How to remove Oct ransomware

Oct ransomware – a cryptovirus that not only encrypts personal data on targeted computers but steals some of it too

Oct ransomware is a cryptovirus designed to encrypt personal user data on a targeted computer and demand a ransom for the promised decryption tool. Unlike other file-locking parasites like Nobu or Weui, the culprit of this article steals some of the personal files for blackmailing purposes before locking them.

As soon as the virus accesses a computer system, it locates the most frequently used files and downloads them onto a secret hacker server. Only when this is done, the encryption process begins, which locks all personal (or business) files, such as documents, images, audio/video files, databases, archives, etc., by appending a .oct extension to all of them.

When encryption is completed, .oct file virus generates ransom notes, named READ_ME.txt, and spreads them all over the infected computer so that the victim could find it easily. The developers of this cryptovirus would like to be contacted only through a given email – octencrypt4444@gmail.com.

The whole ransom note (displayed below this paragraph) is written in poor English, it has many grammatical mistakes that in some cases make it hard to understand the message. Firstly, the hackers explain to their victims that all personal files have been encrypted, and a part of them was stolen but will be deleted after the ransom payment is completed.

The second part of the note consist of instruction. Victims should contact the developers of Oct ransomware virus by emailing them at octencrypt4444@gmail.com. The cybercriminals would explain the rest of the process after contact is made.

The last part is quite hard to understand, but one thing is clear – if the victims won't pay an unspecified amount of money (most likely in cryptocurrency Bitcoins) to the creators of Oct ransomware, they will expose all allegedly stolen information to the public.

As always we advise not to contact the criminals. There are cases^[1] where even after meeting the demands of the hackers, the victims didn't receive any decryption tools, or even worse – got scammed for even more money. Users should focus on Oct ransomware removal and overall system health. 

Although victims could try to remove Oct ransomware manually, we recommend leaving the dirty work to professional anti-malware software like SpyHunterCombo Cleaner or MalwarebytesMalwarebytes to do it automatically. A reliable anti-virus app is a must these days because the internet is crawling with different kinds of malware.^[2]

Computer viruses are known to make alterations in the system registry and other key settings, so experts^[3] suggest performing a full system scan with system tune-up tools like the FortectIntego to locate and restore any changes that the cryptovirus might have done.

Message in the READ_ME.txt ransom note state:

———-OCT_RANSOMWARE 1.2V———-

==========

Warning! Warning! Your documents, photos, and other important files have been encrypted by a powerful algorithm.
Your files are stored on our server, and we can delete and change these files at any time.
But if you want to restore your file, you have to pay us for the decryption.
Follow the instructions to recover your files!!!
==========
—————INSTRUCTIONS—————

1. send a e-mail to octencrypt4444@gmail.com .
2. leave any messages. If you leave message, I will reply.
3. If you send your encrypted files, I will made you give me a money.
4. If you pay money by me, I will decrypted your files and return your decrypted files.
5. But you don't pay money, I will delete all your files.
==========
——————-MY MESSAGE——————-
If you can't pay the money to me, I will decrypt your files for free!!!
But, you should pay money in a week!!!!!!
If you don't pay the money over two weeks, I will expose your privacy and delete all your files and data!!

==========

——————-DOWNLOAD TOR BROWSER——————-

hxxps://tor-browser.softonic.kr/

——————MY TOR BROWSER SITE——————

octencrypt-1359BASK-yllqf.onion

octencrypt-1322FSQS-nngae.onion

Increase the level of your cybersecurity with these simple steps

Since there are tens of thousands of different types of computer viruses lurking on the internet, everyday computer users should take some simple steps that might help them to improve their cybersecurity level, thus minimizing the chance of becoming victims of cyberattacks. Here are our guidelines to do that:

• All software must be up-to-date, most of all – your devices operating system and browser. Be sure to install all the latest updates (except beta versions) as soon as they are available.
• Run full system scans at least once a week with powerful anti-malware software. Update its virus database so the latest virus can be detected with ease.
• Always keep essential data backed up on at least two separate locations, e.g., cloud, USB drives, external storage drives, and so on.
• Acquire and use system repair tools to maintain system health at check.
• Refrain from using high-risk sites, like torrent pages. Never open any spam emails or the content on them.

Tutorial on how to remove Oct ransomware from affected devices

As we've stated before – dealing with criminals might only bring more harm to you and your computer. That's why we recommend getting rid of the cryptovirus as soon as it's detected or at the first sight of the ransom notes. Manual Oct ransomware removal is possible, but it could take a lot of time and be a hard nut to crack for inexperienced users. Perform a full system scan with reliable anti-malware software like SpyHunterCombo Cleaner or MalwarebytesMalwarebytes to do it automatically.

Malware tends to mess up the system registry and other core places, so a system tune-up is in order. System repair tools like the FortectIntego application can take care of that with a push of a button. If left unattended, these changes might cause devices to exhibit abnormal behavior, such as severe lag, crashing, and alike.