If your computer is infected with the Cerber ransomware will display a red #DECRYPT MY FILES#.png wallpaper that covers the entire desktop, and all your documents will have a .Cerber extension. A #DECRYPT MY FILES#.txt text file will be placed on your desktop. Both files contain instruction on how or recover the encrypted files.
The messages displayed by this ransomware infection can be localized depending on the user’s location, with text written in the appropriate language.
This the message that the Cerber ransomware may display:
Cerber
Your documents, photos, databases and other important files have been encrypted!
To decrypt your files follow the instructions:
—————————————————————————————
1. Download and install the “Tor Browser” from https://www.torproject.org/
2. Run it
3. In the “Tor Browser” open website:
http://decrypttozxybarc.onion/[removed]
4. Follow the instructions at this website