How to remove Malabu ransomware virus

Malabu ransomware demands a ransom to set your files free

Malabu virus is a ransomware-type malicious program that encrypts files^[1] on a computer system. The ransomware corrupts them with AES cipher^[2] and appends .fucked file extensions to their filenames. The virus also has a screenlocker function, which prevents the user from accessing the computer system. The main file of this ransomware is called MALABU-X.exe, and it launches a full- screen message that informs the victim about the attack and says that the computer was hacked. Criminals state that they want $500 from the victim within two days otherwise the price will double. The criminals command the victim to purchase Bitcoins^[3] worth that sum of money in US dollars and send them to a provided Bitcoin wallet. After doing this, the victim has to take a screenshot or a photo of the transaction confirmation page and send it to criminals to steverussel@mail.com. The criminals promise to send the user the decryption key afterward. However, research shows that even 20% of ransomware victims who decide to pay up do not receive the decryption keys or tools from cybercriminals^[4]. Another reason not to pay is that these is a decrypter available, and you can use it for free. However, you should firstly remove Malabu ransomware from the computer using powerful ransomware and malware removal software such as FortectIntego. 

Ransomware viruses usually are highly sophisticated programs, and their developers tend to do their best to ensure that the victim won’t get a chance to restore encrypted files for free. They do this because they want victims to pay up, and to push them to do so faster, they promise to destroy the key after a certain period of time. Again, this is done only in order to rush the victim, because the first several days after releasing the virus are the most profitable since there isn’t much information about it on the Internet and scammers’ email addresses and other means of communications function properly before they get blocked. This particular malware was analyzed rapidly and a researcher Michael Gillespie already provided a decrypter for it. You should try using this tool after completing Malabu removal successfully.

How did I infect my computer with ransomware?

Ransomware viruses are mostly distributed via malvertising^[5], exploit kits and a good old technique that is known as spam. The last method we mentioned is used for delivery of all kinds of malware. You can catch the computer virus if you tend to open shady emails without knowing the sender of them. It is also advisable to check the email address of the sender or just simply hover your mouse above hyperlinks added to the message because then you can see the link it leads to in the lower bottom corner of the browser window. If the link looks suspicious, do not click it, otherwise, you might get redirected to a phishing or a malware-hosting website. Also, stay away from email attachments called invoices, subpoenas, resumes, and so on. Scammers tend to hide malicious codes in either Word or .JS files to deceive them the victim and trick him into opening the file without realizing what lies within it.

How can I remove Malabu virus and decrypt my files for free?

You can remove Malabu virus using FortectIntego anti-malware software, and then decrypt files using a free decrypter created by Michael Gillespie. You can find its download link below the article in data recovery section. Please, do not waste your time trying to remove the virus on your own – you can do more harm than good by leaving some malicious components on the system. Malabu removal must be done professionally and an automatic malware removal software is exactly what you need in order to complete the task.