BBOO Ransomware Removal Guide

More often than not, we can easily avoid computer infections like BBOO Ransomware, but due to our negligence, they manage to slither into our systems. Ransomware programs tend to target smaller businesses because they are more likely to pay the ransom money. If you were infected with this program, you should remove BBOO Ransomware from your system at once, and then look at the file recovery options. Do not be surprised if some of your files remain locked. Ransomware infections are that dangerous, and thus, they must be taken seriously.

The good news is that you might be able to restore some of your files. BBOO Ransomware comes from the STOP Ransomware group, and so it is similar to SySS Ransomware, ROGER Ransomware, Chch Ransomware, and many other computer infections that have bothered us before. STOP Ransomware programs might be decrypted if they use an offline key for file encryption. There is a public decryption tool that works across several STOP Ransomware programs, provided they use that offline key. What happens if BBOO Ransomware uses an online key to encrypt your files? Well, then you have to hope that some will soon develop a new public decryption key, although that is highly unlikely.

In fact, you might want to go through your inbox, your mobile device, and other places where you usually save important files. That way, you should be able to recover at least part of your data, if you do not have the file backup. If you regularly back up most of your files on an external drive or some other storage, there shouldn’t be a problem. You just need to remove BBOO Ransomware then, delete the encrypted files, and transfer the healthy copies back into your computer. That’s the perfect scenario for this situation.

Unfortunately, not everything in this life is perfect. In fact, you might have to go through a lot of troubles to restore your files if you do not have a decryption key or the file backup. BBOO Ransomware will also try to push you into paying the ransom fee by displaying the following ransom note:

ATTENTION!

Don’t worry, you can return all your files!
All your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.
The only method of recovering files is to purchase decrypt tool and unique key for you.
<…>
Price of private key and decrypt software is $980.
Discount 50% available if you contact us first 72 hours, that’s price for you is $490.

Does that mean you have to hurry and contact these criminals for the decryption key? Absolutely not. Let’s not forget that they might as well just collect the payment, and then leave you hanging. Thus, listening to what these criminals tell you is not a good idea.

Please follow the removal instructions below to terminate BBOO Ransomware. If you find the manual removal too complicated, you can always employ an automatic malware removal tool that will help you delete everything associated with this ransomware from your computer.

In the future, be sure to avoid spam emails with attachments and various documents that might be part of the ransomware distribution network. If you are not sure whether the document you are about to open is safe or not, you can always scan it with a security application of your choice.

Although we often emphasize how important it is to invest in a licensed antispyware tool, that’s not enough. You must remember that your web browsing habits and the way you treat new files can also impact your cybersecurity. Thus, it has to be a comprehensive effort.

How to Delete BBOO Ransomware

1. Press Win+R and enter regedit. Press OK.
2. Open HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run.
3. On the right, right-click and delete the value with a random name in the location address.
4. Use the Win+R command to open the %UserProfile% and %LocalAppData% directories.
5. Remove the 000x0x0-xxx0-000x-00x0-xxx000xx0xx0 format name file from both directories.
6. Remove the script.ps1 file from both directories.
7. Press Win+R and type %WINDIR%. Click OK.
8. Navigate to System32\Tasks and remove Time Trigger Task.
9. Scan your computer with the SpyHunter free scanner.