How to remove Killnet ransomware

Killnet ransom note (in Russian):

Вы атакованы killnet_reservs


Донаты: @donate_killnet
Наш официальный @killnet_reservs
Поддержка @killnet_support
Основатель @killmilk_rus
Обменник t.me/killnetexchange
Резервный @killnet_mirror
Наш канал https://t.me/killnet_reservs
Слава России Братья!

This is the end of the note. Below you will find a guide explaining how to remove Killnet ransomware. It also contains a translated version of the note.

What is Killnet ransomware?

Killnet is a new ransomware program; as of now, it’s been active only for a few days. Just like any other ransomware program, it encrypts all files on the computers it managed to infect. Once infected, the files receive .killnet file extension. A file named “finances.xlsx”, for example, would be renamed to “finances.xlsx.killnet”.
Still, this ransomware is somewhat unusual. Ransomware programs always leave a ransom note of some kind – usually a text file – to communicate their demands. The ransom note Killnet leaves (named “Ru.txt”), however, is unusually short: it only lists contact information of the hackers and nothing else. If you compare this behavior to any other ransomware program, you will see that they usually try to be a bit more verbose. The note is also in Russian, even though it would have been trivial to translate, considering its length. The image above contains the original, and here’s the translated version: READ MORE

Scroll to top