Reig Ransomware

The Reig Ransomware is a file-encryption Trojan designed to cause damage to your files and then offer to fix them in exchange for money. The criminals behind this project have based it on the source code of the STOP Ransomware project and, unfortunately, this means that the Reig Ransomware has the ability to cause irreversible damage to your data. The only way to decrypt files damaged by this threat is to run a compatible decryptor paired with the unique decryption key that was generated when your computer got infected. Unfortunately, this piece of information is stored on the servers of the criminals behind the attack, and they will not give it out for free.

The Reig Ransomware uses the '.reig' extension to change the names of locked files, and it drops the ransom note document '_readme.txt' on the desktop. According to the message of the attackers, victims need to buy $490 worth of Bitcoin and then send it to the criminals. After the payment is complete, they can contact helpteam@mail.ch or helpmanager@airmail.cc to request the decryption tool and key. However, there is no way to be sure that Reig Ransomware's authors do not plan to trick you out of your money if you pay – if this happens, it would be impossible to get your money back.

Recovering from a ransomware attack can be very difficult, but co-operating with the attackers is never a good idea. If the Reig Ransomware has taken over your system, we suggest that you use an anti-virus scanner to eliminate it as soon as possible. Once the threat has been disposed of, you can proceed to experiment with popular data recovery software and methods.