Name: JokeFromMars Ransomware
Encoded method: AES-256 cipher
Brief description: JokeFromMars is an encrypted malware which threats users to have a payment on restoring the infected files
Encoded objects: .3gp, .7z, .apk, .avi, .bmp, .cdr, .cer, .chm, conf, .css, .csv, .dat, .db, .dbf, .djvu, .dbx, .docm, ,doc, .epub, .docx .fb2, .flv, .gif, .gz, .iso .ibooks,.jpeg, .jpg, .key, .mdb .md2, .mdf, .mht, .mobi .mhtm, .mkv, .mov, .mp3, .mp4, .mpg .mpeg, .pict, .pdf, .pps, .pkg, .png, .ppt .pptx, .ppsx, .psd, .rar, .rtf, .scr, .swf, .sav, .tiff, .tif, .tbl, .torrent, .txt, .vsd,.wmv, .xls, .xlsx, .xps, .xml, .ckp, zip, .java, .py, .asm, .c, .cpp, .cs, .js, .php, .dacpac, .rbw, .rb, .mrg, .dcx, .db3, .sql, .sqlite3, .sqlite, .sqlitedb, .psd, .psp, .pdb, .dxf, .dwg, .drw, .casb, .ccp, .cal, .cmx, .cr2.
About JokeFromMars Ransomware
The JokeFromMars Ransomware transfers to user’s computer via spam emails and extensions like the Phoenix Exploit Kit, especially when the users don’t have latest anti-malware software. This ransomware is experienced in the techniques of hackers. The reasons for the saying are listed below:
- It has ability to effect users’ social software and banking network with a secret process which can contact with remote server.
- It can change the desktop wallpaper of the infected computers and what image it changes is either solid black or mars in space.
- It has the complete guides on how to install TOR Browser and which one is the payment site. (usually users are asked to buy 1.1 Bitcoins in a site of Localbitcoins.com and then deliver it to the hacker’s wallet address.)
The Manual Solution to Remove JokeFromMars Ransomware
Step 1 Boot your computer in Safe Mode
For Windows XP, Vista, 7 users
Restart computer >> press F8 before it shows up Windows logo >> Use direction keys to select Safe Mode >> Enter
For Windows 8, 8.1 and 10 users
Start Menu >> hold Shift to open option window, click Power and then click Restart >> Troubleshoot >> Advanced Options >> Startup Settings and then restart your computer >> Safe Mode
Step 2 Remove Dubious Programs from Control Panel
Step 3 Remove Infected Files (for Windows 7)
1.Click Start and then click Computer.
2. Click Organize. there is a list. Choose Folder and search options.
3. Click View tab.
4. Look at the Advanced settings. Choose Show hidden files, folders and drives, and then click OK.
5. Find the infected archives and delete them.
Step 4 Clean Registry Entries Changed by JokeFromMars Ransomware
2. Type “regedit” to open Registry Editor.
The Automatic Solutions to Remove JokeFromMars
Download and Install SpyHunter
1. Download SpyHunter by clicking the below link.
2. Run the file.exe by clicking Run.
3. After it is done, double click SpyHunter icon. In the interface of SpyHunter click the Scan Computer Now!
4. The results of scanning come out. You will see the computer threats list. Tick Select All and then click Fix Threats.
Download and Install RegCure
The RegCure Pro is a computer cleaner, with the functions of defraging memory and deleting useless files or extensions. JokeFromMars Ransomware occupies a lot of space and RegCure can help you increase PC’s performance.
1. Click the link below to download RegCure.
2. Click Save File to save the file.exe.
3. Run the file.exe by clicking the Run button. If the Windows asks you whether to allow or not, please choose allow.
4. After the installation is successful, double click the shortcut icon to open RegCure, which will automatically turn to the interface of System Scan and start to scan.
5. When the scanning is finished, you will see all the threats. Now, don’t hestate to click Fix All to solve all issues in your computer.
Conclusion: Generally it is impossible to decrypt the files locked by JokeFromMars Ransomware without paying ransom, but you shouldn’t pay for its private key. It is suggested to use SpyHunter which can help you get the back up files.