Jigsaw (variant) ransomware affected file
File type: Ransomware encrypted file
The gefickt file extension was added to user files encrypted by a variant of Jigsaw ransomware.
A gefickt file is an encrypted version of an original file, not a separate file format.
File type category:
Ransomware encrypted file
Date updated: October 16, 2026
The gefickt file extension is associated with a variant of the Jigsaw ransomware that appeared in early February 2017. Like earlier Jigsaw variants, it encrypts users' files, changes their file extensions, and demands a ransom.
The file contains the encrypted contents of the original file. Renaming the extension does not decrypt the data or make it readable by the original application. The extension was used by this ransomware variant rather than by an independent application or standard file format.
Jigsaw Ransomware Decryptor by Michael Gillespie is available for Microsoft Windows and can be used to recover files affected by this variant.
A gefickt file cannot normally be opened by the application that created the original file. On Microsoft Windows, use Jigsaw Ransomware Decryptor by Michael Gillespie to decrypt the affected files.
After successful decryption, open the recovered file with the application associated with its original format. Do not expect changing the gefickt extension manually to restore access.
The gefickt file itself cannot be meaningfully converted because it contains ransomware-encrypted data. Decrypt it first with Jigsaw Ransomware Decryptor on Microsoft Windows.
After recovery, the resulting file can be converted with software that supports its original file format.
Software apps that recover gefickt files:
Microsoft Windows
Language
