Remove Guer Ransomware

Guer is the name of a file-locker whose creators are currently spreading it online. The dangerous Guer Ransomware may be hiding inside a pirated software suite, a cracked game, or an innocent-looking attachment you got in your inbox. Its operators are exploring a wide range of malware propagation strategies. The best way to stay safe from such attacks is to keep your system secured by an up-to-date antivirus software suite.

The Guer Ransomware belongs to the STOP family of ransomware, similarly to the <LINK>. Unfortunately, there is no decryptor for these file-encryption Trojans – the only guaranteed way to undo the damage they do is to recover the data from a backup.

If Guer Ransomware's attack is successful, it will lock the contents of the majority of your files. Its primary targets are documents, media and archives, but it targets a long list of file types. After the Guer Ransomware is done locking a file, it will add the '.guer' suffix to its name – a common method that ransomware operators use to mark the names of damaged files. Of course, the malware tries to limit the user's recovery options. This is why it deletes Shadow Volume Copies and System Restore Points.

Victims of the Guer Ransomware are provided with the ransom note '_readme.txt,' which is nearly identical to the one used by other STOP Ransomware variants. It tells the victim to pay $490 for a decryptor, and to contact manager@mailtemp.ch or managerhelper@airmail.cc for assistance.

Trusting the criminals is not a good idea – they might not give you anything in return, or they might try to ask you for more money. Furthermore, the money you send may be used to develop more dangerous malware. If you are a victim of this ransomware, you should run a malware removal tool. After the threat is gone, you can try out popular data recovery software and methods.