How to remove GenoCheats ransomware

HiddenTear has a new variant called GenoCheats ransomware

GenoCheats virus is based on the open-source HiddenTear project. It uses sophisticated AES algorithms for data encryption and demands $10 as a ransom^[1]. The victims are encouraged to contact the criminals via Genobot01@gmail.com to recover files with .encrypted extension.

There is information that GenoCheats spreads as a fake cracking software for Adobe Photoshop and Minecraft. Once it reaches the system, the victim is provided with READ_IT.txt file which is considered to be the ransom note:

!!! Your PC has been Locked !!!
To decrypt your files
Send 10$ BTC to
3Fr6KwRoWFNjGdqV6GjBKKytsgimgdxf7Q
and email me the transaction ID + your computer name 
Genobot01@gmail.com

Since GenoCheats ransomware uses military-grade encryption technique, it is almost impossible to decrypt the corrupted data. Likewise, $10 ransom might look like an excellent solution for many inexperienced computer users. However, criminals like to increase the amount of the payment rapidly once the victim agrees to pay.

Thus, we do not recommend paying the ransom. There are other ways how you can deal with this malicious program without risking to encounter financial losses. If you have backups, do not hesitate and remove GenoCheats right away. Later, you will be able to recover your data using file copies. 

Additionally, you can perform GenoCheats removal and try alternative recovery methods if you do not store backups. For that, use FortectIntego and make sure to check the list of techniques how to get back the access to your data. 

Ransomware spotted spreading as fake Adobe Photoshop and Minecraft crack

As most of the ransomware-type viruses, this one is distributed using a deceptive technique as well — it disguises as a cracking software for a widely used photo editing program and popular game. Usually, people can download them from peer-to-peer (P2P) networks where most of the illegal content is shared^[2]. 

Note that it might be hard to determine whether the file you attempt to download is malicious or not. Therefore, we suggest you stay away from P2P networks entirely and download software only from official developers. This way, you will avoid being tricked to infiltrate ransomware manually.

Additionally, according to Dieviren.de^[3] experts, ransomware could spread directly attached to spam emails. They are also designed to look like coming from famous companies. Thus, it is crucial to be careful when browsing the Internet and avoid clicking and opening suspicious content.

GenoCheats virus termination

Since GenoCheats removal cannot be completed manually, you can only get a professional anti-malware tool or an IT specialist to do it for you. We believe that an automatic elimination with the security software is far more convenient and suggest you using FortectIntego, SpyHunterCombo Cleaner or MalwarebytesMalwarebytes.

Note that to remove GenoCheats virus you will need to reboot your computer into Safe Mode. If you are not aware how to do that, follow the instructions below. Also, they will provide you a list of alternative recovery methods you can use after completing the elimination.