Research on .Merry file virus

get rid of .Merry file virus

A hot ransomware called .Merry file virus have broken out this week and now is still spreading quickly. .Merry file virus now is distributed through a fake file of chrome font, which is known to be Chrome_Font.exe. Most of users downloaded and double-clicked Chrome_Font.exe and then all the files are encrypted with a .Merry extension. It drops a MERRY_I_LOVE_YOU_BRUCE.HTA file to inform the users that their files are encrypted with RAS or AES encryption and they have to buy decryptor with bitcoins. Here is one of the warnings:

ALL COMPUTER DATA ENCRYPTED
TIME AFTER ALL FILES WILL BE DELETED
YOUR ID
NOW YOU NEED TO PAY TO RECOVER YOUR DATA
AFTER MONEY TRANSFER YOU WILL RECIEVE THE DECRYPTOR
CONTACTS
TELEGRAM @comodosecunty
EMAIL comodosec@yandex.com
Any attempts to return your files with the third-party tools can be fatal for your encrypted files! The most part of the third-party software change data within the encrypted file to restore it but this causes damage to the files.
Finally it will be impossible to decrypt your files! There are several plain steps to restore your files but if you do not follow them we will not be able to help you!

Don’t Pay Money to Author of .Merry file virus

It is common that uses are scammed by ransomware maker. In most of cases, users pay lots of money to buy the so-called decryptor but the hacker just take the money and disappear. We understand that the encrypted files are very important to you, but it is not good to make a trade with hacker, who are criminal. And there is another risk, that is the hacker will have chance to hack your bank account if you send money to them. Therefore, never contact the hacker of .Merry file virus and never pay the ransom fees. There are lots of data decryption company and software and you should try some safe solutions. Our lab worked out a removal method towards .Merry file virus, you can try your luck here:

First Section – How to Get Rid of .Merry file virus Completely?

Solution A – Remove .Merry file virus Manually (Time-consuming method for PC experts)

Solution B- Remove .Merry file virus Automatically (Best method for common PC users)


Solution A – Remove .Merry file virus Manually (Time-consuming method for PC experts)

Step 1. End .Merry file virus related running processes in Windows Task Manager.

– Press “Ctrl + Shift+ Esc” keys together to open processes tab in Windows Task Manager:
remove .Merry file virus completely
– Click on suspicious or unknown process related with .Merry file virus and click End Process:
delete .Merry file virus completely

Step 2. Uninstall .Merry file virus and unknown programs from Control Panel.

– Press “Win + R ” keys together to open Run box:
get rid of .Merry file virus completely
– Type control panel in Run box and click OK button:
remove .Merry file virus totally
– In Control Panel, click Uninstall a program under Programs:
get rid of .Merry file virus totally
– Right click on .Merry file virus and related unknown program, then click Uninstall:
delete .Merry file virus totally

Step 3. Remove malicious registry files related with .Merry file virus.

– Press “Win + R ” keys together to open Run box:
remove .Merry file virus quickly
– Type regedit to open Registry and remove the following registry files generated by .Merry file virus:

HKEY_LOCAL_MACHINESOFTWAREsupWPM
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesWpm
HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerMain “Default_Page_URL”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msseces.exe
HKLM\SOFTWARE\Classes\AppID\<random>.exe
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\[virus name]

Step 4. Delete nasty extensions / add-on related with .Merry file virus.

Chrome User:

  1. Click the Chrome menu on the browser toolbar.
  2. Click Tools.
  3. Select Extensions.
  4. Click the trash can icon by the extensions you’d like to completely remove.
  5. A confirmation dialog appears, click Remove.

get rid of .Merry file virus quickly
IE User:

  1. Open the desktop, and then tap or click the Internet Explorer icon on the taskbar.
  2. Tap or click the Tools button, and then tap or click Manage add-ons.
  3. Under Show, tap or click All add-ons, and then remove all add-ons you do not know or need.
  4. If the add-on can be deleted, you’ll see the Remove option. Tap or click Remove and then tap or click Close. Otherwise click Disable button.

delete .Merry file virus quickly
Firefox User:

  1. Click the menu button firefox menu and choose Add-ons. The Add-ons Manager tab will open.
  2. In the Add-ons Manager tab, select the Extensions or Appearance panel.
  3. Remove all extensions you do not know or need.
  4. Click its Disable or Remove button. Remove button is preferred if available.
  5. Click Restart now if it pops up.

remove .Merry file virus easily
Microsoft Edge User:

(Edge currently does not provide extension, so we only need to reset homepage and search engine to remove hijacker installed by .Merry file virus)

Reset Edge Homepage:

  • Click More (…) on the address bar, then click Settings;
  • Under Open with, select A specific page or pages. Then you can select a recommended website from drop-down list, or type in your favorite website with Custom option in the list.

 

Reset Edge Default Search Engine:

  • Click More (…) on the address bar, then click Settings >> Click View advanced settings;
  • Click <Add new> under “Search in the address bar with”, type in your favorite search engine;
  • Choose the search engine you prefer and click Add as default;

 


Solution B- Remove .Merry file virus Automatically (Best method for common PC users)

Step 1. Scan your computer with SpyHunter Anti-Malware to locate and remove .Merry file virus and related threats.

– Click the button below to safely download SpyHunter Anti-Malware :

– Double-click SpyHunter-Installer to install SpyHunter Anti-Malware now:
.Merry file virus removal tool
– Once installed, click Start New Scan to diagnose your system and detect infections such as .Merry file virus:
.Merry file virus removal help
– Once SpyHunter Anti-Malware completes its scan, click Fix Threats to get rid of .Merry file virus and other infections:
.Merry file virus removal way


Step 2. Run Stella Data Recovery Tool to Restore Damaged Files:

1. Click the button below to open download Stellar Phoenix Windows Data Recovery , and Double-click installation file “Stellar_WinDataRecovery_Home “ to install it:


2. Once installed, click Scan Now button to detect the infected files :
software for recover files infected by .Merry file virus
3. Once it complete the scan, please select the file types you want to recover and then click Recover button:

software for decrypt files infected by .Merry file virus

 

Step 3. Download Data Recovery Pro to restore important files infected by .Merry file virus.

There are many different codes are written in .Merry file virus virus, so it is difficult to restore the infected files if you just use one data recovery app, thus you need to try several data recovery apps so that you will have chance to get some of your important files back. Besides, the Stella Data Recovery, our lab also recommend you to use Data Recovery Pro, which is another great tool for rescuing files attacked by virus. Click the download button below to get it now:

Once it is installed, run a scan to search your files and then RECOVER them:
software for restore files infected by .Merry file virus


(Note – This guide is only provided as an reference to help you get rid of .Merry file virus ransomware to make your PC healthy and prevent new files being infected. Every computer is facing different conditions, we do not assure that the provided software capable of recovering files for all users. Good luck to you.)

How to Remove .Merry file virus Completely?