Brickr Ransomware Removal Guide

If you have been infected with Brickr Ransomware, you are probably up for a good one. This dangerous infection will be sure to encrypt your files and then demand that you pay a ransom fee for the decryption tool. Computer security experts maintain the importance of resisting the urge to pay. Paying would only encourage the criminals to continue their illegal practices. Instead of succumbing to these threats, you should remove Brickr Ransomware at once. For that, we have compiled guidelines, which you can find below this description. The sooner you remove this infection from your computer, the sooner you will be able to go back to your usual routine.

Although it is not exactly clear how this infection spreads around, our security researchers suggest that it might spread via spam emails. Spam emails that distribute ransomware look like official notifications from reliable sources. However, any notification that comes with an attachment should be given a thorough eye. If you think that you must open a particular attachment, you should scan it with a security tool just in case. If you fail to avoid the infection, Brickr Ransomware will soon take over your computer, terrorizing you into transferring the payment immediately.

Upon the infection, the ransomware opens a window called File Informer, and it says that “All of your files (documents, photos, videos, archives and other files) were locked and are not usable at the moment.” The program says that you can get your files back if you pay a designated amount of bitcoins to the given bitcoin wallet. However, the chances of these criminals issuing the decryption key are very low. Hence, paying would not guarantee that you would get your data back. In fact, the best way to restore your files is to get them from a system back-up. If you regularly back up your files in an external hard drive, it should not be a problem. Also, you might be surprised to find just how many files could be saved on your mobile device, and also in your inbox.

As far as the technical details are concerned, once your files are encrypted, this program creates a unique ID in the %AppData%\id.bin file. This is the file that allows Brickr Ransomware to display the unique infection number in the ransom note you see on your screen. Every single infected computer has a different ID, and this allows the command and control center to register all the different infections.

Currently, there is no public decryption tool that would allow you to decrypt the files affected by Brickr Ransomware for free. Nevertheless, you need to focus on removing this infection from your computer right now. Once you get rid of this program, you will be able to delete the encrypted files and transfer the healthy ones from your backup straight into your hard drive.

The manual removal process for this program is somewhat tedious, so if you do not want to go through it by yourself, you can delete Brickr Ransomware automatically with SpyHunter. What’s more, deleting malware automatically will help you locate other potential threats and terminate them at once.

How to Remove Brickr Ransomware

1. Press Ctrl+Shift+Esc and the Task Manager will open.
2. In the Processes tab, kill suspicious processes.
3. Press Win+R and the Run tab will open.
4. Type %TEMP% into the Open box and click OK.
5. Delete recently downloaded files.
6. Repeat steps 3 to 5 with the following directories:
   %USERPROFILE\Downloads
   %USERPROFILE\Desktop
7. Press Win+R and type regedit. Click OK.
8. Go to HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run.
9. Right-click the WidnowsNetworkingSvc value name on the right and delete it (value data random exe file).
10. Right-click the WidnowsNetworkingSvc value name and delete it (value data READ_DECRYPT_FILES.txt).
11. Exit Registry Editor and scan your PC.