Blackshades crypter virus [ransomware] – The “cheap” ransom

Blackshades crypter virus is barely known ransom virus newly discovered these days.We call this virus “cheap” ransom by purpose.When the Blackshades ransomware encrypts your files he demands you to pay a significantly lower price to regain your files – around $30 ransom paid by PayPal or Bitcoins of course.The virus is targeted at the United States and Russian countreys.The ransomware, of course, encrypts your files with extension “.silent” with AES-256 encryption as well.It is known that the virus encrypts all kind of files – pictures,music,documents and even folders on your computer.There is no restraint for encryption targets.

Users could get infected with Blackshades ransomware by downloading infected files like programs,cracks or patches.What is more important about this malware threat is that this virus executes code that erases your shadow volumes on your computer.In the execution process of the malware, it will connect to the internet and assign an identification number unique to your computer.If you have no internet connection established an error window will appear.If a connection is established the Blackshades ransomware will connect to a data server to report about the number of encrypted files or folder as we mentioned above with extension “.silent”.

BlackShades details:

Type of the virus: Ransomware

OS with risk of infection: all type of Windows systems

Blackshades crypter virus

Blackshades crypter virus will create an “HTML” files to your desktop to “remind” you to pay the ransom.The process of payment and unlocking of your files will be described in this files.Do not open or follow any instructions connected with this virus.We recommend you to stay calm and try to delete this virus as soon as possible.At this moment, there is no case of successful decryption of files encrypted with Blackshades virus.We will stay in touch for further information.

Usattentioneful tips Always pay attention to files that you are downloading. It is highly recommended to use the security of antivirus software and it is important that program is up-to-date with virus list. This tip is for every person that keeps very important information – HAVE A BACKUP OF YOUR INFORMATION, if you do not have any – make it on a separate device. Flash drive or external hard drive will be the perfect solution for backup your files.

Several methods to remove Blackshades crypter virus and recover your files

Use any type of anti-malware software to remove ransomware or any malicious program.

NOTE: In this option the virus will be removed but the files will remain locked! You have to decrypt your files.

New research discovery shows how ransomware deletes files and substitute encrypted copy of them. It is not guaranteed, but it is a possibility that you may recover your files with data recovery software. Before trying to decrypt any files you can scan your computer for possible data loss.

Go here to find out how to recover deleted files.

Manual step, how to remove Blackshades crypter  virus

Manual steps to remove ransomware or malware. How to prevent ransomware or malware.

For now, removing ransomware or malware manually will only be able for IT specialists. If you don't know one don't worry. We have a solution for you. Over here we will use Spyhunter to remove the virus. The Spyhunter anti-malware is a collection of programs that can be used to scan for malware and clean infected computers. You can also use full anti-malware program in this case which is the better option because it also offers protection.

How to remove "ransomware or malware"

NOTE: In this option the virus will be removed but the files will remain locked! You have to decrypt your files.
  1. Download Spyhunter anti-malware.
  1. 2.  After program has been downloaded, double-click to open it. User will have to install the program. Click on Spyhunter.exe to start the process.
User Account Control dialog may appear, asking you to allow the following program to make changes to this computer. Click "Yes" or "Run" to proceed with the installation. User can also choose variety of languages. Click Ok and the installation will begin with a welcome massage for Spyhunter. Click Next to continue to the next step. User will also have to accept Spyhunter license agreement by clicking on "I accept the agreement" and click Next. Spyhunter will ask user to read important information provided before continuing. Once done click on next to go to the next step. User can choose where to install the program. By default - C:Program FilesEnigma Software GroupSpyHunter. The process will continue and then Spyhunter will install. The installation process may take awhile, depending on a computer system performance. Once the installation is done, click Finish.
  1. 3. Update the software before scanning. Once program has been updated go to scan. You can choose from a free trial version or activate license. It is recommended to buy full version as the trial will not protect computer system.
  1. 4. The scan process will begin. The scan process may take awhile, depending on a computer system performance.
  1. 5. Once the scan is complete you can choose between delete or quarantine the viruses. The quarantine option is recommended and since the malware is active a reboot will be required to finish process.

Click here for guide of how to uninstall spyhunter.

Decrypt ransomware files.

Good news is that we can now use decryption programs. A lot of security companies like Kasperky lab, bitdefender and more has developed a program that is fully capable of decryption key for ransomware malware. You can find this programs anywhere on the internet but it is strongly suggested to download this programs from official websites. NOTE: It may take a long time for your files to be decrypted depending on your PC performance.