Blammocock.li Ransomware

What is Blammocock.li Ransomware?

Blammocock.li Ransomware is a dangerous file-encrypting threat. If you encounter this malicious application, you could lose all of your important files, for example, pictures, photos, archives, videos, etc. It appears that the infection uses a secure encryption algorithm to encipher targeted data, and as a result, it becomes unrecognizable by the system. The only way to restore the affected files is to use a unique decryption key and a decryption tool. The problem is these means are available only to the malware’s developers, and sadly they wish to receive a payment in exchange. It is important to realize that the cybercriminals behind Blammocock.li Ransomware may not hold on to their word, and if this happens, the user would be left with no decryption tools and a lighter valet. Thus, it seems to us a safer solution would be to get rid of the malicious application and once it is gone users who have backup copies could safely transfer them. To help users eliminate the malware, we will be placing instructions at the end of the article; as for more information on the threat, continue reading our report.

How does Blammocock.li Ransomware work?

To settle in, the malware might create randomly titled executable files in the %WINDIR%\System32 and %ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\Startup directories. Plus, the malicious application could create a Registry entry in the HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN location to make the computer launch itself automatically every time the victim restarts the computer. After this, Blammocock.li Ransomware should immediately prepare for the encryption process and start enciphering all targeted files one by one. Victims can easily recognize files they will not be able to open again since the data affected by the malicious application should be marked with a second extension called .[Blammo@cock.li].arrow, for example, picture.jpg.[Blammo@cock.li].arrow, text.docx.[Blammo@cock.li].arrow, and so on.

Next to the encrypted files, the user should notice copies of a particular text document carrying a short message assuring the user his data was ruined and the only way to restore it is to contact the cybercriminals behind Blammocock.li Ransomware through the given email address. What’s more, on top of the infected device’s screen the victim may also see a window with a message explaining what could be done to decrypt the user’s files in detail. To be more accurate it should say the malware’s developers can help if the user agrees to make a payment in Bitcoins. The ransom note does not say how much the user should pay; therefore, it is entirely possible the price might be decided on the spot. Even if they do not ask for a lot, our researchers at Anti-spyware-101.com advise to refuse their offer or better yet not to contact the cybercriminals at all. The truth is these people cannot be trusted, and there is always a possibility they could scam you. This is why we advise against paying a ransom and encourage you to use your backup copies instead or try various recovery tools.

How to erase Blammocock.li Ransomware?

If you want to get rid of Blammocock.li Ransomware manually; you should erase all files created by or associated with it. The instructions available slightly below this paragraph are here to tell you how to search for such data and how to eliminate it. Even if you feel up to the task, we recommend reviewing the given steps first to see if they are not too complicated. In case the manual deletion appears to be a bit too difficult you could install a reliable antimalware tool instead, start a system scan and then get rid of the malware and other possible threats by pressing the provided removal button.

Remove Blammocock.li Ransomware

1. Press Ctrl+Alt+Delete.
2. Select Task Manager.
3. Search for the infection’s process.
4. Select this process and click End Task.
5. Leave Task Manager.
6. Press Windows key+R.
7. Insert Regedit and click Enter.
8. Look for this path: HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN
9. Find a randomly titled value name.
10. Right-click it and select Delete.
11. Leave Registry Editor.
12. Press Windows key+E.
13. Go to the following paths:
    %TEMP%
    %USERPROFILE%\desktop
    %USERPROFILE%\downloads
14. Find the file that infected the device.
15. Right-click the malicious file and press Delete.
16. Look for the following directories:
    %WINDIR%\System32
    %ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\Startup
17. Search for randomly titled .exe files.
18. Right-click them separately and press Delete.
19. Exit File Explorer.
20. Empty your Recycle bin.
21. Reboot the device. Download Removal Tool100% FREE spyware scan and
    tested removal of Blammocock.li Ransomware*

Stop these Blammocock.li Ransomware Processes: