The Blank Ransomware is a file-encryption Trojan whose authors are not looking to make money thanks to their threatening program. Instead of charging their victims a ransom sum, the authors of the Blank Ransomware are telling the victims to be more careful when they download unknown files from the Web, and that they can help them to recover their files for free. However, due to poor coding, the recovery process that the Blank Ransomware carries out might still end up being annoying since it will leave the majority of the victim’s files with the ‘.decrypted’ extension added to their names. While this is a fixable problem, some users might need to rename thousands of files to get all of their data back to normal.

When the Blank Ransomware is launched on an unprotected computer, it will begin the file-encryption task swiftly, which targets nearly a thousand unique file formats. The authors of the Blank Ransomware have even opted to target configuration files and save the files related to some of the most favored games worldwide. In addition to these game-related files, the Blank Ransomware also will make sure to encrypt documents, archives, spreadsheets, etc.

Even if the authors of the Blank Ransomware weren’t well-intentioned, the victims of this threat would still have been able to restore their files thanks to a free decryption software. This can be possible thanks to the fact that the Blank Ransomware is based on the HIddenTear project, and there are only a few small modifications, which do not concern the file-encryption method used. The Blank Ransomware has been programmed to append the ‘.blank’ extension to all encrypted files, as well as to spawn a new program window as soon as it completes its attack. The window contains a concise ransom message, as well as the password recovery and an auto-decrypt button, which need to be used to reverse the damage done to the victims’ data.
[template:aliases][template:removal][template:technical_title][template:files][template:registry][template:additional]