How to remove RansomMine ransomware

Authors of the RansomMine created malware for fun

RansomMine ransomware is a more a joke than a file-encrypting virus. The crypto-malware targets Korean computer users and encrypts files with AES cryptography. However, instead of demanding to pay the ransom, developers ask to play Minecraft for an hour in order to unlock files with .RansomMine file extension.

The malicious program spreads in RansomMine.exe file and might be delivered in the form of fake software update or download, malicious email attachment or using any other traditional ransomware distribution method.

Once inside, RansomMine virus might make several modifications to the system in order to run on system startup and start data encryption procedure. However, security experts claim that current variant of the virus is decryptable and there’s no need to follow hacker’s demands.

The RansomMine delivers a pop-up window, where it says in the Korean language that users can get back access to their files if they play Minecraft 1.11.2 for at least an hour. The translation of the ransom note:

Warning
Caution All external files are encrypted.
1. What is this?
Your videos, photos, documents, etc. have been encrypted. The program uses a powerful algorithm and cannot be recovered without this program.
2. How then do I?
It is very simple. You must have at least 1 hour play time for MineCraft. (Only version 1.11.2 should be used.) Then it will be decoded automatically.
And the key is fixed, but it does not mean that it can be recovered even if it is turned off like a hardware warship!
[Encrypted file lease]
– the other phase –
MineCraft does not run
—
'The program is only for jokes, and it is not responsible for any problems you have encountered using this other program.

Differently, than other crypto-viruses, this one is not used for swindling the money. Nevertheless, it is used just for fun; you should still remove RansomMine. Well, if you’re a Minecraft player, you can try to follow crooks’ instructions. But once your files are recovered, don’t forget to uninstall a malicious program.

RansomMine removal is performed with reputable malware elimination program. We recommend using FortectIntego, but you can choose your preferred program too. If you encountered some difficulties with ransomware elimination, look up for removal guide below the article.

Learn how to avoid file-encrypting viruses

Data encoding malware usually use different strategies to infiltrate computers. These methods usually include phishing emails,^[1] malvertising, bogus updates, illegal downloads, exploit kits, etc. Thus, you should not only protect your PC from viruses by installing antivirus software but also follow these security tips:^[2]

• Do not open spam emails and stay away from email attachments if you do not know the sender or the letter seems suspicious.
• Use only legitimate download websites for software downloads and updates.
  Install all available updates in order to prevent malware from exploiting security vulnerabilities in outdated software.
• Avoid visiting high-risk websites, such as gaming, gambling or adult-themed.

However, malware research team from Bedynet.ru^[3] notes that creating and updating data backups is also important in ransomware prevention. File-encrypting viruses might be aggressive and still find the way to your PC. Thus, backups will be crucial in this situation.

Termination of the RansomMine ransomware virus

Even though this example of malware is not the most powerful ransomware on the web, it still has to be eliminated correctly. It means, you have to employ FortectIntego, MalwarebytesMalwarebytes or another anti-malware software to remove RansomMine from the system.

If you cannot install, update or run security software, please follow the guide below. It will help to disable the virus and perform the automatic RansomMine removal. Please, do not try to eliminate malicious files manually because it may lead to irreparable damage to the system.