How to Remove ‘Combo13’ Ransomware – Security Tips

Combo13 ransomware or Combo13 Wiper is the name of a malicious program from the ransomware family. Like Rootiunik, Kfuald, CHEATER, and other ransomware variants, this one operates as a file-encrypting virus. Computer users infected with Combo13 ransomware experience data encryption and receive ransom demands for the alleged decryption.

If you want to know how you can keep your system protected from such nasty ransomware infections, then this guide can help you. In this article, you will find all the information you need to know about this particular ransomware virus, how it gets on your PC, its harmful effects, and finally removal instructions.

What is Combo13 Ransomware?

This is a new malware strain detected in the wild. Like other ransomware viruses, it is designed to encrypt all types of files (such as images, audios, videos, documents, etc.) stored on the compromised host computer and then demand a ransom payment in the form of Bitcoin cryptocurrency for decrypting them.

How Does Combo13 Ransomware Work?

First, it infiltrates the security vulnerable systems, then it starts the encryption procedure using symmetrical block cipher algorithms (for example, AES-128).

During the encryption procedure, Combo13 renames the affected files by appending “.[xmmh@tutanota.com].combo13” extension at the end of their filenames. For instance, a file originally named “myphoto.jpg” would become “myphoto.jpg.[xmmh@tutanota.com].combo13” – following encryption.

Soon after the completion of this procedure, it creates a special note (FILES ENCRYPTED.txt) that contains a ransom-demanding message.

The message in the .txt file informs the victims’ that all of their files have been encrypted and decryption without using a unique key/tool is impossible. To initiate the recovery process, ransomware authors urge the victims’ to contact them via the provided email address.

How Does Combo13 Ransomware Infect Your Computer?

Cyber crooks use various techniques to deliver ransomware infections to the target computers. Below we have mentioned a few of the most common and popular ones. Let’s check them out.

Email attachments
Drive-by downloads
Malvertising campaigns
Free file hosting and pornographic websites
Third-party downloaders
Obsolete or unpatched programs

How to Remove Combo13 Ransomware ?

The best way to combat Combo13 ransomware and other malware infections is to use high-quality antivirus or anti-malware software. A good security program with real-time protection can help you protect your PC from attacks of deadly threats like ransomware, malware, viruses, spyware, trojans, and potentially unwanted applications (PUAs).

Adrian