Skip to content
  • Active
  • Severity: High
  • Ransomware
  • Windows
  • Verified · Feb 2017

How to remove Cockblocker ransomware virus

A step-by-step removal guide for affected devices. Follow the verified procedure below — most readers complete it in under 10 minutes.

Olivia Morelli · Ransomware analyst

CockBlocker ransomware virus acts rowdy. What else is known about this virus?

CockBlocker virus may look like a filthy ransomware-type [1] computer program, luckily though, it is merely a scareware [2] application which imitates ransomware working principles in order to extort some money from the victims. Unlike regular ransomware, it does not encrypt the files it finds on the computer with complex algorithms [3], which means that the files remain structurally unchanged. Nevertheless, the virus still marks all files with .hannah file extension to make them look like they have been encrypted. When the “encryption” is done, the virus drops a lock screen with an insulting message in a RansomwareDisplay.exe program window:

Yo file’s been encrypted n**a
Pays me a bitcoin and I unencrypt them fam

This deceptive program displays the list of the supposedly encrypted files and asks to input a decryption code. However, the virus still seems to be in a development process at the moment, since it does not provide information on how to pay the $732 dollar ransom or how to contact perpetrators. Therefore, we assume that you should make CockBlocker removal a top priority task. To remove CockBlocker virus, run anti-malware software. If you do not have it, consider installing FortectIntego or SpyHunterCombo Cleaner. It is believed that this ransomware is going to be improved anytime soon, but in case you become a victim of this malware, do not consider paying the ransom. In quite a lot of cases, victims who pay up never receive the decryption tool. Besides, just recently, ransomware investigators have announced some good news on how to terminate the lock screen and get back the access to the computer. You simply have to enter not_a_backdoor into the blank space provided on the lock screen and hit “Use Decryption Code”. 

CockBlocker ransomware

How can you get infected with this ransomware?

Your computer might become contaminated with CockBlocker malware if you tend to browse the Internet carelessly, without thinking about general Internet hazards. You must understand that the world wide web offers a lot of interesting content, but it also provides a lot of dangerous content as well. Browsing the Internet notwithstanding the impeding danger is like walking through a minefield. One click on a malicious link or one email attachment can entirely mess up your computer system and take your precious files away from you. If you do not want that to happen, try to stay away from suspicious or vague content online. Especially pay attention to emails that you receive. Never open files sent to you from unknown people or organizations. In many cases, criminals pretend to be someone they’re not, so do not believe that someone is writing to you from Amazon or Paypal before checking sender’s email online [4]. Also, stay away from sites that aggressively ask you to install software updates, browser extensions, add-ons, and similar software. No one should be pushing you to install anything – if someone does, there is a great chance they want to infect your computer with CockBlocker or any other type of malware.

How to remove CockBlocker virus?

CockBlocker removal can be completed using anti-malware tools. It is not recommended to test your malware removal skills by experimenting with this virus because it is not a regular program and unlike ordinary and legitimate programs, it can hardly be removed via Control Panel. To remove CockBlocker virus, follow instructions provided below. You need to prepare the computer for this procedure. After removing the virus, take a look at data recovery tips provided below the removal tutorial.

Did this guide help?

5 comments

  1. Johny

    Bizarre ransomware. Just bizarre.

  2. Orinta

    Not funny, especially if you get hit by this ransomware... My little brother somehow managed to download this junk virus to his computer and now he cannot do anything on it anymore. at first he laughed at the ransom note, but when he realized that hes not gonna access his games and videos again, he stopped. at least entire family now knows what ransomware is...

  3. Hannibal91

    Nothings helps to restore files.. Theyre lost as soon as they get encrypted!

  4. skrillex

    I wish I had a backup. Now my hands are tied - I am not going to pay the ransom, but I am also not getting my files back. Sad.

  5. Lank

    Or you could enter the decryption key as shown by the creator of the program, which is "not_a_backdoor" and BAM everything is back to normal, youre welcome.

    Evidence: https://twitter.com/_kmonica/status/805143676745904129

Spyware News
Privacy preferences

We use cookies to improve your experience and analyze traffic. Some cookies enable embedded content like videos and social posts. Choose what you allow — you can change this anytime.