How to remove Rebus ransomware

Rebus ransomware – a new version of Scarab virus 

Rebus ransomware is a file-encrypting virus that belongs to a popular malware family called Scarab. Therefore, this cyber threat continues the job of its predecessor. However, this variant adds “[32_random_digits_and_letters].REBUS” file extension to the targeted files during the encryption procedure. Then, victims are asked to contact crooks and learn about data recovery possibilities. However, you should never do it!

After infiltration and encryption, Scarab-Rebus ransomware places text file “REBUS RECOVERY INFORMATION.TXT” to each listing folder on your computer. This is the ransom message with details about decryption, payment and contact information:

“YOUR FILES ARE ENCRYPTED! 

Your personal ID

Your documents, photos, databases, save games and other important data was encrypted. 
Data recovery the necessary decryption tool. To get the decryption tool, should send an email to:

rebushelp@airmail.cc or rebushelp@protonmail.com

If you dont get reply in 24 hours use jabber:

rebushelper@exploit.im 

Letter must include Your personal ID (see the beginning of this document).

In the proof we have decryption tool, you can send us 1 file for test decryption.
Next, you need to pay for the decryption tool. 
In response letter You will receive the address of Bitcoin wallet which you need to perform the transfer of funds.

As you can see, authors of Rebus virus use three contact email address for communication for victims that are willing to pay the ransom:

• rebushelp@airmail.cc
• rebushelp@protonmail.com
• rebushelper@exploit.im 

However, we do not recommend using any of them. Cybercriminals can disappear and ignore their victims. According to security specialists at Utanvirus.se^[1] you should not contact them in any way because they might blackmail into paying more money or threaten to delete or publish online encrypted personal files. 

We highly suggest you remove Rebus ransomware as soon as you can from your computer. This helps to avoid any bigger damage ransomware can make. Do not believe that virus developers are only ones that can decrypt your files. This might be not true, often the virus developer themselves can not decrypt your data. However, third-party tools might help to rescue at least some of lost data, but first, you need to get rid of this cyber threat.

Rebus ransomware removal is difficult because a virus may have installed other malicious components that negatively affect computer's performance and security. For this reason, you need to use professional security software to clean the device. FortectIntego can help you with this task. You can find detailed instructions at the end of this article.Be aware of the threats behind suspicious emails

Spam email^[2] attachments are often used in ransomware distribution. In some cases, these fraudulent emails are hard to recognize because crooks use names of well-known companies. However, there's still a chance to spot dangers in your inbox:

• if the email arrived in the spam folder, it should not be trusted. Legit company emails do not end up in this box;
• the letter is sent from never before seen address;
• attachments make no sense together with letter information;
• addresses seem legit, but you do not use any of the platforms or providers;
• the body of the letter is empty, but it includes an attachment only.

Delete spam emails immediately and do not open them. They might contain Trojan^[3] viruses or malware executable. As you can see only one tiny mistake can lead to the horrible consequence.

Get rid of Rebus ransomware with anti-malware software

Rebus ransomware removal is vital for your system’s future safety. You should use anti-malware tools for this job, and we can recommend to you FortectIntego, SpyHunterCombo Cleaner, and MalwarebytesMalwarebytes. Also, there is a step by step guide down below that helps to proceed with the elimination.

We do not recommend trying to eliminate malware-related components from the machine. It is a dangerous and difficult task. If you are not an IT specialist, you might damage the system even more. Thus, you need to remove Rebus ransomware using professional tools to avoid damage.