How to remove Lime ransomware

Lime ransomware will not let you use your files after the attack

Lime is a dangerous file-encrypting virus^[1] which encrypts your files (like images, videos, document files, etc.) and demands to pay $100 for their decryption. It is also known as BigEyes ransomware and LimeDecryptor ransomware.

When Lime ransomware enters the system, it downloads a bunch of related files and makes specific changes to the system in order to boot with system startup. After the cyber attack, users can find these files:

• Crypt.exe (or BigEyes.exe)
• # BackGround.png
• # Decryptor.exe

When the virus is executed, it runs data encryption procedure. Once it’s done, every single file is locked with .lime extension. For example, file.doc will appear as file.doc.lime. Due to the new suffix, corrupted data becomes entirely unusable.

Hackers who developed Lime malware want to make sure that you are aware of what happened to your computer. Therefore, two following alerts appear:

• Your desktop wallpaper is changed to the one created by hackers
• The program window called “#Lime Decryptor” pops up

The wallpaper states the following:

All your files have been encrypted. But you can still recover your files. Just send us 100$ Bitcoin, and we will give you your files back. After you pay us, send us email r3vo@protonmail.com. Include your transaction number. This is is Ransomware, it’s not a joke. Thanks. Bye

The LimeDecryptor states the precisely same message as wallpaper does. Additionally, it provides the timer and instructions for obtaining Bitcoin cryptocurrency. According to hackers, you have 30 days before your files get permanently locked.

As you can see, the ransom demanded is 100$ and is only accepted in Bitcoin cryptocurrency. However, there is no guarantee that you will get your files back, even after paying the ransom. We highly advise you not to engage with these cybercriminals as paying them will only encourage them to create more ransomware. Instead, you should remove Lime ransomware from your computer immediately. FortectIntego can assist you in achieving that.

Unfortunately, Lime ransomware removal won’t help to recover encrypted files. This crypto-virus uses a sophisticated encryption algorithm, and security experts haven’t cracked it yet. However, as of now, no official software is capable of restoring your encrypted data. Therefore, you can only restore your files from backups.^[2]

However, if you have never backed up your data, you can try alternative recovery methods that might at least help to recover some of the files encrypted by Lime malware. Though, you should not have high expectations to bring back all your records.

Ransomware uses an elementary distribution method

In most cases, users get ransomware infection after opening an attachment included in spam email. As soon as the user opens the infected file, the virus populates itself in their computer. Hence, you need to be extremely cautious when opening emails from unknown sources. Be exceptionally careful when the author of the email demands you to open the attached file viciously.

In fact, most webmail providers use tools to recognize and flag suspicious emails to protect the user. However, users still fall for the trick and get infected with the malicious threats like ransomware because developers use clever social engineering tactics and pretend to be from legitimate organizations or companies.

Cyber security specialists from tanpavirus.web.id^[3] also warn that downloading software from third-party websites (especially P2P networks) can lead to a virus infection. Additionally, websites of dubious content should be avoided at all cost (online gambling, pornographic and similar) as they can lead to ransomware infiltration.

Remove LimeDecryptor ransomware and try to recover your files without paying hackers

As stated above, it is not recommended contacting cybercriminals as you might not end up recovering your files at all. Instead, you should remove Lime virus from your machine. Only then you can proceed with file recovery.

The instructions below will explain how to disable the virus and run its automatic removal. For Lime ransomware removal we recommend using FortectIntego, SpyHunterCombo Cleaner or MalwarebytesMalwarebytes as this security software can guarantee full virus elimination.

Once the virus is gone for good, you can export your files from Cloud or plugin your external hard drive with data backups. If you do not have them, please try alternative recovery methods that might be helpful in recovery too.