Remove Health Ransomware
The Health Ransomware is a member of the Phobos Ransomware family. This is terrible news since it means that the Health Ransomware is not compatible with free decryptors. If it locks up your files, you will not be able to decipher them via free utilities. Instead, you might have to seek alternative data recovery options, which might not always work great. Currently, the only sure way to undo the damage that the Health Ransomware causes is to restore the original copies of your files through a backup. Unfortunately, not all victims of this malware might have access to a backup.
The Health Ransomware attack is characterized with several major changes to the victim's system:
- Commonly used file formats are encrypted – images, documents, archives, etc.
- The locked files are marked with the extension '.id[<VICTIM ID>].[loading66@tuita.io].health.'
- The ransom notes 'info.txt' and 'info.hta' are dropped by the Health Ransomware.
- The malware deletes Shadow Volume Copies and disable System Restore.
What do Health Ransomware's Creators Want?

Of course, the operators fi this malware are asking for money. They promise to provide all paying victims with a working decryption tool. However, they offer no guarantee that this will happen, nor can they prove that their decryptor works. If the Health Ransomware takes over your system, you should not accept the offer of the criminals. Victims of the Health Ransomware should sue an antivirus scanner to eliminate the threat, preventing it from causing more damage. After this is done, they can experiment with alternative data recovery options and tools.








