What is DecryptIomega Ransomware
DecryptIomega Ransomware is a new threat for network devices, in particular for Lenovo NAS. The virus was detected at the end of July 2019 and, according to the latest data, spread throughout the world. DecryptIomega Ransomware encrypts data on the server, hides it and transfers it to the attackers’ servers. There is currently no information on whether the file extension is changing.
Also, DecryptIomega Ransomware creates a text file YOUR FILES ARE SAFE!!!.txt with the demands of the attackers. There may be two versions of these notes, we have indicated below their images and content:
YOUR FILES HAVE BEEN ENCRYPTED AND MOVED TO A SAFE LOCATION. IF YOU NEED THEM BACK PLEASE SEND 0.03 BITCOIN TO THIS ADDRESS:
1GMwS2BgKbfHxZBGk4n3uy5GGevS4DtB1M
YOU HAVE UNTIL THE 1st OF AUGUST 2019 TO MAKE THE PAYMENT OR YOUR FILES WILL BE GONE FOR GOOD.
YOUR UNIQE ID IS: “***********”.
BE SURE TO INCLUDE IT IN THE PAYMENT COMMENTS, OR EMAIL ME THE CODE AND PAYMENT CONFIRMATION TO: decryptiomega@protonmail.com
AFTER THE PAYMENT YOU WILL RECEIVE A NEW FILE ON YOUR NAS DEVICE WITH THE LINK TO YOUR DECRYPTED FILES.
THANK YOU FOR YOUR COOPERATION.
YOUR STORAGE WAS UNPROTECTED.
YOUR FILES ARE SAFE. THEY HAVE BEEN ENCRYPTED AND MOVED TO A SAFE LOCATION. IF YOU WANT THEM BACK PLEASE SEND 0.03 BITCOIN TO THIS BITCOIN ADDRESS:
3H1h39aTtzYjcRSNN11YnkAAMV8f9UnCDo
YOU HAVE UNTIL THE 1st OF AUGUST 2019 TO MAKE THE PAYMENT OR YOUR FILES WILL BE AUTO-DELETED.
YOUR UNIQE ID IS: “**********”.
PLEASE INCLUDE IT IN THE PAYMENT COMMENTS, OR EMAIL ME THE CODE AND PAYMENT CONFIRMATION TO: iomega@firemail.cc
AFTER THE PAYMENT YOU WILL RECEIVE A NEW FILE ON YOUR STORAGE DEVICE OR AN EMAIL WITH THE LINK TO DOWNLOAD YOUR DECRYPTED FILES.
YOUR FILES WILL REMAIN SAFE.
THANK YOU FOR YOUR COOPERATION.
The contents of the notes differ only in email addresses to contact fraudsters and the account to pay the ransom. The cost of redemption is 0.03 bitcoin, which is a large amount. Of course, we categorically do not recommend you to pay, besides there is no absolute guarantee that the files will be decrypted and returned in its original form. Use our guides to remove DecryptIomega Ransomware and decrypt your files.
There are two solutions to this problem. First is to use special Removal Tool. Removal Tools delete all instances of malware by few clicks and help the user to save time. Or you can use the Manual Removal Guide, but you should know that it might be very difficult to remove DecryptIomega ransomware manually without a specialist’s help.
DecryptIomega Removal Guide
- Download DecryptIomega Removal Tool.
- Remove DecryptIomega from Windows (7, 8, 8.1, Vista, XP, 10) or Mac OS (Run system in Safe Mode).
- How to restore files
- How to protect PC from future infections.
How to remove DecryptIomega ransomware automatically:
Thor Home may help you to get rid of this virus and clean up your system. In case you need a proper and reliable antivirus, we recommend you to try it.
Manual DecryptIomega Removal Guide
Here are step-by-step instructions to remove DecryptIomega from Windows and Mac computers. Follow these steps carefully and remove files and folders belonging to DecryptIomega. First of all, you need to run the system in a Safe Mode. Then find and remove needed files and folders.
Uninstall DecryptIomega from Windows or Mac
Here you may find the list of confirmed related to the ransomware files and registry keys. You should delete them in order to remove virus, however it would be easier to do it with our automatic removal tool. The list:
x12.exe
DecryptIomega.dll
_readme.txt
readme.txt
Windows 7/Vista:
- Restart the computer;
- Press Settings button;
- Choose Safe Mode;
- Find programs or files potentially related to DecryptIomega by using Removal Tool;
- Delete found files;
Windows 8/8.1:
- Restart the computer;
- Press Settings button;
- Choose Safe Mode;
- Find programs or files potentially related to DecryptIomega by using Removal Tool;
- Delete found files;
Windows 10:
- Restart the computer;
- Press Settings button;
- Choose Safe Mode;
- Find programs or files potentially related to DecryptIomega by using Removal Tool;
- Delete found files;
Windows XP:
- Restart the computer;
- Press Settings button;
- Choose Safe Mode;
- Find programs or files potentially related to DecryptIomega by using Removal Tool;
- Delete found files;
Mac OS:
- Restart the computer;
- Press and Hold Shift button, before system will be loaded;
- Release Shift button, when Apple logo appears;
- Find programs or files potentially related to DecryptIomega by using Removal Tool;
- Delete found files;
How to restore encrypted files
You can try to restore your files with special tools. You may find more detailed info on data recovery software in this article – recovery software. These programs may help you to restore files that were infected and encrypted by ransomware.
Restore data with Stellar Data Recovery
Stellar Data Recovery is able to find and restore different types of encrypted files, including removed emails.
- Download and install Stellar Data Recovery
- Choose drives and folders with your data, then press Scan.
- Select all the files in a folder, then click on Restore button.
- Manage export location. That’s it!
Restore encrypted files using Recuva
There is an alternative program, that may help you to recover files – Recuva.
- Run the Recuva;
- Follow instructions and wait until scan process ends;
- Find needed files, mark them and Press Recover button;
How to prevent ransomware infection?
It is always rewarding to prevent ransomware infection because of the consequences it may bring. There are a lot of difficulties in resolving issues with encoders viruses, that’s why it is very vital to keep a proper and reliable anti-ransomware software on your computer. In case you don’t have any, here you may find some of the best offers in order to protect your PC from disastrous viruses.
Malwarebytes
SpyHunter is a reliable antimalware removal tool application, that is able to protect your PC and prevent the infection from the start. The program is designed to be user-friendly and multi-functional.