Schwerer Ransomware Removal Guide

Schwerer Ransomware is a malicious program that will attack you unawares. This type of computer infection encrypts your files and then demands that you pay money to decrypt them. Usually, it is very hard to restore your files after a ransomware infection, and that is why it is necessary to have a file back-up. That can be an external hard disc or a cloud drive, but the point is that you have to backup your files regularly because you can never know when you might lose your data. As for Schwerer Ransomware, you can find the manual removal instructions right below this description.

This program should spread like most of the other applications of the same kind. Ransomware programs tend to employ spam emails and fake downloads to reach target computers. Here you might say that your email service filters spam messages into the Junk folder, but these days some spam notifications may look like invoices from online shopping sites or even reports from a bank. Thus, it is important that you stay alert and refrain from opening mails that contain attachments. If you think there is an invoice, try thinking back and remember whether you really bought something. If there is a supposed message from a bank, think if it is the end of a fiscal month, and whether you have an account in that particular bank in the first place. The sad thing is that it would be possible to avoid such infections as Schwerer Ransomware if users were more careful about what they open and what they download.

Luckily, it is possible to decrypt the files affected by this program by using an online key generator. You can find this public decryption tool available on a number of computer security websites. Nevertheless, it does not mean that the program cannot scare users into thinking that this is the end.

Upon the infection, this program, written in the Autoit scripting language, encrypts all the files it can encrypt, and then automatically displays the ransom note. The ransom note window can be closed by killing the pawje.exe process via the Task Manager. You will also find that all the affected files will have the .schw extension added to them. For instance, a bird.jpg filename will look like bird.jpg.schw once the encryption is complete.

The ransom note will say that “all your computer file were encrypted with AES, only we can restore your files.” Despite the limited English, it is quite obvious as to what the people behind Schwerer Ransomware want. They expect you to contact them via the given email, and then you should pay 150EUR within 3 days. Once the criminals receive the ransom payment, they promise to send you the decryption key which should help you restore your files.

However, as you already know, there is a public decryption tool that can help restore your files. You do not need to pay a single cent to Schwerer Ransomware. Instead, remove this infection with the instructions you will find below. If you think that manual removal is too much of a task for you, you can always employ a reliable antispyware tool that will help you terminate the ransomware for good.

How to Remove Schwerer Ransomware

1. Press Ctrl+Shift+Esc and Task Manager will open.
2. Open the Process tab and highlight the pawje.exe process.
3. Click End Process and close Task Manager.
4. Press Win+R and type regedit. Click OK.
5. Go to HKEY_CURRENT_USER\Software\Other\Schwerer.
6. Right-click the Schwerer folder and delete the entire key.
7. Go to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree.
8. Delete the waijo task under Tree and exist Registry Editor.
9. Press Win+R and type %AppData%. Click OK.
10. Go to the Other folder and delete awiem.bat and pawje.exe.
11. Press Win+R again and type %WinDir%. Click OK.
12. Go to System32/Task and delete the waijo task.