Brief Introduction of Gomasom Ransomware
Gomasom is a kind of new ransomware that being active for the past few weeks. Gomasom gets its name from GOogle MAil ranSOM and typically operates by infecting users. This ransomware is especially destructive since it can not only encrypt data files but can also encrypt executables. In this case, most of victims' applications will no longer operate. This trait may it different from other ransomware.
Once infected, Gomasom will encrypt your files and even executables. And it change the names of the files to [filename].jpg!__gmail.com_.crypt. And it does not leave a ransom note/message. In this way, when the victims want to receive payment instruction, they will be supported to send an email to the address listed in the file name. However, you should not attempt to trust it. there’s no guarantee that this provided email address is true. It is possible that even you pay the ransom, you still can’t decrypt your files. You are highly suggested to remove this Gomasom ransomware as soon as you can.
It is currently unknown how this Gomasom ransomware is being spread. However, it is necessary to prevent it from your daily online activities:
- Avoid opening spam emails, and clicking ads and links you do not know the source.
- Keep away from corrupted or intrusive websites like pornographic websites.
- Regularly update security system to break away from all possible security vulnerabilities.
- Download any software from official websites rather than hacked or compromised websites.
How to remove Gomasom Ransomware effectively?
Plan A: Get rid of Gomasom Ransomware manually
Plan B: Get rid of Gomasom Ransomware automatically with SpyHunter
Plan B: Get rid of Gomasom Ransomware automatically with SpyHunter
Plan A: Get rid of Gomasom Ransomware manually
1. Reboot your computer and log into Safe Mode with Networking.
Reboot your computer. As the computer is booting but before Windows launches, tap the "F8 key" continuously which should bring up the "Windows Advanced Options Menu" as shown below. Use your arrow keys to highlight "Safe Mode with Networking" option and press Enter key.
2. Show hidden files.
a) open Control Panel from Start menu and search for Folder Options;
b) under View tab to tick Show hidden files and folders and non-tick Hide protected operating system files (Recommended) and then click OK;
c) click on the “Start” menu and then click on the “Search programs and files” box, Search for and delete these files created by Gomasom Ransomware:
%AllUsersProfile%\Application Data\
%AllUsersProfile%\Application Data\.exe
%UserProfile%\Start Menu\Programs\ Gomasom Ransomware \
Software\Microsoft\Windows\CurrentVersion\Run “.exe”
3. Go to the Registry Editor to delete all entries related to Gomasom Ransomware.
Hold down the Windows key on your keyboard and press the "R" button. Type in "regedit" and hit "Enter" to gain access to the Registry Editor.
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{B6AC5E3C-5CEB-4E72-B451-F0E1BA983C14}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{94366E2C-9923-431C-B0D6-747447DD0F2B}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{B6AC5E3C-5CEB-4E72-B451-F0E1BA983C14}
HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{B9C7CE32-DA91-43C2-B7E9-0E9AAFC675CD}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system “DisableTaskMgr” = ’1′
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “CheckExeSignatures” = ‘no’
Note: If you feel the manual steps is little complicated to follow, there is a quick and effective way that you can follow: Download SpyHunter Removal Tool to get rid of this kind of computer infection automatically.
Plan B: Get rid of Gomasom Ransomware automatically with SpyHunter
What can SpyHunter do for you?
1) Click here or the icon below to download SpyHunter automatically.
Step B. Run SpyHunter to block it
Run SpyHunter and click "Malware Scan" button to scan your computer, after detect this unwanted program, clean up relevant files and entries completely.
What can RegCure Pro do for you?
2. Double-click on the RegCure Pro program to open it, and then follow the instructions to install it.
3. After installation, RegCure Pro will begin to automatically scan your computer.
Warm tip:
After using these methods, your computer should be free of Gomasom Ransomware. If you do not have much experience to remove it manually, it is suggested that you should download the most popular antivirus program SpyHunter to help you quickly and automatically remove all possible infections from your computer.
- Give your PC intuitive real-time protection..
- Detect, remove and block spyware, rootkits, adware, keyloggers, cookies, trojans, worms and other types of malware.
- Spyware HelpDesk generates free custom malware fixes specific to your PC.
- Allow you to restore backed up objects.
1) Click here or the icon below to download SpyHunter automatically.
Step B. Run SpyHunter to block it
Run SpyHunter and click "Malware Scan" button to scan your computer, after detect this unwanted program, clean up relevant files and entries completely.
Optional solution: use RegCure Pro to optimize your PC.
What can RegCure Pro do for you?
- Fix system errors.
- Remove malware.
- Improve startup.
- Defrag memory.
- Clean up your PC
2. Double-click on the RegCure Pro program to open it, and then follow the instructions to install it.
3. After installation, RegCure Pro will begin to automatically scan your computer.
Warm tip:
After using these methods, your computer should be free of Gomasom Ransomware. If you do not have much experience to remove it manually, it is suggested that you should download the most popular antivirus program SpyHunter to help you quickly and automatically remove all possible infections from your computer.