R3store Ransomware

After the Crying Ransomware, it's time to take a look at the second HiddenTear variants malware researchers came across in June. The name of this one is the R3store Ransomware because of the extension it appends to locked files - '.r3store.' Just like other HiddenTear variants, the R3store Ransomware also claims to be an undecryptable threat and assures users that the only way for them to get their data is to pay for the help of the attackers. The cyber crooks behind the R3store Ransomware demand $450 to be paid via Bitcoins, and they promise users that their data will be back to normal as soon as the BTC transaction is confirmed.

The R3store Ransomware uses two types of ransom notes to deliver its message to users – a text file called 'READ_IT.txt' is dropped on the user's desktop, and a program window titled 'Restore,' which also features the Microsoft Windows 10 logo. Both messages are identical, and they tell users that their documents, music, and photos have been encrypted and they need to send $450 in BTC to the wallet address included in the message. Thankfully, none of this would be required for victims to get their files back, because malware researchers have developed a free HiddenTear decryption utility, which is meant to help the victims of the R3store Ransomware, the Kee Ransomware, and similar threats.

'Your Files are encrypted. (Pictures,Docs,Music etc..) Please do not close this window as that will result in serious computer damage. If you wish to use your computer ever again and unlock your files, Please send $450 Dollars in bitcoins to the address at the bottem of the page.
F1tAaz5x1HUXrCNLbtMDqcw6o5GNn4xqX'

However, before running any decryption tools, users must first make sure that the R3store Ransomware will not cause any more damage to their files. As you might have already guessed, the only way to ensure this is to remove all corrupted files from the computer. This task must be carried out with the use of an up-to-date anti-malware scanner, which can take care of the R3store Ransomware's full removal. When this is done, victims can search for a free HiddenTear decryptor and use it to acquire their decryption key and get their data back.