What is Leen Ransomware?
Leen is a new crypto-virus from the creators of notorious Scarab Ransomware. Leen Ransomware infects users’ personal files making them unavailable via AES-256 cipher. It is easy to recognize by “.leen” extension which is added to each encrypted file. For example, file “myfamily.jpg” will turn into “myfamily.leen”. After this, it places a ransom note (‘INSTRUCTIONS FOR RESTORING FILES.TXT’) on the desktop where a user will find pay instructions to decrypt encrypted files.
The text presented in the ‘INSTRUCTIONS FOR RESTORING FILES.TXT’:
Your files are now encrypted!
Your personal identifier: -
All your files have been encrypted due to a security problem with your PC.
Now you should send us email with your personal identifier.
This email will be as confirmation you are ready to pay for decryption key.
You have to pay for decryption in Bitcoins. The price depends on how fast you write to us.
After payment we will send you the decryption tool that will decrypt all your files.
Contact us using this email address: mr.leen@protonmail.com
Free decryption as guarantee!
Before paying you can send us up to 3 files for free decryption.
The total size of files must be less than 10Mb (non archived), and files should not contain
valuable information (databases, backups, large excel sheets, etc.).
How to obtain Bitcoins?
* The easiest way to buy bitcoins is LocalBitcoins site. You have to register, click
'Buy bitcoins', and select the seller by payment method and price:
hxxps://localbitcoins.com/buy_bitcoins
* Also you can find other places to buy Bitcoins and beginners guide here:
hxxp://www.coindesk.com/information/how-can-i-buy-bitcoins
Attention!
* Do not rename encrypted files.
* Do not try to decrypt your data using third party software, it may cause permanent data loss.
* Decryption of your files with the help of third parties may cause increased price
(they add their fee to our) or you can become a victim of a scam.
Despite their assurances, we urge you to not contact them as it’s fraught with money loss. Bear in mind, you’re dealing with scammers which sole purpose is to get you money rather than help you. The thing is that malefactors often disappear once money is transferred. But, don’t despair, the virus doesn’t delete your files which means you have a good chance to get them back. Before deciphering, you should first stay focused on removing Leen Ransomware in order to avoid the re-infection and spread of infection. After this, you can proceed with decryption. Both automatic and manual solution is presented here that we hope will help you remove Leen Ransomware and recover your files.
How Leen ransomware gets on your PC?
This type of virus can be infiltrated through several methods, including a freeware software, spam messages, trojans, software from dangerous sources, etc. A process of installation can start hidden and automatically. Besides that, some malware programs can mark Leen Ransomware as a trusted software program.
How to remove Leen ransomware?
To make sure that the ransomware won’t reappear, you need to delete Leen ransomware completely. For this, you need to remove the files and registry entries of the ransomware. We should warn you that performing some of the steps may require above-average skills, so if you don’t feel experienced enough, you may apply to the automatic removal tool.
Performing an antimalware scan with Norton would automatically search out and delete all elements related to Leen ransomware. It is not only the easiest way to eliminate Leen ransomware but also the safest and the most assuring one.
How to decrypt .leen files
Restore files with an automatic tool
Data Recovery Pro is “must-have” tool in the fight against ransomware-type viruses that would help you recover files.
- Download Stellar Data Recovery and launch it
- Select the drive you want to recover and click START SCAN
- After scanning is finished, you are presented with a list of recoverable files found.
- Select the required files and click the Recover
Nevertheless, if you failed to decrypt .leen files, you may try applying to the manual methods described below. But still, there are no undecryptable files and any problem can be solved. Therefore, please, feel free to contact us via submit@securitystronghold.com if the suggested ways didn’t work.
Restore the system
- Initiate the search for system restore
- Click on the result
- Choose the date before the infection appearance
- Follow the on-screen instructions
Roll the files back to the previous version
- Right-click the file and choose Properties
- Open the Previous Version tab
- Select the latest version and click Copy
- Click Restore
If the above-mentioned methods didn’t help in eliminating the threat, then it’s better to rely on an automatic way of deleting Leen Ransomware.
How to prevent ransomware infection
To get avoid infection with such viruses as ransomware, we advise you to use Norton. Norton is a powerful antimalware software that can quickly detect and remove Leen Ransomware with all vicious components left among system files and registry entries to make sure that it is completely gone. Norton also has a feature (HTTP monitor), allowing to block access to dangerous sites in a real-time thus preventing you from being infected in the future. Just launch the scan and Norton will take care of the rest.
