RansomNoteCleaner Download

BleepingComputer Review:

Ransom Note Cleaner is a program that can be used to scan a ransomware victim's computer for left over ransom notes and elete them. When someone is infected by ransomware they are commonly left with hundreds of ransom notes that they have to manually delete. Using RansomNoteCleaner, a ransomware victim can scan their computer for ransom notes and have them deleted automatically.

RansomNoteCleaner is powered by the ID Ransomware application and is always updated with the latest definitions for known ransomwares and their ransom notes. This also allows it to be flexible in detecting the ransom notes, as it uses the exact same data ID Ransomware uses for identifying variants.

How to Use:

When RansomNoteCleaner is first launched, it will contact the ID Ransomware web site and retrieve the latest information on known ransom notes. Other than this intitial update of its definitions, RansomNoteCleaner will not perform any other network connections and no information about your system is uploaded to their servers. If you have a network issue with reaching the website, you can use the Refresh Network button to try again.
 
To select the ransomware whose ransom notes you wish to scan for, you can click on the Select Ransomware(s) button and select the specific ransomware. This is recommended if you have already identified the ransomware, as otherwise it will take much less time to search for the notes.

Once the ransomware variant(s) have been confirmed, you can click on the Search for Ransom Notes button to select a directory (or whole drive), and start the search for known ransom notes.  If you wish to clean an entire drive, you should select a specific drive letter. 
 
Once the scan has completed, the View Ransom Notes button will be available. Clicking on this button will display a window containing all of the ransom notes detected by RansomNoteCleaner. It is highly recommend that you double-check this list before confirming the deletion. If you find that the program is attempting to remove a legitimate file, you can uncheck that. When ready to delete the ransom notes, click on the Confirm for Deletion button to remove the files.

When it has finished deleting the ransom notes, a log file will be created called RansomNoteCleaner.log in the same directory the program is run from. This log file will contain a list of all of the delete ransom notes.
 
Please note that this program does not decrypt data. It is simply a tool for removing the pesky ransom notes that are littered on the system after a ransomware attack.