RansomNoteCleaner

Without relying on the classic credit card fraud techniques, ransomware is of the newest and most ingenious ways for cyber-criminals to pull money from innocent victims by threatening to erase their harddrive's content if they do not pay a certain amount of money in a short period of time.

If you have been the victim of a ransomware attack then one of the few things that you can do afterward is to remove the ransom notes left behind since, more often than not, they contain valuable information such as victim's ID, various contact addresses, private BTC address and possibly much more.

Instead of manually searching for the ransom notes using the default Windows tools, you can give RansomNoteCleaner a quick spin.

The first thing that you should know is the fact that this utility is powered by the ID Ransomware service, a useful service that can help you detect more than one hundred different ransomware attack types by uploading either a ransom note or a sample encrypted file.

You can start using the app right away since it does not require installation. Just unzip the package and launch the utility using the designated executable file, preferably with full system privileges.

Upon first launch, the program retrieves the regularly updated definitions from the ID Ransomware website. From this point onwards, you can either select the ransomware type (in case you have already identified the culprit), or you can start a full-wide search.

Once the scan is completed, the app displays a total number of found ransom notes on your system or selected location. By clicking the "Clean!" button, you are prompted by a new pop-up window that enables you to select and confirm the deletion.

You should also know that a full list with all the deleted ransom notes is automatically saved to the "RansomNoteCleaner.log", in the app's directory.

RansomNoteCleaner is a handy app that offers a streamlined way to remove the annoying and potentially dangerous ransomware notes after an attack.

What is more, please note that this app does not decrypt any type of data.

Lastly, because the app is still in a relatively young development stage, it may not always work flawlessly so scanning only particular locations (such as the folder where the ransom notes are) instead of the whole system is probably a good idea.