How to remove Excuses ransomware

Excuses ransomware — crypto-virus that demands money in exchange for a special key used to decrypt data

Excuses ransomware is a virus capable of encrypting files and additionally asking a certain amount of money for their decryption. However, it's not a brand new cyber threat. It's one of the versions of KRIPTOVOR virus. Immediately after this virus encrypts target files, victim's data becomes useless. Affected files can be found by looking at their extensions – “.excuses” extension added to each of the filename means that you won't be capable of using it. These files can be anything from images, photos and videos to text files and archives. As typical ransomware, after compromising data, virus drops a ransom note on every existing folder in the computer. Text file “MESSAGE.txt” contains information about the demanded ransom and files' condition. Also, in includes details on how to contact hackers hiding behind this malware.

The entire ransom message is written in Russian, and we can only assume the primary target of Excuses ransomware virus is Russia. There is no information about ransom amount or encryption method. But usually, ransomware developers ask between $500 and $1500.

Virus developers want you to contact them via excuses@protonmail.com email, but we can assure you that is not a good idea. Contacting and paying the ransom can lead to no positive results and your money or data may be lost. You should remove Excuses ransomware if you want to be sure that your information is not misused. These criminals can infiltrate your system and do more changes to your Windows registry key or other PC settings.

Often virus developers offer to decrypt one or two test files before paying the ransom, but it is unknown if these people even have that decryption tool. Most of the times after the payment is done criminals ignore their victims and disappear with their money and your files.

Although, your files can not be decrypted using tools we do not recommend to focus on that. It is better to get rid of Excuses ransomware^[1] and other viruses from your system and only then think about file restoring. You need to be sure that your system is spotless before you plug in an external drive. File backups are the only option when it comes to data recovery after ransomware attack.

Excuses ransomware removal is better to be done as soon as you notice the changes in your system. It is recommended that you do the elimination using professional anti-malware tools. We can suggest FortectIntego, but you can choose any other trustworthy program. 

Legitimate-looking letters might contain infections

Usually, spam^[2] emails look legitimate and contain safe-looking attachments like Microsoft Word files. Although these files often have malicious macros that install malware on the system immediately and without your knowledge. It is essential to consider these received emails as a possible threat.

Dieviren.de^[3] specialists highly recommend you to keep away from this box and do not open those emails and especially attachments. That clickable content is dangerous. Advertisements can contain other viruses that open access to ransomware and other malware. This is risky as well as getting your software from suspicious providers. You can never know what are you installing if you skip through important installation steps.

Excuses ransomware elimination is vital for the security of your system

To remove Excuses ransomware we recommend using certified and trustworthy anti-malware tools like FortectIntego, SpyHunterCombo Cleaner and MalwarebytesMalwarebytes. This is vital if you want to get rid of all ransomware relating content and avoid any repetition in the future. Ransomware comes with other files and programs, so you could not find those additional pieces manually.

These tools help you to do Excuses ransomware removal correctly and eliminate all possible threats. By doing so, you can be sure that file recovery, later on, will be successful. If not appropriately cleaned your system might still contain ransomware traces and the second you plug in that external drive, virus encrypts files in it. This means you lost all of your essential data. There is a guide below that can be helpful in all of these steps of ransomware removal and file recovery.