Imsorry Ransomware Removal Guide

Imsorry Ransomware is the name of a new computer infection that was first spotted in May of 2017. If you get this ransomware on your PC, you have to remove it because it will most likely encrypt your files immediately. It uses an advanced AES encryption algorithm to encrypt your files, and there is no free decryption tool as of this article. The creator of this ransomware wants you to pay 500 dollars in Bitcoins for the decryption key. However, there is no guarantee that you will get the key.

If Imsorry Ransomware infects your computer, then it will encrypt your files with a unique AES algorithm. The ransomware generates a public encryption, and private decryption keys and the decryption key is sent to this ransomware’s server. Therefore, you cannot get the decryption key without paying the ransom. Testing has shown that this ransomware can encrypt many file formats that include but are not limited to .doc, .docx, .pdf, .txt, .jpeg, .mp3, and .rar. This ransomware appends the encrypted files with an “.imsorry” extension. However, it does not change the original file name. Once it has completed the encryption, Imsorry Ransomware drops a text file named "Read me for help thanks.txt."

This ransom note contains information on how to purchase Bitcoins to pay the ransom the BTC address to which you have to send the ransom is included in the User Interface window. The developer will ask you to pay 500 USD which is an approximate 0.167 BTC. Furthermore, there is a payment deadline of three weeks. If you do not pay within the given time frame, then the developer says that he will delete the decryption key. Whether this is actually the case is unknown, but it is likely that the developer will carry out his promise.

While there is currently no reliable information about the distribution methods of Imsorry Ransomware, we speculate that its developer must have set up an email server that sends it to potential victims. The emails are likely to contain this ransomware’s main executable as an attached file, but the ransomware will most likely be disguised as an invoice, receipt or something similar. Apart from being sent in malicious emails, this ransomware can also be distributed via various malicious downloads. We believe that this ransomware can be featured in malicious software bundles or included in software or game cracks and keygens. The pirated software can be distributed on websites or torrent sites. Therefore, be sure to have an anti-malware program to protect your PC in real time all of the time.

In closing, Imsorry Ransomware is just a drop in the ocean as there is a sea of ransomware-type infections waiting to come aboard your PC and encrypt your files. It features an advanced encryption algorithm that can encrypt your files which then cannot be decrypted without the corresponding decryption key. However, there is no guarantee that you will receive the decryption key as the developer might not keep his word. Therefore, you should not comply with the demands to pay and remove this ransomware from your PC. You can either delete it manually or get an antimalware program such as SpyHunter to get rid of it for you.

Removal Guide

1. Simultaneously hold down Windows+E keys.
2. Type the following file paths in the File Explorer’s address box and hit Enter.
   • %TEMP%
   • %USERPROFILE\Downloads
   • %USERPROFILE\Desktop
3. Identify the ransomware, right-click it and click Delete.
4. Empty the Recycle Bin.