Domino Ransomware is a type of ransomware that encrypts files on your computer and demands a ransom for the decryption key. We also know Domino Ransomware as DominoLocker.

History

Domino Ransomware was first discovered in August 2016 by malware researcher MalwareHunterTeam.

Domino Ransomware is a variant of Locky Ransomware, which is a very popular ransomware family.

Domino Ransomware uses the same encryption algorithm as Locky Ransomware, which is a strong AES-256 encryption algorithm. Domino Ransomware also uses the same ransom note and payment website as Locky Ransomware.

How does Domino Ransomware infect your computer?

Attackers spread Domino Ransomware through email attachments and websites that host malicious ads. Domino Ransomware will usually come in the form of a PDF or Word document attachment that has been infected with macro viruses. These macro viruses will automatically run when the document is opened, and they will download and install Domino Ransomware on your computer. They can also spread Domino Ransomware through websites that host malicious ads. These ads will usually redirect you to a website that will try to download and install Domino Ransomware on your computer.

How does Domino Ransomware work?

When Domino Ransomware infects your computer, it will scan your hard drive for files to encrypt. Domino Ransomware will encrypt files with the following extensions: .txt, .doc, .docx, .xls, .xlsx, .ppt, .pptx, .odt, .jpg, and .png. Domino Ransomware will then append the .locky extension to your encrypted files. For example, a file named “sample.jpg” would be renamed to “sample.jpg.locky” after Domino Ransomware has encrypted it.Domino Ransomware will then drop a ransom note named “_HELP_instructions.html” or “_HELP_instructions.bmp” in the same directory as your encrypted files. The ransom note will contain instructions on how to pay the ransom and decrypt your files. Domino Ransomware will also change your desktop wallpaper to the following message:

"All of your files have been encrypted! Domino Ransomware"

Domino Ransomware will then connect to a remote server and generate a unique encryption key for your computer. This key is then used to encrypt your files.

How much does Domino Ransomware cost?

Domino Ransomware costs $500 in Bitcoin. The price will double if you do not pay within seven days. Domino Ransomware will also delete your shadow volume copies if you do not pay within seven days.

Protection

You can protect yourself from Domino Ransomware by using a reliable anti-malware program, such as Malwarebytes, and keeping it up-to-date. You should also enable two-factor authentication on all of your online accounts. This will make it harder for attackers to gain access to your accounts if they get their hands on your password. You should also backup your files regularly so that you can restore them if Domino Ransomware encrypts them.

How to remove Domino Ransomware?

You can remove Domino Ransomware from your computer with a reliable anti-malware program, such as Malwarebytes. You should also delete the ransom note and restore your desktop wallpaper to the default. Domino Ransomware will usually delete your shadow volume copies, but you can try to restore them with a program like Shadow Explorer.

How to decrypt Domino Ransomware?

Domino Ransomware uses a strong encryption algorithm, which means that it is very difficult to decrypt your files without the decryption key. The only way to get the decryption key is to pay the ransom. We do not recommend that you pay the ransom because there is no guarantee that you will get the decryption key. You should also avoid using any third-party decryption tools because they may harm your computer or encrypt your files again. The best way to decrypt your files is to restore them from a backup.

Is there a public Domino Ransomware decryption tool?

No, there is no public Domino Ransomware decryption tool.

Contact a data recovery service

If you cannot restore your files from a backup, you can try to contact a data recovery service. These services use special software and techniques to decrypt your files without the decryption key. They can also help you recover files that Domino Ransomware has deleted.Since 2003, SalvageData has been recovering data for businesses, individuals, and government entities with over a 96.7% success rate. Contact SalvageData experts to get started right now.