Remove Enc1 Ransomware (+_Enc1 File Recovery)

Remove It Now ▼ Get a Free Scan and check if your computer is infected
To remove malware, you have to activate trial or purchase the full version of SpyHunter.

This page aims to help you remove Enc1 Filr Ransomware for free. Our instructions also cover how any _Enc1 file can be recovered.

The Ransomware viruses are well known for their insidious and readful abilities. They are, by far, some of the most malicious pieces of software out there and even well-experienced security professionals find it challenging to deal with some of their most advanced representatives. Generally, there are several subcategories of Ransomware depending on what exactly the particular infection does. In this article, however, we will focus on one particular threat which belongs to the so-called cryptovirus subcategory. The name of the new infection is Enc1 and a number of web users have already had the misfortune of getting their files encrypted by its complex algorithm. If you are one of them, we suggest you read the information that follows until the end because, in the next lines, you will find some useful information about the specifics of the infection as well as detailed instructions on how to remove it. Dealing with a Ransomware infection can be very tricky and not always successful because such cryptoviruses utilize a secret file-encrypting algorithm to prevent the victims from accessing their personal files. As soon as the HDD gets scanned and the targeted data locked, the malware generates a ransom-demanding message somewhere inside the computer which asks for a money transfer in exchange for a special decryption key. The victims are usually threatened that if they don’t issue the ransom payment, they will never access their encrypted files again and the key for their decryption will be forever destroyed. The fear of losing their personal files is exactly what makes most of the victims immediately fulfill the ransom demands. However, most security experts, including our “How to remove” team, consider this impulsive decision as the worst course of action because paying to the crooks not only sponsors their blackmailing scheme but also does not give any guarantee about the future of the sealed data and the infected computer. Besides, with an active Ransomware infection inside the machine, the system may be exposed to all kinds of danger.

The detailed removal guide that you can see above explains how to remove Enc1 from your computer. There are certain steps which require your full attention but if you carefully follow them, you have a good chance of deleting the Ransomware and clean the system. We highly recommend you scan your PC with a reliable removal tool such as the one suggested in the guide so as to ensure that there are no residual data left behind from the malware or any other dangerous files. The reason is, sometimes, the Ransomware may sneak inside your system through the help of a Trojan horse or some other sneaky backdoor virus which may also need to be removed along with the main threat. We need to warn you, though, that eliminating the infection may not eliminate the encryption that has been applied to the targeted files. Unfortunately, in order to restore them, you may need to follow some additional steps or to rely on your personal data backups. We did our best to come up with some free file-recovery suggestions which you can find in the special file-recovery section of the removal guide, but we really cannot tell you how much of your data you will be able to recover with them. Still, we suggest you give them a try before you consider any other alternatives.


Name Enc1
Type Ransomware
Danger Level  High (Enc1 Ransomware encrypts all types of files)
Symptoms Enc1 Ransomware is hard to detect and aside from increased use of RAM and CPU, there would barely be any other visible red flags.
Distribution Method  Most of the time, Ransomwares get distributed through spam e-mails and social network messages, malicious ads, shady and pirated downloads, questionable torrents and other similar methods.


Remove Enc1 File Ransomware 

1: Preparations

Note: Before you go any further, we advise you to bookmark this page or have it open on a separate device such as your smartphone or another PC. Some of the steps might require you to exit your browser on this PC.

SpyHunter is a tool to detect malware on your computer. You will need to activate trial or purchase full version to remove infections.

2: Task Manager

Press Ctrl + Shift + Esc to enter the Task Manager. Go to the Tab labeled Processes (Details for Win 8/10). Carefully look through the list of processes that are currently active on you PC.

If any of them seems shady, consumes too much RAM/CPU or has some strange description or no description at all, right-click on it, select Open File Location and delete everything there.

Also, even if you do not delete the files, be sure to stop the process by right-clicking on it and selecting End Process.

3: The Hosts file

Go to c:\windows\system32\drivers\etc\hosts. Open the hosts file with notepad.

Find where it says Localhost and take a look below that. 

hosts_opt (1)

If you see any IP addresses there (below Localhost) send them to us here, in the comments since they might be coming from the virus.

4: Disable Startup programs

Re-open the Start Menu and type msconfig.

Click on the first search result. In the next window, go to the Startup tab. If you are on Win 10,  it will send you to the Startup part of the task manager instead, as in the picture:

If you see any sketchy/shady looking entries in the list with an unknown manufacturer or a manufacturer name that looks suspicious , disable those programs and select OK.

5: Registry Editor

Press Windows key + R and in the resulting window type regedit.

Now, press Ctrl + F and type the name of the virus.

Delete everything that gets found. If you are not sure about whether to delete something, do not hesitate to ask us in the comments. Keep in mind that if you delete the wrong thing, you might cause all sorts of issues to your PC.

6: Deleting potentially malicious data

Type each of the following locations in the Windows search box and hit enter to open the locations:






Delete everything you see in Temp linked to Enc1 RansomwareAbout the other folders, sort their contents by date and delete only the most recent entries. As always, if you are not sure about something, write to us in the comment section.

7: Decryption

The previous steps were all aimed at removing the Enc1 Ransomware from your PC. However, in order to regain access to your files, you will also need to decrypt them or restore them. For that, we have a separate article with detailed instructions on what you have to do in order to unlock your data. Here is a link to that guide.


Daniel Sadakov has a degree in Information Technology and specializes in web and mobile cyber security. He harbors a strong detestation for anything and everything malicious and has committed his resources and time to battling all manners of web and mobile threats. He has founded, a website dedicated to covering the top tech stories and providing useful tips for the everyday user, in an effort to reach and help more people.

Leave a Reply

Your email address will not be published. Required fields are marked *