BadBlock Ransomware

Posted by Lisa Blanc on May 24, 2016

What is BadBlock Ransomware?

BadBlock Ransomware is a malicious computer infection that encrypts your files and does not allow you to access them unless you pay a ransom fee. Our security experts categorize this infection as Trojan because it enters your computer surreptitiously, pretending to be something it is not. This program, in particular, does not seem to be extremely aggressive, but it can still cause considerable damage by encrypting your files. In this description, we will discuss the main features of this program, and then we will tell you how to remove BadBlock Ransomware. Please bear in mind that removing a ransomware application does not necessary entail getting rid of all the infection symptoms momentarily. test test

Where does BadBlock Ransomware come from?

It is very likely that this infection comes via spam email messages. Ransomware applications are quite often distributed through spam email attachments. Users download files that look like legitimate .docx, .pdf or other common format files, but when they open them, they launch an executable that connects to the Internet and downloads the actual infection.

Another way to get infected with ransomware is through malicious exploits. For example, there might be several websites that contain flash pop-ups with links that lead to malware-related websites. Clicking on those pop-ups leads to ransomware infection. From this, we can see how important it is to employ safe web browsing habits.

What does BadBlock Ransomware do?

There is nothing unusual about this program in a way that it works because it does something all ransomware apps do: encrypt your files. According to our security researchers, BadBlock Ransomware encrypts data with the RSA algorithm. It means that it is possible to decrypt the affected files only if you have the private decryption key. Usually, this private key is held by the cyber criminals behind the infection.

So technically, there is no way to decrypt your files unless you pay the ransom. Should you do it? Most definitely not. The ransom fee for your computer is two bitcoins, which is around $900. Probably, almost all users would agree that this is an amount not everyone can consider lightly. What’s more, there is also a chance that the criminals behind this infection would not issue the decryption key even if you do transfer the payment. It happens quite often because the connection between the infection and its command and control center is often very shaky, and so the secure route cannot be ensured.

We do understand that users may feel compelled to pay the ransom, especially since the program’s interface is so intrusive. It has a red GUI window with a warning message and the instructions of how to transfer the payment. Also, the BadBlock Ransomware message cannot be closed, so unless you drag it to the side, it is not possible to kill it otherwise. Nevertheless, once again, we would like to point out that giving in to the cyber criminal demands is not an option.

How do I remove BadBlock Ransomware?

We would suggest removing BadBlock Ransomware from your computer and then restoring your files from whatever backup you may have. It is not complicated to delete this ransomware from your computer, although it is always a good idea to invest in a legitimate antispyware tool. This way, you can run a full system scan and see whether you have more malicious infections on-board. The chances are that there are several malicious programs in your computer because ransomware Trojans seldom travel on their own.

Either way, when you are done with the removal, it is time to restore your files. Do not do that while the ransomware is still on your computer because it may encrypt the files on the external drive, too! Once your computer is clean, you can try and copy all the necessary files from your external hard drive or cloud storage. It is up to you, how to back up your files or what you do to protect your computer from similar infections. However, should you have any doubts or questions about computer security, please remember that you can always refer to us for assistance.