iRansom encrypts files and appends the “.Locked” extension to the name of each encrypted file. For example, “sample.jpg” is renamed to “sample.jpg.Locked”. Following successful encryption, iRansom opens a pop-up window containing a ransom-demand message. iRansom Ransomware threatens your personal files, and, if you do not stop this infection in time, all of your documents, media files, photos, archives, and other valuable files could be encrypted. The threat uses the AES (Advanced Encryption Standard) encryption algorithm to lock up your files, and it can do that silently. It is most likely that you will not notice that your files were encrypted at all, until the ransom note pops up on the screen. If this screen has already popped up, there is nothing you can do to stop the encryption process because it is already complete.
To manually delete iRansom Ransomware
- Launch Task Manager by tapping keys Ctrl+Shift+Esc (or tap Ctrl+Alt+Delete and select Task Manager).
- Click the Processes tab and select the malicious process (it could be named iRansom.exe).
- Click the End Task/End Process button below and exit the utility.
- Right-click the malicious .exe file (file name and location are unknown) and select Delete.
- Launch RUN by tapping Win+R keys and enter regedit.exe into the dialog box.
- In Registry Editor move to HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run.
- Right-click the malicious value (it could be named iRansom) and select Delete.
- Install a good Anti Virus solution such as Max Total Security and scan your operating system to make sure your PC is now clean.
Keep spam emails away and scan with a good anti virus everyday. Back up your data daily and never pay ransom if stuck with the malware.