How to Remove PUBG Ransomware?

The PUBG is nasty ransomware which has been newly discovered by the MalwareHunterTeam and it encrypts the user’s data thereby appending “.PUBG” extension to the files and folders on the desktop of the victim. This ransomware is not that hazardous for the decryption is really simple and quick. This is a kind of joke ransomware for it does not demand a ransom from the victim and the behavior is quite unusual from the rest of the ransomware.

Threat Summary

• Name – PUBG Ransomware
• Targeted Operating System– Windows XP, Windows Vista, Windows 7 and Windows 8/10
• Category – Ransomware, Cryptovirus
• Symptoms –Encrypts sensitive data and user’s files, appends .PUBG extension to the files that have been encrypted by it and demands the victim to play a game in order to decrypt the files.

Why should you worry about PUBG Ransomware?

PUBG Cryptovirus will encrypt your data but is suspected to be a kind of prank program for it demands the victim to play a game in order to decrypt the files locked by it. The PUBG Ransomware Virus is similar to RensenWare Ransomware which also required the users to play a certain game to restore the files back. The ransom instructions on the ransom note state two ways to decrypt the files, one of which requires the user to play the game known as “PlayerUnknown’s Battlegrounds”. The developers seem to have no intention to extort money from the users but just have fun by making them play this multiplayer online battle royal game. The victim is instructed to play the said game for an hour so as to be able to decrypt the files. The ransom note presented by the PUBG Ransomware screen states the following:

PUBG Ransomware
Your files, images, musics, documents are Encrypted!
Your files is encrypted by PUBG Ransomware!
But don’t worry! It is not hard to unlock it.
I don’t want money!
Just play PUBG 1 Hours!
Or Restore code is [s2acxx56a2sae5fjh5k2gb5s2e]

The message as given above clearly states two methods to restore the data that has been decrypted by the Ransomware. The first one is to play the game for which the running process is overseen by the malware so as to check, if the game is being played. But since the malware is not that advanced, it simply checks the running process of the game called “TslGame.exe”. Though the note instructs the users to play the said game for an hour but the users will be able to decrypt the files just after running the executable file for merely 3 seconds. The decryptor is activated as soon as it detects the running process and the user is able to restore all the data encrypted. The second one is to enter the given decryption code (s2acxx56a2sae5fjh5k2gb5s2e) if the user doesn’t wish to play the game.

How to remove PUBG Ransomware?

PUBG is not a notorious ransomware that will cause any havoc or any severe infection and decryption is also quite simple. You might find guides to remove PUBG Ransomware or PUBG Ransomware removal instructions on the internet but it’s better to invest time on recovering your files rather than these guides for they are of least help to the users.If, you are not able to recover your files somehow even after following the instructions as provided in the ransom note, you can follow the simple instructions given below for restoring your encrypted data through Windows previous version as given in the form of few simple steps.