HeroesOftheStorm Ransomware

What is HeroesOftheStorm Ransomware?

HeroesOftheStorm Ransomware is not a very harmful threat for sure because, unlike real ransomware infections created for money extortion, it encrypts files located in one folder only and does not even demand a ransom. Also, specialists have observed that it contains bugs and crashes quite often, so, according to them, it is very likely that this infection has been developed for testing purposes, or it is still in development. We cannot promise that a new version of this infection will not be developed. Yes, there is a slight possibility that cyber criminals will update HeroesOftheStorm Ransomware one day and then it will start encrypting files in all locations and demanding money from users; however, no matter what version of this infection slithers onto your computer, you must go to erase it as soon as possible if you have already detected it on your system. The version of this threat analyzed by specialists at anti-spyware-101.com is not very sophisticated, so its removal should not be very problematic either, we believe. Of course, it would be best that you take action only after you read this entire article.

What does HeroesOftheStorm Ransomware do?

HeroesOftheStorm Ransomware is not as harmful as similar threats our researchers have put into the ransomware category because it only encrypts files in %USERPROFILE%\Desktop\test. The name of this folder (test) suggests that this infection might be used for testing purposes only, but it does not mean that it might not be updated one day and start encrypting users’ files located in other directories containing valuable files, e.g., %PROGRAMFILES% as well. Research has shown that this infection adds .HeroesOftheStorm  next to original extensions of encrypted files, so if HeroesOftheStorm Ransomware ever slithers onto your computer and encrypts your files, you will find out about that soon. Of course, if you encounter the version analyzed by our researchers, the chances are high that you will not find a single file encrypted if you do not have the “test” folder on Desktop. You are still not allowed to keep HeroesOftheStorm Ransomware on your computer in this case because the ransomware infection might be updated at any time and encrypt all important files, including pictures, documents, videos, and more at lightning speed.

Luckily, HeroesOftheStorm Ransomware affects only one folder and does not apply any other modifications on the system. That is, you will not find the entry of this ransomware infection in the Run registry key, and we are sure you could not detect any of its copies because it simply does not make them on affected machines. The only component showing that this threat is installed on the system is the ransom note What is it?.txt: “Play Heroes of The Storm and decrypt your files” on Desktop. If you see it, there is no doubt that you have encountered HeroesOftheStorm Ransomware even if your files are fine.

Where does HeroesOftheStorm Ransomware come from?

Cyber criminals do not distribute HeroesOftheStorm Ransomware yet, but this might change soon, so you must know how these infections usually travel so that you could prevent ransomware from entering your PC. Specialists at anti-spyware-101.com say that crypto-threats are often spread via spam emails, so if bad people ever start distributing HeroesOftheStorm Ransomware, it is very likely that it will travel as an attachment in spam emails. Because of this, you should stay away from them all. You should be careful with downloads from third-party pages too because you might download malware on your computer by mistake. These are, of course, not all the methods that might be used to spread HeroesOftheStorm Ransomware, so if we were you, we would also enable a trustworthy antimalware tool on the system to make sure that it is protected 24/7.

How to delete HeroesOftheStorm Ransomware

Files in the “test” folder will not be unlocked when you erase HeroesOftheStorm Ransomware, but you are still not allowed to keep this infection active because it might be updated at any time and strike again thus encrypting all your personal files. We are sure it will not be hard to erase this threat manually because it only drops a ransom note on affected machines. Of course, if you want to be sure that this infection is fully removed without putting much effort into the removal procedure, you should use an automated malware remover – you can get one from the web.

How to remove HeroesOftheStorm Ransomware manually

  1. Press Win+E.
  2. In the Explorer’s URL bar, type %USERPROFILE%\Downloads and press Enter.
  3. Check this folder and delete suspicious files from it.
  4. Open %USERPROFILE%\Desktop.
  5. Repeat the 3rdstep.
  6. Delete the ransom note What is it?.txt from Desktop.
  7. Clear Recycle bin. 100% FREE spyware scan and
    tested removal of HeroesOftheStorm Ransomware*

Leave a Comment

Enter the numbers in the box to the right *