Random6 Ransomware

Random6 Ransomware is called this way because it marks the files it encrypts with an extension from six random letters, e.g. picture.jpg.nqsren, photo.jpg.kdrlus, and so on. Since the files are encrypted while using a secure cryptosystem, it is impossible to access them without a unique decryption key and a decryption tool. We have no doubt the cyber criminals behind this infection may promise their victims to send both of them if a ransom is paid. Needless to say, hackers are not people you can trust, and it is entirely possible they might not deliver what is promised even if they receive the money. Thus, if losing your files is too much for you already, we strongly advise not to risk losing your money as well. Users who wish to go back to using their computer, as usual, should get rid of Random6 Ransomware. In order to guide you through the removal process, we prepared deletion instructions that are available at the end of this article.

Besides erasing the malware, it is also important to learn more about it, in case you ever encounter something similar. Our research team has determined that Random6 Ransomware could be distributed with the help of unreliable file-sharing web pages, which distribute malicious installers. Another rather possible distribution option could be Spam emails. In such case all the cyber criminals have to do is send their victims emails containing the threat’s launcher. The file itself might have a curious title to make the user wish to see what it holds inside, or it might come with a text stressing how crucial it is for you to open the attachment immediately. If you are not sure where the attachment is coming from or why you were its receiver, it would be advisable to scan it with a trustworthy security tool before opening it. Checking the suspicious file would only take a couple of minutes and provided it might save your system from infection or your data from ruin, we believe it is worth to invest a few moments for a quick check-up.

At the time the system is infected you might not notice anything since the malware should announce its presence only after it finishes encrypting the victim’s data; otherwise the user could turn off the computer and possibly interrupt this process. During it Random6 Ransomware may lock all user’s personal files, it can detect on the computer or perhaps even on attached removable storages. Our researchers believe, the threat should mostly target various documents, photographs, videos, and so on as such data could be irreplaceable for the computer’s user.

Naturally, if Random6 Ransomware’s encrypted files are the only copies of them, it might be easier to persuade the user to pay the ransom. The fact you would have to pay for data decryption should be mentioned in the ransom note. Such document could be added to the victim’s Desktop or directories containing encrypted data. However, even if you have no backup, we advise you not to put up with the cyber criminals’ demands. After paying the ransom, they might still ask the user for more money, and in the end, they may choose not to help you even if you carried out all of their requests. Therefore, instead of gambling with your savings, we recommend concentrating on the infection’s removal.

There are two main options the user can choose from to eliminate Random6 Ransomware. At first, users could try to erase it manually according to the instructions we provide below this text. They will show you how to locate and delete the infection’s launcher. The second option is to employ a reliable antimalware tool of your preference and start a full system scan. The best part is that the security tool could detect not just the ransomware, but also other threats, which may have accumulated on the system over time and by clicking the removal button you could get rid of them all at the same time.

Delete Random6 Ransomware

1. Press Ctrl+Alt+Delete.
2. Select Task Manager and choose Processes.
3. Check if there is a running process related to the malware.
4. Mark such a process and press End Task.
5. Leave the Task Manager.
6. Tap Win+E.
7. Check the listed directories:
   %TEMP%
   %USERPROFILE%\desktop
   %USERPROFILE%\downloads
8. Find the malware’s launcher; it might be a randomly titled file you downloaded recently.
9. Right-click the doubtful file and select Delete.
10. Exit File Explorer.
11. Empty your Recycle bin.
12. Reboot the PC.