Warning Contained on the 'Your Files Have Been Blocked' Ransomware Name

The 'Your Files Have Been Blocked' Ransomware is designed to encrypt the victim's files, targeting the user-generated files created with software such as Microsoft Office, Libre Office, Adobe Acrobat, etc., as well as media files such as images, videos and music. The 'Your Files Have Been Blocked' Ransomware will add the file extension '.lock' to each file that has been encrypted by the 'Your Files Have Been Blocked' Ransomware attack. Once the 'Your Files Have Been Blocked' Ransomware has encrypted a file, the file becomes unreadable, and will no longer be able to be opened or accessed. After encrypting the victim's files, the 'Your Files Have Been Blocked' Ransomware will deliver a ransom note in the form of a program window, which contains the following text:

'Your files have been blocked
Your files is blocked. You need a individual key to unlock your files.
To unlock follow the steps:
Firstly you need have a BitCoin wallet, (fe. coinbase.com) then you have to pay 50$ to this wallet.
When you done, now you have to send 50 usd (calculate to btc) to below bitcoin address. Great! Now you can type your bitcoin address to below field, and
click "unlock"!
Thats it! Now you can enjoy your computer and unlocked files 🙂
Remember! If you will delete this program, you lose one chance to unlock your files.
Warning: If you already paid and you have information "We don't have your payment yet", you must waiting.. (Usually max. 12h)
Pay 50 usd to this BTC address
1CrRCDkw2oknEcKSAXivCekupirMwAoztb
If you already paid
Enter the bitcoin address which you sent btc
[Unlock and remove the program]'

Dealing with a 'Your Files Have Been Blocked' Ransomware Infection

Computer users must refrain from paying the 'Your Files Have Been Blocked' Ransomware ransom. There is no guarantee that the peoples responsible for the 'Your Files Have Been Blocked' Ransomware will deliver the decryption key, and it is possible that they will simply ask for more money or reinfect the victim's computer. Furthermore, paying the 'Your Files Have Been Blocked' Ransomware ransom allows these people to continue financing these attacks and carrying out these infections on the victims' computers. Rather than paying, you should have backups of your files, which can allow you to recover from a 'Your Files Have Been Blocked' Ransomware attack. Furthermore, having file backups is the best protection against most other ransomware Trojans, which rely on the fact that the victim cannot recover the files encrypted by the attack even if the ransomware Trojan itself is deleted. Apart from file backups, use a reliable security application.