Bl00Dy Virus 🔐 (. Bl00Dy Files) — How to Remove?

What is known about the Bl00dyvirus?

Bl00dy adds its specific .bl00dy extension to every file’s name. For instance, a file entitled “photo.jpg” will be changed to “photo.jpg.bl00dy”. Likewise, the Excel file with the name “table.xlsx” will end up as “table.xlsx.bl00dy”, and so on.

In each folder that contains the encrypted files, a How To Restore Your Files.txt file will be created. It is a ransom money note. Therein you can find information on the ways of paying the ransom and some other remarks. The ransom note usually contains a description of how to buy the decryption tool from the ransomware developers. That is basically the scheme of the felony.

NameBl00dy Virus
Ransomware family1Babuk ransomware
Extension.bl00dy
Ransomware noteHow To Restore Your Files.txt
Detection2Trojan.Urelas, BScope.Trojan.CoinMiner, Trojan:Win32/Redline.KB!MTB
SymptomsYour files (photos, videos, documents) have a .bl00dy extension and you can’t open them.
Fix ToolSee If Your System Has Been Affected by Bl00dy virus

In the picture below, you can see what a directory with files encrypted by the Bl00dy looks like. Each filename has the “.bl00dy” extension appended to it.

An example of encrypted .bl00dy files.

How did Bl00dy ransomware end up on my PC?

Nowadays, there are three most popular ways for tamperers to have ransomware working in your system. These are email spam, Trojan injection and peer networks.

If you access your mailbox and see letters that look like familiar notifications from utility services companies, delivery agencies like FedEx, Internet providers, and whatnot, but whose “from” field is strange to you, beware of opening those letters. They are very likely to have a harmful item enclosed in them. Thus it is even more dangerous to open any attachments that come with emails like these.

Another option for ransom hunters is a Trojan virus scheme3. A Trojan is an object that infiltrates into your computer disguised as something legal. For instance, you download an installer for some program you want or an update for some software. However, what is unboxed reveals itself a harmful program that encrypts your data. As the update file can have any title and any icon, you’d better be sure that you can trust the resource of the stuff you’re downloading. The optimal thing is to use the software companies’ official websites.

As for the peer-to-peer networks like BitTorrent or eMule, the danger is that they are even more trust-based than the rest of the Web. You can never guess what you download until you get it. So you’d better be using trustworthy websites. Also, it is reasonable to scan the folder containing the downloaded files with the anti-malware utility as soon as the downloading is complete.

Robert Thorne

Robert Thorne

Automotive & Future Transportation Editor

Robert Thorne covers electric vehicle innovations, autonomous driving systems, global mobility trends, and automotive engineering developments.

Share this article
Twitter Facebook Pinterest