Lordofshadow Ransomware

Lordofshadow Ransomware is a newly released ransomware-type computer infection designed to encrypt your personal files and demand that you pay money to get them back. It is just like thousands of other ransomware-type malware dedicated to extracting money from you. It can target and encrypt many of you personal and, thus, valuable files to compel you to pay the ransom. However, the cybercriminals might not hold their end of the deal and send you the decryptor/decryption key. Therefore, we recommend that you remove it from your PC as fast as possible. However, if you want more information on this ransomware, please read this whole article.

We have concluded that Lordofshadow Ransomware is yet another Hidden Tear Ransomware-based program, so it should be quite similar to Technicy Ransomware, Onion3Cry Ransomware, VideoBelle Ransomware, and many others. The source code of the original Hidden Tear Ransomware was released by its developers which resulted in cybercriminals using it as a basis to create their own malware and distribute it whichever way they please. It is worthy of a note that this ransomware was designed to target Portuguese and Brazilian users specifically.

As far as its distribution methods are concerned, we believe that this ransomware’s creators use email spam to infect the computers of unwary users. The emails can be disguised as legitimate and masquerade as receipts, business-related correspondence, and so on. The infection can be disguised as a DOC or PDF document. If you open the fake document (which can be zipped,) then your PC will become infected with Lordofshadow Ransomware, and then it will start doing its dirty work.

We believe that this application was set to encrypt files using Advanced Encryption Standard (AES) which ensures a strong encryption. Among the many files types that this ransomware was designed to encrypt we find ".jpg", ".jpeg", ".ppt", ".pot", ".pps", ".pptx", ".flv", ".mpg", ".wmv", ".zip", and ".7zip." Hence, it is evident that this particular ransomware can encrypt your documents, file archives, pictures, audios, and videos, and other file types. This ransomware’s developers want to encrypt as many of your valuable files as possible. It was set to append the encrypted files with at ".lordofshadow" extension.

Once the encryption has been completed, Lordofshadow Ransomware drops a ransom note on the desktop named "LEIA_ME.txt" The note is in the Portuguese language, so it is evident that this ransomware targets users in Portuguese-speaking countries. The note says that you need to send an email to lordashadow@gmail.com to get your files back, but we guarantee that the criminals will ask you to send them Bitcoins to decrypt your files. We urge you not to pay because they can scam you an not send the decryption tool.

Therefore, we recommend that you remove Lordofshadow Ransomware from your computer and not attempt to pay the ransom because you might loose your money as well as your files. We recommend that use our manual removal guide or an anti-malware program such as our featured SpyHunter anti-malware tool that can detect and delete this ransowmare automatically.

Removal Guide

1. Press Windows+E keys on your keybord.
2. In the File Explorer’s address box, type the following file paths.
   • %USERPROFILE%\Desktop
   • %USERPROFILE%\Downloads
   • %TEMP%
3. Press Enter.
4. Locate a randomly-named malicious file.
5. Right-click it and click Delete.
6. Empty the Recycle Bin.