How to Delete .odin Extension Virus

A report on .odin extension


Recently a new variant of Locky Ransomware has been discovered by @dvk01uk that switches over from .ZEPTO extension to the new variant named .odin extension for encryption of users files with a new extension. This ransomware uses the extreme effective technique for encryption that combines RSA-2048 and AES-1024 ciphers. If a users has been infected by this ransomware and he thinks that he is infected with Odin Ransomware it is not the truth because you are infected with a Locky Ransomware that uses .odin extension to decrypt your files. It is same as previous ransomware variants that spread via spam email attachments, JS, WS(Windows Script File). If you double tap on these files then it download an encrypted DLL installer to decrypt users files and this program executes using Windows program named Rundll32.exe.


The command code that executed to start DLL is :


rundll32.exe %Temp%\[name_of_dll],qwerty


Once this code has executed successfully this Locky Ransomware variant start encryption process and rename the users files with an .odin extension and after that the ransom note names has been changed also. The ransom note that generate by this current new variant is like :


_HOWDO_text.html, _HOWDO_text.bmp, and _[2_digit_number]_HOWDO_text.html.


Security experts says this variant is very much similar like its original version that it continues to use TOR-based commands and control that targets some of the following files extensions are - .doc, .ott, .csr, .key, .xls, .pdf etc.

Problems caused by .odin extension Virus

This .odin extension virus can lock users data, local and shared drives and makes inaccessible to you and after that it send you a ransom note on your screen in HTML form like "_HELP_instructions." and you can open this on a standard web browser. It is noticed that the hackers generally demand the ransom money between 0.5 to 1 Bitcoin and 300 to 600 USD. It may delete all your important files and documents from your system.

How to prevent from this .odin extension virus

After encryption the hackers send you a ransom note to pay the ransom and decrypt all your files by purchasing the decryption key but wait think twice before do this. These all are a trick used by the hackers to cheat you there is no guarantee that they will provide decryption key after ransom payment so do not stuck in the trap. You can protect yourself by most used technique that is backup your data. it can be lifesaver of your system in terms of ransomware attack so always create a good data backup of your important files and documents.


Manual Process to Delete .odin extension

Step 1: Start your system in Safe Mode With Networking, after that try to restart your PC in Safe Mode With Command Prompt by tapping F8 key at the time of system booting.
  • Keep pressing F8 key until the open of Windows Advance Option Menu and then tap on Enter to go ahead.
Step 2: Once the Windows opens, Go to Start-->Run-->Type"CMD"
  • On the command prompt-->Type 'Regedit' to open Windows Explorer.
  • After that Registry Window will open, find and delete all registry items related to .odin extension.
  • Go to File and tap on Export.
  • Then save the File in c:\ as regbackup and tap on save.
  • Then Go to Edit and select Find option and search entries related to .odin extension
  • Press Delete button to remove it.
  • You should press F3 and delete all items related to this .odin extension.
How to Get Rid of .odin Extension Automatically
Manual removal is a cumbersome task in order since it requires great skills to delete files and registry keys created by this virus. So It is advised to be careful while performing the manual removal process. We strongly recommend you to delete .odin extension virus using automatic process. Automatic removal process is best for the removal of .odin extension.

Canon is a brand name for digital cameras which is very popular among photographers as well as home users. It gives you an excellent picture quality along with sharp picture intensity. Canon camera is smaller, lighter and easier to carry.


Canon Camera Recovery is the method of recovering the photos from any kind of malfunctioning like photo loss, photo corruption and damage. Canon Camera Recovery software is the solution to restore lost and corrupted or damaged photo irrespective of the damage cause. A recovery software helps you in resolving such type of problems. Canon Camera Recovery software can effectively recover all the lost photos from the camera. This is a high-quality and easy to use software. This recovery software is suitable for almost every series of Canon camera like Canon EOS series, PowerShot series, IXUS series, etc. 


