RansomNoteCleaner - Remove Ransom Notes Left Behind

Hello! This is an amazing tool and is very appreciated!

 

Would it be possible to add a cleaner for the Avaddon ransom notes?

 

Or one possible alternative solution, if I could "choose a note" and from there it would find any other matching notes. This would potentially help it work for many future notes.

Thanks for the feedback. I have not added a definition for Avaddon's ransom note filename to ID Ransomware (where RansomNoteCleaner pulls its definitions) because it would cause too many false positives with real programs (*-readme.html).

Your suggestion would be possible though, I'll think about it when I have some time to support this tool more.

 

Hello! This is an amazing tool and is very appreciated!

 

Would it be possible to add a cleaner for the Avaddon ransom notes?

 

Or one possible alternative solution, if I could "choose a note" and from there it would find any other matching notes. This would potentially help it work for many future notes.

 

Thanks for the feedback. I have not added a definition for Avaddon's ransom note filename to ID Ransomware (where RansomNoteCleaner pulls its definitions) because it would cause too many false positives with real programs (*-readme.html).

 

Your suggestion would be possible though, I'll think about it when I have some time to support this tool more.

 

Yes without knowing the starting part of the note filename, it is quite generic and I can see how that would be a problem. Thank you I really appreciate and applaud your efforts for this cause. The CryptoSearch tool has been extremely useful as well!

Hi All

I was attacked by ransomeware a few months ago and it encrypted all my files to .NEON, and left a not there in every folder. I tried  a lot on different forums but everyone told me that it is an encryption with an online key. so its not possible to decrypt without that key. Its been few months now. any possibility of any solution or any tool yet created for this? Please Help me if anyone can do that. I have my important data. 

I will be looking forward anxiously for someone to solve my problem.

Thanks & Regards