What is Random6 Ransomware?
Random6 Ransomware, also known as Johnie Ransomware, is an application designed to encrypt files. If your computer is unprotected, then it can enter it by stealth and encrypt many of your files. Its developers will probably want you to purchase a decryption tool that may not come cheap and might not be worth your files. Therefore, you may want to remove it instead. It is a rather simple and primitive ransomware but, nevertheless, effective as it can render your files useless. Therefore, it is paramount that you protect your PC from infections like it. However, if you were unfortunate to get Random6 Ransomware, then you may want to find out more about it. Everything you need to know about it is provided below.
Where does Random6 Ransomware come from?
According to our malware researchers, this ransomware’s developers have made arrangements to have it included in malicious software installers that can install it on your computer secretly while installing apparently legitimate software. Some freeware hosting websites do not shy away from bundling normal applications with malware to make money. Also, they say that this malicious program can also be sent via email to random email addresses as seemingly legitimate invoices, receipts or something of this sort. The emails can feature Random6 Ransomware as an attached file that will infect your computer as soon as you open the attachment.
What does Random6 Ransomware do?
Researchers say that Random6 Ransomware is most likely a test version because it does not use an advanced encryption technique. It encrypts files using Bas64 and, therefore, they think that your files can be decrypted, but there is no free decryption tool yet. When this ransomware infects a computer, it starts the encryption process immediately. It was set to target many file types, so many, if not all, of your pictures, documents, videos, and audios can be encrypted. It appends the files with a 6-character randomized file extension and also changes the file names to random sets of characters. Once the encryption is finished, it drops a ransom note named RESTORE.{random characters}-Files.txt to each folder where a file was encrypted.
The note says that your files have been encrypted and that you need to get in touch with the people that created Random6 Ransomware via a provided email address at filesrestore@tutanota.com. The note also features a unique ID that you are supposed to send to the developers via emails to be recognized and receive the correct decryption key. If you are unable to get a reply via email, then you are instructed to go to Bitmsg.me, create an account and message the cyber crooks to BM-NBazWh9xNVf2SgmvLv8pc3Uc9CCXtXMu and include your mail address, the ID number mentioned above.
You need to pay the ransom in Bitcoins, but the developers do not specify the sum to be paid in the ransom note. Researchers say that they reveal the sum you have to pay after contacting them. Researchers say that the ransom amount can vary. Therefore, it may not be worth paying the ransom if the developers get greedy and ask for too much. In any case, even if you pay, there is a good chance that you will not get the promised decryption tool.
How do I remove Random6 Ransomware?
Given that you cannot trust cyber criminals to keep their word, we recommend that you delete Random6 Ransomware from your PC and wait for a free decryption tool to be developed and use it instead. However, it may take a while, and there is no guarantee that it will be developed at all. To remove this ransomware, you can use our provided guide or an antimalware program such as our featured one called SpyHunter that is sure to make light work of this ransomware.
Removal Guide
- Press Windows+E keys.
- Type the following file paths in the address box and press Enter.
- %USERPROFILE%\Downloads
- %USERPROFILE%\Desktop
- %TEMP%
- Locate the randomly-named executable.
- Right-click it and click Delete.
- Empty the Recycle Bin.
100% FREE spyware scan and
tested removal of Random6 Ransomware*
0 Comments.