Causes of the Photo corruption and deletion 

  • Auto ejection of memory card causes damage to photo – The amount of pressure needed to eject the memory card is same as the amount needed to insert it. However, if the card is unmounted automatically if it is not installed properly causes the corruption of photos. 
  • Forced ejection of memory card causes memory card corruption – Memory cards are very prone to corruption. Due to carelessness and events like improper ejection of card from camera, force pull out, auto unmount and other factors contribute in the damage of memory card as well as photos stored on them.
  • Virus and any type of malware infection in the memory card – Memory cards are more likely to catch viruses easily whenever you connect your camera to PC and laptop to transfer photos. If the PC and laptop is already infected with virus then your memory card will catch those viruses.
  • Physical damage to memory card – Apart from all these factors mentioned above, other scenarios that contributes in the damage  of card include memory card gets watered or heated accidentally when sending your clothes off to laundry or heating something leads to failure of memory card eventually.
  • Accidental deletion of photos – This is more frequent situation seen when people used to delete all photos by pressing 'delete all' option instead of 'delete' option specially when users are new to handle camera. 


Canon Camera Recovery Software  


Nevertheless, it is easy to recover lost, damaged and corrupted photos from Canon camera no matter how you did you lose them. Basically, three important software are there to provide Canon Photo Recovery solution. These are - :


1. Stellar Photo Recovery Software

2. Pandora Recovery

3. Zero Assumption Recovery


Stellar Photo Recovery Software


Stellar Photo Recovery Software is a comprehensive software perfectly restore lost and corrupted photos from camera and other digital devices such as memory card, SD card, external storage, USB sticks and even from hard drives. 


Key features of Stellar Photo Recovery Software 

  • Enhanced graphical user interface along with customized options
  • Supports varieties of file previews
  • Facilitates RAW recovery with improved scanning engine
  • Reinstates deleted pictures with their original details.


Recovery Procedure

  • Install Stellar Photo Recovery Software on the computer and then double click on it.
  • Click on the 'Recover Photo, Audio & Video' button.
  • Select the storage media from 'Select Storage Media' dialog box.
  • Click on Scan Now. Scanning process will now commence. 
  • Click on 'Deleted list' to look for deleted or RAW photos.
  • Finally, click on 'Recover' button.

Pandora Recovery Software


Pandora Recovery is another useful recovery software that allows you to find and recovers deleted and damaged photos from the camera. It is free file recovery software specially designed for recovering photos from all type of sources. 


Features of Pandora Recovery Software 


  • Recover lost, damaged and corrupted photos easily.
  • Review file properties and drive properties.
  • Recover hidden, archived, encrypted and compressed files.
  • Compatible with Windows versions like Vista, XP, 2003 and 2000.


Recovery Procedure 


  • Install Pandora Recovery Software on the system.
  • The recovery wizard opens up automatically as soon you start Pandora Software.
  • Click on the Next button to proceed.
  • Choose among the following whether you want to browse deleted files on your own, search and deep surface scan and then click on Next button.
  • Once you have chosen the files or folders for recovery, right click and then click on Recover to ... option from the drop down menu.
  • A dialog box will appear asking you to specify the location for storing recovered photos. Note, copy to main drive if recovering from external hard drive and recover to USB or external drive if recovering from system drive.
  • Finally , click on Close button after the completion of task.


Zero Assumption Recovery


Zero Assumption Recovery tool provides a suite of very effective and thorough data recovery including photos, music, videos, files and documents. It is a powerful data recovery solution for both home users and businesses who so ever needs it. The settings are more reliable and thorough that enables users to navigate easily.


Key features of Zero Assumption Recovery


  • It is a powerful software developed to recover lost photos.
  • Efficiently restores files due to accidental deletion or corruption.
  • Supports all Windows files systems of almost all Windows version.
  • Interface is simple and practical.


Recovery Procedure 


  • Download and install Zero Assumption Recovery software.
  • Start ZAR software.
  • Click on Image Recovery (free) option.
  • Select the device to recover photos from it and click Next button to start recovery process.
  • Now select the files to recover or you can just click on Root entry to select all the photos at once.
  • Click on Next button.
  • Specify the name for the folder for recovered photos.
  • At last, click on 'Start copying the selected files' option in order to start retrieval.