Remove MedusaBtc Ransomware
MedusaBtc Ransomware is a low-quality file-locker. Judging by its name, its creators want to leave victims under the impression that they are dealing with a variant of the MedusaLocker Ransomware. Thankfully, this is not true – this threat has nothing to do with MedusaLocker. In fact, it seems to be based on a far less sinister file-encryption Trojan, the Xorist Ransomware. This might mean that the MedusaBtc Ransomware is decryptable via free utilities, and victims will be able to recover their data for free.
When the MedusaBtc Ransomware infects your system, it will mark the names of files it locks with the '.medusabtc' extension. Of course, it also drops a ransom message, which you will find under the name 'HOW TO DECRYPT FILES.txt.' The message of the criminals is in Portuguese, and an English translation is not available.
According to the attackers, victims need to pay a ransom fee via Bitcoin. The payment details are not available and, instead, the message advises victim to send a message to medusabtc@protonmail.com or btcpaynow@protonmail.com. We advise you not to try to co-operate with the operators of the MedusaBtc Ransomware. Not only are they not trustworthy, but you could also be able to restore your data without their help. If you are a victim of the MedusaBtc Ransomware, you need to run an antivirus scanner immediately. This will help ensure the full removal of the malware, and prevent it from causing more damage. Once you take care of this, you should use the free Xorist Decryptor to restore your files. If this does not work, then we suggest to try alternative means of data recovery – restoring from a backup, or using data recovery software.
