Omfl Ransomware Removal Guide

If you’ve recently received an email from an unknown party, and you’ve opened the file attached to it, and then suddenly all your files are locked, congratulations, you’ve been infected with ransomware. It’s probably the Omfl Ransomware infection, too. It is one of the latest additions to the ever-growing STOP Ransomware family, and you can remove this program just like all the others that came before it. There is also a way to restore at least some of your files, but please be aware that some of your data might be lost for good.

Omfl Ransomware will enter target systems through an installer file that users open themselves. As mentioned, it could arrive as a spam email attachment, although it is also possible for this infection to reach you through socially engineering messages. Either way, users install ransomware themselves, as they get tricked into opening malicious files thinking those must be important documents. Hence, whenever you open a file from an unknown sender, you have to double-check whether the file is legitimate. For that, use a reliable security application to scan the file before opening it.

However, if you have launched the infection already, you must have noticed that most of your files have changed their icons. That’s becomes Omfl Ransomware launched the encryption, and the information sequences within the files have been scrambled. As a result, the system can no longer read your files, and all the icons look like blank pages. If that weren’t enough of a proof, check out the filenames. There should be the OMFL extension at the end. That’s like a stamp that says Omfl Ransomware has tampered with your files, and now you have to do something about it.

Like most of the other ransomware infections, Omfl Ransomware drops a ransom note, too. The ransom note is dropped in the TXT format file that you can find in the main C:\ directory under the _readme.txt filename. All programs from this infection family tend to share the same ransom note message, and Omfl Ransomware is no exception. Here’s what it has to say:

ATTENTION!

Don’t worry, you can return all your files!
All your files like pictures, databases, documents and other important are encrypted with strongest encryption and unique key.
The only method of recovering files is to purchase decrypt tool and unique key for you.
This software will decrypt all your encrypted files.
<…>
Price of private key and decrypt software is $980.
Discount 50% available if you contact us first 72 hours, that’s price for you is $490.
Please note that you’ll never restore your data without payment.

Now the final statement isn’t necessarily true. If you have a file back-up at the ready, you can just remove Omfl Ransomware along with all the encrypted files and restore your data from the backup. Also, there’s a public decryption tool that might work on some of the files affected by this infection. The decryption tool that was developed for the STOP Ransomware works on other infections from the group provided they have used an offline encryption key to lock up the target files.

And as for the ransomware removal, you can follow the manual removal instructions right at the bottom of this entry to terminate Omfl Ransomware once and for all. Usually, it is not that complicated to remove ransomware on your own. However, if you don’t feel confident about it, you can easily employ a licensed security application to delete Omfl Ransomware for you automatically. Should there be more unwanted or malicious files on-board, the automated security tool would remove them for you as well.

How to Delete Omfl Ransomware

1. Remove recent files from Desktop.
2. Go to the Downloads folder.
3. Delete recent files from the folder.
4. Press Win+R and type %TEMP%. Click OK.
5. Delete recent files from the directory and press Win+R.
6. Type %LOCALAPPDATA% and click OK.
7. Remove a recent folder with a long and random name.
8. Use SpyHunter to scan your computer.