Remove Health Ransomware

ransomware

The Health Ransomware is a member of the Phobos Ransomware family. This is terrible news since it means that the Health Ransomware is not compatible with free decryptors. If it locks up your files, you will not be able to decipher them via free utilities. Instead, you might have to seek alternative data recovery options, which might not always work great. Currently, the only sure way to undo the damage that the Health Ransomware causes is to restore the original copies of your files through a backup. Unfortunately, not all victims of this malware might have access to a backup.

The Health Ransomware attack is characterized with several major changes to the victim's system:

  • Commonly used file formats are encrypted – images, documents, archives, etc.
  • The locked files are marked with the extension '.id[<VICTIM ID>].[loading66@tuita.io].health.'
  • The ransom notes 'info.txt' and 'info.hta' are dropped by the Health Ransomware.
  • The malware deletes Shadow Volume Copies and disable System Restore.

What do Health Ransomware's Creators Want?

Of course, the operators fi this malware are asking for money. They promise to provide all paying victims with a working decryption tool. However, they offer no guarantee that this will happen, nor can they prove that their decryptor works. If the Health Ransomware takes over your system, you should not accept the offer of the criminals. Victims of the Health Ransomware should sue an antivirus scanner to eliminate the threat, preventing it from causing more damage. After this is done, they can experiment with alternative data recovery options and tools.

December 23, 2021
Loading...

Cyclonis Password Manager Details & Terms

FREE Trial: 30-Day One-Time Offer! No credit card required for Free Trial. Full functionality for the length of the Free Trial. (Full functionality after Free Trial requires subscription purchase.) To learn more about our policies and pricing, see EULA, Privacy Policy, Discount Terms and Purchase Page. If you wish to uninstall the app, please visit the Uninstallation Instructions page.