How to remove Snatch Ransomware from your computer

Snatch Ransomware

Snatch ransomware is malware that infects a computer, encrypts personal files on the computer, and insists that a payment is made to decrypt the files it encrypted. Files encrypted by Snatch ransomware will be given a new file extension such as .cekisan. For example, if a file named test.jpg is encrypted, the file will become test.cekisan once it is encrypted. However, different variants of Snatch ransomware append different file extensions to the files they encrypt.

snatch ransom note

When Snatch ransomware spread onto a machine it infects it will drop a text file such as Readme_Restore_Files.txt through the machine and on Windows desktop. The text file dropped by the computer virus acts as a ransom note by explaining what happened to the infected computer. The text file also warns about trying to rename ciphered files and trying to decrypt your data and provides a way to contact the malware author or distributor to make a ransom payment.

Attention!
Do not rename the ciphered files.
Do not try to decrypt your data with the help of the third-party software, it can cause constant data loss.
If you, your programmers or your friends help you to decrypt your files – it can lead to data loss.
You do not joke with files.

My email A654763764@qq.com

Although the ransom note suggests that you contact the malware author or distributor, we strongly suggest that you do not. Also, paying the ransom does not ensure you that the malware is removed from your machine and that it will not return in the future. There may be ways to recover your files without paying an unnecessary ransom to have your files decrypted by those who encrypted them in the first place.

Ransomware such Snatch is typically distributed by spam email message campaigns and websites that host malware or display malicious advertisements.

Step 1: Scan your computer with Malwarebytes

1. Download Malwarebytes Anti-Malware software to scan your computer and remove malicious files and potentially unwanted programs.

2. To install the program, locate and double-click the executable file you just downloaded. The file can usually be found in the Download folder.

install malwarebytes

3. Choose if this is for home or work use and click Agree and Install to begin installing Malwarebytes. Once the installation is complete, click Finish.

scan now

4. Once Malwarebytes is installed, open the program and click the Scan Now button on the dashboard – or go to the Scan tab and click the Start Scan button.

quarantine selected

5. When the scan is complete click the Quarantine Selected button.

6. If Malwarebytes says “All selected items have been removed successfully. A log file has been saved to the logs folder. Your computer needs to be restarted to complete the removal process. Would you like to restart now?” click the Yes button to restart your computer.

Step 2: Scan your computer with HitmanPro

1. Download HitmanPro to perform a second-opinion scan and remove any remaining malicious trace files. A second-opinion scan is important when removing malware and malicious files from your computer.

2. To install the program, locate and double-click the executable file you just downloaded. The file can usually be found in the Download folder.

3. Once HitmanPro is installed, open the program and click Next to start scanning your computer. *If you are using the free version you may choose to create a copy or perform a one-time scan.

4. When the HitmanPro scan is complete, click the Next button.

5. To activate the free version of HitmanPro: enter your email address twice and click the Activate button.

6. Click the Reboot button.

Step 3: Secure your computer

Consider these best practices to ensure that your computer is secure from cyber threats like this in the future.

Use Antivirus with real-time protection

Using an Antivirus program with real-time protection can stop emerging threats and hackers from gaining access to your computer or mobile device. Antivirus programs can remove malicious files that are already on your computer, prevent your programs from being used against you, protect you from malicious websites, and stop known and unknown ransomware attacks.

Recommendations:

Use a VPN

Using a VPN creates a private tunnel to keep the eyes of eavesdroppers and hackers away from your private data while you browse the web. With a VPN, you become anonymous and no one can determine who you are. Your data is encrypted and your web activity cannot be tracked.

Recommendations:

Sean Doyle

Sean Doyle is an engineer from Los Angeles, California. Sean's primary focuses include Cyber Security, Web Spam, and Online Marketing.