Tricks to Delete Random6 Ransomware & Recover Enciphered Files Just in 5 Minutes

Random6 Ransomware: Initial Inspection

A malware researcher – Marcelo Rivero has early discovered evidences against Random6 Ransomware which enciphers data using a custom cipher and renames file in a very unique pattern – "[random_characters].[6_character_ID]". Though, following successful encryption you may find your important files featuring 6-random characters as file extension. For example, 'BirthdayParty.mp4' will be transcoded as 'Mjfui789==.jHKJkl'. Hence, it will become nearly impossible to recognize your important files and regular files. Just right after encryption, Random6 Ransomware generates a text file named as 'RESTORE-[6_character_ID]-FILES.txt' and places it in each folder having enciphered files. The file contains ransom message featuring text – “Your files are Encrypted. For decryption send letter on email – [email protected] along with your Personal ID.”

However, there is no guarantee that the given decryption key will work for decoding your files and bringing all of them into original format with proper extension. Therefore, we oppose making payment of ransom to the threat actors. Instead paying them through Bitcoin account, you should purchase a Professional data recovery software to recover your files. Yet, there is no official announcement made stating that Random6 Ransomware deletes Shadow volume copies. So that, it is possible that data recovery software will work properly. Even, you can use 'System restore point' to restore your system back to that state when your files were safe and there was no presence of the Random6 virus.

Notable Things About Random6 Ransomware

• Evidently, the ransomware encodes your files and generates two highly secured (encrypted) keys – Private and Public. Public key (aka Personal ID) will be around 256-bit long, can be found inside ransom note file.
• Whereas, the private key (aka Decryption password) will be stored on a private server which won't be accessible to you. To get this key for data decryption, you will be forced to pay off ransom within 72 hours. Otherwise the key will be destroyed permanently from the server.
• Security experts suspect that Random6 Ransomware must be using either AES-256 or RSA-2048 cipher for encoding your files. Yet, AV vendors haven't released any free Decryptor against the ransomware.
• Instead appending any normal extension, Random6 virus changes file name and extension randomly.

Therefore, to safeguard your computer you must keep highly active security software installed and your current operating system up-to-date. You need to avoid using demo or trial version if you wish to get full protection against such ransomware. Usually, Random6 virus arrives via spam emails so that you must avoid double clicking attachment included in spam emails. At this time, Random6 Ransomware removal is a must before proceeding data recovery.

Free Scan your Windows PC to detect Random6 Ransomware

Free Scan your Windows PC to detect Random6 Ransomware

A: How To Remove Random6 Ransomware From Your PC

Step: 1 How to Reboot Windows in Safe Mode with Networking.

• Click on Restart button to restart your computer
• Press and hold down the F8 key during the restart process.

• From the boot menu, select Safe Mode with Networking using the arrow keys.

Step: 2 How to Kill Random6 Ransomware Related Process From Task Manager

• Press Ctrl+Alt+Del together on your keyboard

• It will Open Task manager on Windows
• Go to Process tab, find the Random6 Ransomware related Process.

• Now click on on End Process button to close that task.

Step: 3 Uninstall Random6 Ransomware From Windows Control Panel

• Visit the Start menu to open the Control Panel.

• Select Uninstall a Program option from Program category.

• Choose and remove all Random6 Ransomware related items from list.

B: How to Restore Random6 Ransomware Encrypted Files

Method: 1 By Using ShadowExplorer

After removing Random6 Ransomware from PC, it is important that users should restore encrypted files. Since, ransomware encrypts almost all the stored files except the shadow copies, one should attempt to restore original files and folders using shadow copies. This is where ShadowExplorer can prove to be handy.

Download ShadowExplorer Now

 

• Once downloaded, install ShadowExplorer in your PC
• Double Click to open it and now select C: drive from left panel

• In the date filed, users are recommended to select time frame of atleast a month ago
• Select and browse to the folder having encrypted data
• Right Click on the encrypted data and files
• Choose Export option and select a specific destination for restoring the original files

Method:2 Restore Windows PC to Default Factory Settings

Following the above mentioned steps will help in removing Random6 Ransomware from PC. However, if still infection persists, users are advised to restore their Windows PC to its Default Factory Settings.

System Restore in Windows XP

• Log on to Windows as Administrator.
• Click Start > All Programs > Accessories.

• Find System Tools and click System Restore

• Select Restore my computer to an earlier time and click Next.

• Choose a restore point when system was not infected and click Next.

System Restore Windows 7/Vista

• Go to Start menu and find Restore in the Search box.

 

• Now select the System Restore option from search results

• From the System Restore window, click the Next button.

• Now select a restore points when your PC was not infected.

• Click Next and follow the instructions.

System Restore Windows 8

• Go to the search box and type Control Panel

• Select Control Panel and open Recovery Option.

• Now Select Open System Restore option

• Find out any recent restore point when your PC was not infected.

• Click Next and follow the instructions.

System Restore Windows 10

• Right click the Start menu and select Control Panel.

• Open Control Panel and Find out the Recovery option.

• Select Recovery > Open System Restore > Next.

• Choose a restore point before infection Next > Finish.

Method:3 Using Data Recovery Software

Restore your files encrypted by Random6 Ransomware with help of Data Recovery Software

We understand how important is data for you. Incase the encrypted data cannot be restored using the above methods, users are advised to restore and recover original data using data recovery software.

Download Data Recovery Software