Severity scale:  
  (100/100)

Power Worm ransomware. How to remove? (Uninstall guide)

removal by Jake Doevan - - | Type: Ransomware
12

Ransomware is a powerful virus that is programmed to destroy the victim’s files on the infected computer. Ransomware viruses encrypt the files and ask for a ransom to provide the encryption key; sadly, in most cases cyber-criminals deceive computer users and do not provide the encryption key. We want to inform you about one more ransomware, which is called Power Worm and describe its specific characteristics for you.

How does Power Worm ransomware differ from other ransomware?

After a close investigation of Power Worm virus, our researchers have found out that this ransomware is tragically critical. Unlike other ransomware examples, Power Worm is believed not to have the decryption code, because the coder who has created this virus code has made a mistake. The program encrypts the files and then throws away the decryption key – therefore, it might be impossible to recover the encrypted files. This virus uses AES encryption method and locks photo, video and text files on the victim’s computer. Once the files are encrypted, Power Worm also places messages in each folder that contains encrypted files. Such messages can appear in a form of .png, .html or .txt files. The file should be named ”DECRYPT_INSTRUCTION.” It asks to pay the ransom to get your files back using the bitcoin payment system. DO NOT pay the ransom! You are not going to get your files back.

Unfortunately, if you get attacked by Power Worm virus, the only way to recover your data is to restore it from an external backup drive. Sadly, restoring Windows is not going to help either – this virus deletes your operating system’s Shadow Volume, so you cannot restore your computer. What you should do after you find out that this Power Worm virus has infected your computer, you should immediately delete the malicious program. You have to remove it to stop the encryption process – if the virus has not encrypted all the files yet, maybe you can save some. We recommend you to terminate Power Worm virus malware with Reimage software – it is a powerful anti-malware program.

Power Worm infection alert

Distribution methods of Power Worm virus:

You can get infected with Power Worm malware because of several reasons. There is a list of most common reasons that can cause Power Worm’s invasion:

  1. Do not open suspicious e-mails from unknown sources. Never! Especially do not download questionable attachments. This malware is spread concealed behind innocent names, for example, PAYMENT.TXT or AWARD.txt.
  2. Do not wander through infectious websites – computer security experts claim that cyber-criminals often aim to place download links on pornographic web pages. So you should not click on any ads or banners on such websites.
  3. Do not click on suspicious pop-up ads if you have noticed any. Also, if you have noticed that your browser’s homepage was replaced by a suspicious search engine, you should not use it, too. Such ads or search results generated by an unfamiliar search engine can lead you to unreliable third-party websites, which may also contain various computer threats to download for free.

How to remove this malicious virus from the infected computer?

If Power Worm infection has affected your computer, there is nothing much of what you can do. You have to stop its activities by deleting the malicious program because Power Worm virus can also install other malicious or potentially unwanted programs to your computer system and infect your machine even more. Most importantly, do not pay the ransom – you are not going to get your files back because of the badly created encryption code. You can only restore your files from external backups, so we recommend always to store important files on an external drive. To remove Power Worm ransomware, use either the manual removal instructions provided below or remove the virus with an anti-spyware program.

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use. By Downloading any provided Anti-spyware software to remove Power Worm ransomware you agree to our privacy policy and agreement of use.
do it now!
Download
Reimage (remover) Happiness
Guarantee
Download
Reimage (remover) Happiness
Guarantee
Compatible with Microsoft Windows Compatible with OS X
What to do if failed?
If you failed to remove infection using Reimage, submit a question to our support team and provide as much details as possible.
Reimage is recommended to uninstall Power Worm ransomware. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.
More information about this program can be found in Reimage review.
Press mentions on Reimage

Manual Power Worm virus Removal Guide:

Remove Power Worm using Safe Mode with Networking

  • Step 1: Reboot your computer to Safe Mode with Networking

    Windows 7 / Vista / XP
    1. Click Start Shutdown Restart OK.
    2. When your computer becomes active, start pressing F8 multiple times until you see the Advanced Boot Options window.
    3. Select Safe Mode with Networking from the list Select 'Safe Mode with Networking'

    Windows 10 / Windows 8
    1. Press the Power button at the Windows login screen. Now press and hold Shift, which is on your keyboard, and click Restart..
    2. Now select Troubleshoot Advanced options Startup Settings and finally press Restart.
    3. Once your computer becomes active, select Enable Safe Mode with Networking in Startup Settings window. Select 'Enable Safe Mode with Networking'
  • Step 2: Remove Power Worm

    Log in to your infected account and start the browser. Download Reimage or other legitimate anti-spyware program. Update it before a full system scan and remove malicious files that belong to your ransomware and complete Power Worm removal.

If your ransomware is blocking Safe Mode with Networking, try further method.

Remove Power Worm using System Restore

  • Step 1: Reboot your computer to Safe Mode with Command Prompt

    Windows 7 / Vista / XP
    1. Click Start Shutdown Restart OK.
    2. When your computer becomes active, start pressing F8 multiple times until you see the Advanced Boot Options window.
    3. Select Command Prompt from the list Select 'Safe Mode with Command Prompt'

    Windows 10 / Windows 8
    1. Press the Power button at the Windows login screen. Now press and hold Shift, which is on your keyboard, and click Restart..
    2. Now select Troubleshoot Advanced options Startup Settings and finally press Restart.
    3. Once your computer becomes active, select Enable Safe Mode with Command Prompt in Startup Settings window. Select 'Enable Safe Mode with Command Prompt'
  • Step 2: Restore your system files and settings
    1. Once the Command Prompt window shows up, enter cd restore and click Enter. Enter 'cd restore' without quotes and press 'Enter'
    2. Now type rstrui.exe and press Enter again.. Enter 'rstrui.exe' without quotes and press 'Enter'
    3. When a new window shows up, click Next and select your restore point that is prior the infiltration of Power Worm. After doing that, click Next. When 'System Restore' window shows up, select 'Next' Select your restore point and click 'Next'
    4. Now click Yes to start system restore. Click 'Yes' and start system restore
    Once you restore your system to a previous date, download and scan your computer with Reimage and make sure that Power Worm removal is performed successfully.

Finally, you should always think about the protection of crypto-ransomwares. In order to protect your computer from Power Worm and other ransomwares, use a reputable anti-spyware, such as Reimage, Plumbytes Anti-MalwareWebroot SecureAnywhere AntiVirus or Malwarebytes Anti Malware

About the author

Jake Doevan
Jake Doevan - Computer technology expert

If this free removal guide helped you and you are satisfied with our service, please consider making a donation to keep this service alive. Even a smallest amount will be appreciated.

Contact Jake Doevan
About the company Esolutions


  • William147

    This is really scary… I do not have a backup on an external drive, I think I will take care of this problem very soon. Just in case…

  • inna

    This virus has attacked me. It destroyed my files forever… I am not mad anymore because I cried so badly after i have found out that it is impossible to get my files back… Like, when the police is going to catch these frauds?? I cannot believe it… That such things are happening nowadays!

    • manila

      Yeah these cyber-criminals are insane nowadays. They do not respect anyone… Have you tried any of the suggested removal methods?

      • inna

        Yeah, I used Kaspersky decryption tools to decrypt the files. Luckily, I have got some back, but other ones still remained encrypted… So it does not help to entirely recover your files.. well, at least I have gotten SOME of them back.