Remove MDED Ransomware
The MDED Ransomware is a file-encryption Trojan, belonging to the STOP/Djvu family. Its attack aims to leave you with a bunch of encrypted files whose contents you cannot access. The criminals behind this operation offer to fix this. However, they demand to receive some Bitcoin in exchange. Trusting cybercriminals, especially ransomware creators, is not an idea that you should entertain. They may easily take your money, and ignore your pleas for help.
The MDED Ransomware often reaches users through the help of phishing via social media, text messages, or email. However, you may also encounter such threats because of fake downloads and updates, or pirated content. We advise all Windows users to ensure their system's protection by using an up-to-date antivirus software suite at all times.
MDED Ransomware Added to the STOP/Djvu Family
When the MDED Ransomware compromises a system successfully, it will encrypt files of all kinds – documents, media, archives, backups, databases, and more. It uses the suffix '.mded' to mark the names of these files. Keep in mind that reverting the filename does not help in any way, because the contents of these files is encrypted.
The attackers also leave a ransom document under the name '_readme.txt.' It reveals more details about the attack, as well as several key pieces of information:
- The attackers ask for $490 via Bitcoin. They threaten to double the ransom fee after 72 hours.
- They offer to unlock 1-2 files for free.
- Victims can get in touch by emailing manager@mailtemp.ch and helpmanager@airmail.cc.
Falling victim to the MDED Ransomware can be terrible, because there is no free decryption tool to help you out. However, as we already said, agreeing to pay is a terrible idea. Our suggestion is to run an anti-malware scanner to help you eliminate the threat fully. Once you dispose of the malicious software, you can proceed to try and restore your files. The best way to do this is through a backup, but you should know that some 3rd-party data recovery tools may also be able to help.
