Skip to content
  • Active
  • Severity: High
  • Ransomware
  • Windows
  • Verified · Apr 2020

How to remove EncryptedbyBB ransomware

A step-by-step removal guide for affected devices. Follow the verified procedure below — most readers complete it in under 10 minutes.

Jake Doevan · Computer technology expert

EncryptedbyBB is a highly malicious crypto ransomware that appends.encryptedbyBB file extension and locks victim's personal data

EncryptedbyBB ransomware virusEncryptedbyBB is one of the latest ransomware[1] threat that has been detected at the beginning of April 2020. Distributed via malicious spam email attachments, the virus distorts log files and enables a strong encryptor, which targets the vast majority of personal files. Consequently, files that have .jpg, .png, .docx, .exe, .mp3 and similar get encrypted by the .encryptedbyBB file extension.

While the extent of attacks is currently unknown, cybersecurity experts have already puzzled out its main features and activities. It’s known that this encrypting virus is being distributed in disguise with seemingly reliable email messages that may be related to shipping information, taxes, offers, and similar. Once the file is launched, the malicious .encryptedbyBB extension is appended to most of the victim’s files, making them unreadable. Cybercriminals use AES-256[2] encryption algorithm, which is known as one of the most reliable methods to render files useless without a decryptor. The algorithm creates unique codes for each victim, which is why the decryptor of ransomware are challenging to develop.

Name EncryptedbyBB
Also known as BB ransomware
File extensions used The virus is a new member of ransomware family. Based on the initial research, it uses .encryptedbyBB file extension to encrypt personal files. 
Ransom note

EncryptedbyBB.txt is dropped upon strong data encryption. The file may include information for people who became a victim of the virus. The data may include information on where to transfer money, how to apply decryption key, the contact information of the ransomware developers, and similar.

Targeted files It is currently unknown which particular files the EncryptedbyBB ransomware targets. However, the most popular files, such as .docx, .doc, .exe, .jpg, .png, etc.
Distribution techniques Malicious spam email attachments are the primary source for ransomware distribution. Nevertheless, unprotected RDP connections, exploits, malicious installers, infected websites, and similar means can be used to spread crypto-malware.
Detection names Updated antivirus detect this virus under the following names: Trojan.GenericKD.33583211, Trojan:MSIL/Filecoder.d0bb6406, Win32:Trojan-gen, Gen:NN.ZemsilF.34104.km0@aWEeuXn, A Variant Of MSIL/Filecoder.YQ, W32/Crypren.YQ!tr.ransom, Ransom.BBRansomware, Ransom:MSIL/Fil
eCoder.BB!MSR, Ransom.MSIL.BB.A, HEUR:Trojan-Ransom.MSIL.Crypren.gen. [3]
Removal methods

EncryptedbyBB ransomware removal should be initiated with a reliable antivirus tool. Our recommended programs are SpyHunterCombo Cleaner or MalwarebytesMalwarebytes

Removing ransomware side effects

Even after ransomware removal, you may find out that the PC does not work the way it used to work before. Various EncryptedbyBB virus side effects may appear, though severe slowdowns, unresponsive system files, questionable system files, duplicate files, and similar may occur. Therefore, it is recommended to run a full system scan with FortectIntego to get rid of remnants and restore the system's parameters to the state prior to EncryptedbyBB crypto-ransomware attack.

As soon as the files are locked, the BB ransomware drops a ransom note, which may pop up on the victim’s desktop or appear as a new .png file. The ransom note is named as “BB ransomware,” which is why BB ransomware may be used as a secondary EncryptedbyBB encryptor’s name.

Hello! I’m a bb, and Im encrypt your files
Please give me a BTC To address:
13AM4VW2dhxYgXeQepoHkHSQuy6NgaEb94
And I send you decrypt code

If you have a special decrypt code, please select Path and decrypt file

The developers of the EncryptedbyBB ransomware virus demands a Bitcoin in exchange to a decrypt. If this malicious infection has infected your PC, we highly recommend you to restrain from paying the ransom due to a couple of reasons. First of all, no one can guarantee the success of “agreement” since paying by Bitcoins allow criminals to stay unrecognized, and no one knows if they do have a BB ransomware key themselves. Second of all, the virus may scam victims and make copies of valuable data, so paying the ransom does not make people safer.

If this virus has infected your PC, we highly recommend you to enable a powerful anti-spyware tool and initiate a full EncryptedbyBB removal. VirusTotal research shows that the ransomware can be detected by most of the trustworthy security software. Thus, it is crucial to install a reliable security tool and keep it up-to-date.

EncryptedbyBB crypto ransomware

To remove EncryptedbyBB virus, you should launch a full system scan with a reputable anti-virus. If your security software is blocked, please see the guidelines on how to start it down below. After you perform a BB ransomware removal, try using third-party data, recover tools. The things are easy as a pie if you have duplicates of essential data on cloud storage.

Do not open questionable emails with attachments

Even though there are multiple means of virus distribution, spam emails remain the most successful medium to infect peoples' PCs with ransomware, trojans, spyware, and other highly dangerous infections. Crooks use exploits and similar techniques to spread malicious emails to thousands of potential victims. To make more chances to deceive people, they disguise viruses under trusted senders, such as official authorities, courier services, post offices, agencies, etc.

Therefore, even though the email seems to be trustworthy, it’s always important to double-check the sender, the names, content, grammar, typo, and other features. Do not open the attachment if you do not have anything in common with the provided information.

Finally, to ensure a full system’s protection, and minimize the risk of a ransomware attack, install a professional antivirus program and make sure it’s always up to date. That's the only way to protect your PC from severe attacks.

Get rid of EncryptedbyBB virus using a professional removal guide

Unfortunately, manual EncryptedbyBB removal is practically impossible. While some questionable “cybersecurity experts” may claim that they will help you to get rid of malicious ransomware without an antivirus, any attempt to change ransom codes or extensions may lead to a permanent data loss.

The only way to remove EncryptedbyBB ransomware virus completely is to install a professional antivirus tool and launch a full system scan. We would strongly recommend using one of the following programs: SpyHunterCombo Cleaner or MalwarebytesMalwarebytes.EncryptedbyBB virus infection

Sadly, but EncryptedbyBB removal will not lead to the decryption of personal files. All files with .encryptedbyBB extension will remain unusable. If you have duplicate files on a cloud, then remove damaged data and use the copies. In case you don’t have a single copy, try initiating the steps below to recover your files.

Please note that the EncryptedbyBB virus may try to block your antivirus system. Therefore, you may need to perform the following steps:

Be the first to comment

Spyware news
Privacy preferences

We use cookies to improve your experience and analyze traffic. Some cookies enable embedded content like videos and social posts. Choose what you allow — you can change this anytime.