Planetary Ransomware Removal (+ .Planetary File Recovery) Jan. 2018

The encrypted files may not be the only damage done to you. parasite may still be hiding on your PC. To determine whether you've been infected with ransomware, we recommend downloading SpyHunter.

Download SpyHunter Anti-Malware

More information on SpyHunter, steps to uninstallEULAThreat Assessment Criteria, and Privacy Policy.

This page aims to help you remove Planetary Ransomware for free. Our instructions also cover how any .Planetary file can be recovered.

Ransomware viruses are easily among the most difficult malware type to deal with. Their encryptions are typically nearly impossible to crack and the criminals behind them are more elusive than ever before. This current article is dedicated to a specific ransomware virus called Planetary, which belongs to the file-encrypting sub-type of this malware category. We have been reached with a cry for help by several of our readers, who have already fallen victim to the harmful effects of this ransomware variant. And though fighting ransomware is extremely difficult, as pointed out, and the prospects are quite honestly grim, we might still be able to offer you a beacon of hope. Below is a removal guide designed to help eliminate Planetary from your system, which is important so that it cannot cause any further damage. However, deleting the virus alone will not reverse the encryption of your files. We have included separate instructions in the same guide with the help of which you just might be able to recover your data.

.Planetary File

.Planetary Ransomware

Why ransomware is so harmful and why the aftermath is often disastrous

Ransomware viruses, unlike pretty much any other malware type, can actually work right under the noses of most antivirus software. Ironically, antivirus programs do not see the process of file encryption as malicious, and it essentially isn’t. So, even if you have a powerful antimalware tool installed on your computer, don’t blame it for not notifying you about the presence of Planetary. This is one of the reasons why malicious software of this type has gained the popularity it enjoys today. And that’s also one of the reasons why it’s so harmful – there is very little chance that you would be able to intercept a ransomware virus before it gets to complete its task. In addition to that, the encryption itself, as we already mentioned, is quite sophisticated in most of the cases of infection. And as a result, cracking the code used by the hackers most times proves impossible.

Planetary Ransomware Removal



Some of the steps will likely require you to exit the page. Bookmark it for later reference.

Reboot in Safe Mode (use this guide if you don’t know how to do it).



We get asked this a lot, so we are putting it here: Removing parasite manually may take hours and damage your system in the process. We recommend downloading SpyHunter to see if it can detect parasite for you.

More information on SpyHunter, steps to uninstallEULAThreat Assessment Criteria, and Privacy Policy.

Press CTRL + SHIFT + ESC at the same time and go to the Processes Tab. Try to determine which processes are dangerous. 


Right click on each of them and select Open File Location. Then scan the files with our free online virus scanner:

Drag and Drop Files Here to Scan
Maximum file size: 128MB.

This scanner is free and will always remain free for our website's users. You can find its full-page version at:

Scan Results

Virus Scanner Result

After you open their folder, end the processes that are infected, then delete their folders. 

After you open their folder, end the processes that are infected, then delete their folders. 

Note: If you are sure something is part of the infection – delete it, even if the scanner doesn’t flag it. No anti-virus program can detect all infections.


Hold the Start Key and R –  copy + paste the following and click OK:

notepad %windir%/system32/Drivers/etc/hosts

A new file will open. If you are hacked, there will be a bunch of other IPs connected to you at the bottom. Look at the image below:

hosts_opt (1)

If there are suspicious IPs below “Localhost” – write to us in the comments.

Type msconfig in the search field and hit enter. A window will pop-up:


Go in Startup —> Uncheck entries that have “Unknown” as Manufacturer.

  • Please note that ransomware may even include a fake Manufacturer name to its process. Make sure you check out every process here is legitimate.


To remove parasite on your own, you may have to meddle with system files and registries. If you were to do this, you need to be extremely careful, because you may damage your system.

If you want to avoid the risk, we recommend downloading SpyHunter
a professional malware removal tool.

More information on SpyHunter, steps to uninstallEULAThreat Assessment Criteria, and Privacy Policy.

Type Regedit in the windows search field and press EnterOnce inside, press CTRL and F together and type the virus’s Name. 

Search for the ransomware  in your registries and delete the entries. Be extremely careful –  you can damage your system if you delete entries not related to the ransomware.

Type each of the following in the Windows Search Field:

  1. %AppData%
  2. %LocalAppData%
  3. %ProgramData%
  4. %WinDir%
  5. %Temp%

Delete everything in Temp. The rest just check out for anything recently added. Remember to leave us a comment if you run into any trouble!


How to Decrypt Planetary files

We have a comprehensive (and daily updated) guide on how to decrypt your files. Check it out here.

So, what are the options? One is to pay the ransom, which would be doing exactly what the hackers want you to do. And that would be essentially funding their criminal scheme. Furthermore, if like in the majority of instances of ransomware infections, the criminals behind Planetary want you to pay them in Bitcoin or some other cryptocurrency, you can be sure that their identities will remain anonymous. That’s just one of the perks of cryptocurrencies and, unfortunately, one of the reasons why ransomware can now flourish. But if you were to go down that path, then you would be completely surrendering the fate of your files to the criminals who robbed you of your access to them in the first place. And as practice has shown, that has not always been a good idea. Many victims never received the decryption solution they were promised, even after they had paid. And many more received one that was utterly ineffective.

The other options of dealing with the consequences of Planetary on your machine aren’t that many and surely aren’t foolproof either. But they can at least save you the money you would otherwise spend on the ransom. Not to mention that they will also save you from having to fund criminals. First of all, removing the virus is very important and you can do that with the help of the below guide. We also have our professional removal tool at your disposal, which can locate and delete Planetary for you. Then, once you have removed the ransomware, you can head over to the instructions in the guide aimed to recovering your data from system backups. This may work differently on different systems and might not work at all in certain cases. But there will be no way of knowing until you actually try.

Another alternative would be to try a decryptor tool. We have a list of free ones published on our website that we frequently update with the latest releases from reputed security software developers. Check it out to see if there’s one available for your particular case and if not, be sure to check back again soon, as new ones are developed and made available pretty often. Last but not least, you can of course also contact a professional specializing in ransomware infections for further assistance.



Name Planetary
Type Ransomware
Danger Level High (Ransomware is by far the worst threat you can encounter)
Symptoms Very few and unnoticeable ones before the ransom notification comes up.
Distribution Method From fake ads and fake system requests to spam emails and contagious web pages.
Data Recovery Tool Currently Unavailable
Detection Tool

Keep in mind, SpyHunter’s malware detection tool is free. To remove the infection, you’ll need to purchase the full version. More information about SpyHunter and steps to uninstall.

If the guide doesn’t help, download the anti-virus program we recommended or try our free online virus scanner. Also, you can always ask us in the comments for help!

Leave a Comment