Free Thor virus removal instructions

Thor virus happens to be another continuation of terrifying Locky virus. A couple of months ago after the release of original version, the file-encrypting malware struck again with .odin extension. While the cyber security professionals were working on new countermeasures, the developers presented the “brother” of Locky – .thor file extension virus. Unfortunately, it is no less destructive and damaging as previous versions of the ransomware.

Like its predecessors, Thor malware continues using RSA-2048 and AES-128 algorithms for encrypting data. As it is based on the mathematical rule, the decryption of data without the matching private key is still a challenge. The visible change of this new version includes the new file extension. Now it shifts from using .odin to .thor. Interestingly, there is an intermediary version of the menace – .shit extension virus. It seems that hackers lost their common sense completely.

The new version of the ransomware retains the same distribution preferences. In other words, spamming and phishing are the main channels for delivering malicious “bonus” file – Thor ransomware – to its victims. Beware of the spam messages addressing you directly and having .vbs, .js, .zip, and .doc attachments. If you carelessly click on a fake invoice or financial report, the virus downloads rundll32.exe file. Afterward, it becomes only a matter of time when the virus starts the encryption process.

At the moment, there is no free decryption tool for the files affected by Thor ransomware. However, eliminating it efficiently is an important task. For that, you may install an anti-spyware application. Updated security tools now include the definitions of this malware, so they are able to detect it properly. They will complete Thor removal properly. The latter link will also provide valuable tips how to recover the files using alternative methods.