How to remove LongTermMemoryLoss ransomware

LongTermMemoryLoss ransomware targets the most popular files

LongTermMemoryLoss ransomware^[1] is a file-encrypting virus that employs AES cryptography to lock important files on the system in order to swindle the money from the users. This malicious software appends .LTML file extension and in this way prevents victims from using their documents, audio or video records, and access other data.

Due to the appended file extension, malware is also known under the name of LTML ransomware. According to the latest research data, the virus might still be in development. However, the active distribution might be launched anytime soon.

The LongTermMemoryLoss virus might infiltrate the machine when a user opens a malicious email attachment. When all malware-related files are installed and executed, ransomware starts scanning the system looking for the targeted file types.

When all audio, video, image files, databases, and documents are locked with .LTML extension, the malware runs a program window called “ATTENTION!” where crooks should provide data recovery instructions. However, the lack of text allows assuming that the virus is not ready yet.

However, if you discovered this ransomware on your PC, you should not wait until developer, known as Asmcx15, send you data recovery offer. You should remove LongTermMemoryLoss malware from the system immediately.

Crypto-viruses are one of the most dangerous cyber threats. Thus, they might damage the system and cause numerous changes. Thus, LTML virus might alter Windows registry or create new entries. Additionally, malware might inject malicious code into legit system processes.

It goes without saying that system scan with reputable antivirus or anti-malware is necessary after ransomware attack. We highly recommend using FortectIntego for LongTermMemoryLoss removal. However, if it blocks access to security software, check the instructions at the end of the virus description. Our team has prepared a guide that will help to disable ransomware.

How computers get infected with ransomware

We have already mentioned that file-encrypting virus is being distributed via malicious emails. Usually, they are spam emails^[2] with an obfuscated attachment. As soon as a person opens it, ransomware payload is downloaded and run on the computer.

However, specialists from odstranitvirus.cz^[3] warn that users should watch out for other ransomware distribution techniques, because LongTermMemoryLoss.exe might installed on your PC via:

• bogus software downloads;
• fake updates;
• malvertising;
• exploitation of system/software vulnerabilities.

Thus, malware might affect your PC if you download illegal or camouflaged program from unreliable sources or click on malicious ads. Keep in mind that malware-laden popups or banners might be displayed on both – legitimate and high-risk websites.

Lastly, to protect from file-encrypting virus attack, you should keep all your programs updated and avoid visiting questionable websites. Of course, creating backups and installing anti-malware software should be on your bucket list too.

Uninstall LongTermMemoryLoss virus and restore data from backups

You have to remove LongTermMemoryLoss using professional anti-malware tools, such as FortectIntego, SpyHunterCombo Cleaner or MalwarebytesMalwarebytes. However, if you want to use your security software, feel free to do that. No matter what tool you choose, you should not forget to update it before running system scan.

However, LongTermMemoryLoss removal might not be as smooth as you wish it to be. Ransomware might block access to security software. For this reason, you should reboot your PC to Safe Mode with Networking or use System Restore method (explanation given below) to disable the virus first.

Finally, when your PC becomes virus-free, you can safely plug in an external storage device or access data backups from the cloud.