Skip to content
  • Active
  • Severity: High
  • Ransomware
  • Windows
  • Verified · Nov 2016

How to remove Lomix ransomware virus

A step-by-step removal guide for affected devices. Follow the verified procedure below — most readers complete it in under 10 minutes.

Olivia Morelli · Ransomware analyst

The filthy Lomix ransomware virus – what can it do?

Lomix virus or Lomix ransomware is a name given to a nasty computer infection that is capable of encrypting all personal files with a military-grade encryption. Our researchers have noticed that it looks very similar to CryptoWire ransomware, which means that these viruses might have been created by the same developer; however, it is also possible that another malware creator used the code of CryptoWire, since this ransomware is an open-source virus. Lomix virus, just like its predecessor, uses AES encryption to render data useless but appears to be more greedy. While the initial version of this ransomware-type program asks for $200 in exchange for a decryption key, Lomix malware demands $500 (equals to 0.68096697 Bitcoins). The virus encrypts files and launches a program window that displays a number of encrypted files and lists directories that were scanned for target files. Below, the program provides several buttons – Buy Bitcoins, which redirects to a site that sells Bitcoins. Next to this button is Decrypt Files button and a box to enter the decryption key. The malicious program provides a short ransom note, which contains the following sentences:

YOUR FILES HAS BEEN SAFELY ENCRYPTED

The only way you can recover your files is to buy a decryption key from wambeng.watson@gail.com
The payment method is: Bitcoins. The price is: $500 = 0.68096697 Bitcoins
Click on the ‘Buy decryption key’ button.

It seems that the criminal has mistyped his/hers email address because most likely it meant to type in wambeng.watson@gmail.com email address. The criminal expects victims to write him/her and beg for a decryption key. Sadly, we haven’t received any information from victims who have paid the ransom, and currently, no one knows whether criminals provide the decryption key when the victim pays the ransom or not. Remember that scammers can just steal your money, leave encrypted data to you, and forget about you. Therefore, no matter how hard it is to split with your files, we encourage you not to pay the ransom. To remove Lomix ransomware from the system, perform a system scan using anti-malware software like FortectIntego. You might want to use a different tool; in such case, opt for SpyHunterCombo Cleaner. You can find full Lomix removal tutorial below the article.

Lomix ransomware wants $500

How do authors of this ransomware distribute it?

It is unlikely that this virus wants to infect your computer for a certain reason. Most likely authors of the malware have gathered hundreds of emails and now they send out malicious messages containing infectious attachments via email. Therefore, we suggest you stay away from questionable email attachments and Facebook message attachments because these can be filled with malware. To protect the PC from ransomware attacks, install a trustworthy anti-malware software and scan the computer with it. This helps to identify potentially unwanted programs and viruses that disturb you. We suggest using anti-malware software to clean malware from the system entirely. Please do not try to remove the virus on your own because you can accidentally harm the computer system.

Remove Lomix ransomware from your life

Remove Lomix virus as soon as it is possible. Keeping such malware example on the system is not recommended because it is NOT a secure program. It might download additional malware to the system, for instance, Trojans or other dangerous programs. To remove Lomix virus and all programs that came alongside it, use a program capable of increasing your PC’s safety and stability. You can find Lomix removal tutorial below – it explains how to boot your PC in a Safe Mode with networking, which actually is a time-consuming process.

4 comments

Spyware news
Privacy preferences

We use cookies to improve your experience and analyze traffic. Some cookies enable embedded content like videos and social posts. Choose what you allow — you can change this anytime.