Lordofshadow Ransomware Removal Guide

Do you know what Lordofshadow Ransomware is?

Lordofshadow Ransomware might infect the computer after launching questionable email attachments or installers downloaded from untrustworthy file-sharing web pages. The malicious application works silently on the system, so the user might not even notice that anything happened. Unfortunately, while the user is unaware the malware has entered his system, it should encrypt all important data found on the computer to make it unusable. Afterward, the threat should not hide any longer as it is supposed to display a ransom note demanding for you to contact Lordofshadow Ransomware’s creators and learn how to purchase decryption tools. Our researchers advise not to trust these cyber criminals because it is entirely possible they could trick you. Therefore, instead of giving your money to the hackers, we propose removing the malware from the system. If you think this option is better too, hesitate no more, and follow the removal guide presented below the article.

First of all, we should mention the malicious program might be targeted only at people who understand French. The reason we think this way is because our researchers noticed the ransom note Lordofshadow Ransomware creates might be written just in French without any translation to English or other languages. The ransom note is called LEIA_ME.txt, and it could be dropped on the user’s Desktop; however, according to our researchers, this should happen only after the infection encrypts all targeted data. Sadly, it appears to be the threat is after a lot of different file types, e.g., pictures, text and other documents, videos, music files, and much more. The only good news is the malware should not damage data belonging to the device’s operating system or possibly files associated with other software as well.

It is easy to recognize encrypted data since all targeted files should have a specific second extension at the end of their titles, e.g., forest.jpg.lordofshadow, birthday_moments.avi.lordofshadow, and so on. The mentioned ransom note says the user can recover such data by writing an email to lordashadow@gmail.com. What the text document does not say is that the reply from the hackers might reveal you have to pay for the decryption tools. Even if the sum does not look like a lot, we would still advise you not to pay. There are no guarantees the cyber criminals will be willing to help you and if they decide not to bother you could be left not just without the decryption tools, but also without the money you paid. In fact, given the server Lordofshadow Ransomware should connect to during the encryption to save the unique decryption key, is currently offline, it could be that the hacker may no longer have access to it. It means the decryption might be impossible. This is why we recommend deleting the malware instead of risking your savings.

Provided you do not wish to keep Lordofshadow Ransomware on your computer; we can offer you the removal guide located below this text. If you follow it step by step, you might be able to erase the malicious program manually. There is one other way to eliminate it as well. If you are willing to acquire a reputable antimalware tool, you could scan the infected computer with it. Besides, the malware, there might be other possible threats too, so the best part about the antimalware tool is that it can help users erase all detections at the same time. This method could be a bit easier too; thus, if you are less experienced you may wish to consider it.

Erase Lordofshadow Ransomware

  1. Tap Ctrl+Alt+Delete.
  2. Choose Task Manager.
  3. Navigate to the Processes tab.
  4. Look for a process belonging to this malicious program.
  5. Click the harmful process to select it and press the End Task button.
  6. Leave the Task Manager.
  7. Press Windows key+E.
  8. Go to your Desktop, Temporary Files, and Downloads folders.
  9. Find a harmful file that infected the computer.
  10. Right-click the suspicious file and select Delete.
  11. Locate a file named LEIA_ME.txt or similarly, right-click it and tap Delete.
  12. Exit File Explorer.
  13. Empty your Recycle bin.
  14. Restart the computer.

In non-techie terms:

Lordofshadow Ransomware is a dangerous computer threat, although it does not do any damage to the device itself. This type of malicious software targets user’s private files located on the infected PC. By encrypting them, the malware takes your data as a hostage in the hope you will agree to pay a ransom for its decryption. The problem is, there is always a risk, the cyber criminals may not keep up to their word, which means instead of getting decryption tools you could end up not just without them, but also without the transferred money. If you would not like to end up in such a situation we recommend not to put up with any demands and eliminate the malicious program at once. Users can learn how to delete it manually by following the removal guide available above.