Bass-fes Ransomware

Bass-fes Ransomware, short for "BitchASS File Encryption System," is a malicious program that can encrypt your files and demand an insanely high ransom fee for the decryption. As a matter of fact, this threat does not really seem like the work of professional hackers since most of the code is a copy of the open-source project called Hidden Tear Ransomware. Fortunately, this open-source ransomware also has a decryptor, which you might be able to use with success to decrypt your files because this new variant does not strike us as a very sophisticated threat. However, we cannot confirm that the decryptor will surely work. If you are not a computer savvy, maybe you should ask a friend to help you with this. In any case, we do not believe that private computer users would have the kind of capital these cyber crooks demand from you to pay. Hopefully, you have a backup that you can use now. But first, you need to remove Bass-fes Ransomware from your computer.

This ransomware program is mostly distributed via spam mails; although, it does not seem to spread too widely as yet. So if you are infected with this beast wannabe, you must have opened a spam and clicked to view its attachment. This attached file can pose as an image, a document with macro, or a .zip file. Victims open this file and this spam because they are led to believe that this mail and the information it may contain is urgent and important to see. This spam may relate to a credit card issue, an unsettled invoice, or an undelivered parcel. But it can be any issue that would draw people's attention. Once you open this mail, you will most likely click to view the attachment as well since the message itself usually does not contain any useful piece of information. However, you need to understand that after running this attachment, there may be no way for you to delete Bass-fes Ransomware without losing your files. Removing this malicious program does not mean that your encrypted files will become decrypted. You could get lucky though this time and you might be able to use a free decryption tool developed to decrypt files encoded by Hidden Tear.

Our tests show that this ransomware program uses the AES algorithm to encrypt your files. However, instead of targeting your personal files all over your hard disk, this malware infection only attacks these default directories and their subfolders:

• %USERPROFILE%\Desktop
• %USERPROFILE%\Downloads
• %USERPROFILE%\Documents
• %USERPROFILE%\Pictures
• %USERPROFILE%\Music
• %USERPROFILE%\Videos

The encrypted files also append a ".basslock" extension to the original name. This should help you to be able to understand the extent of encryption on your computer if you run a search on this extension. If you are a more experienced user and do not use these basic default media directories to store your files, chances are your files have been untouched by this threat. This infection drops a ransom note text file called "BASS File Encryption Service Notice.txt" on your desktop. This note informs you that your files have been encrypted and the only way for you to be able to recover them is to pay the insane amount of 1 BTC, which is currently 9,833 USD, to the given Bitcoin address. Then, you have to send an e-mail to "bitchasshole@protonmail.com" with your Bitcoin address and after a day or so you should get the reply with your decryption key. As a matter of fact, this huge amount is usually demanded when criminals target large corporations like private hospitals and IT firms, or when the attackers are plain rookies in hope for a quick way to get rich. In any case, we do not advise you to pay and not only because of the possibility of wasting nearly 10 thousand dollars of your hard-earned money. We recommend that you remove Bass-fes Ransomware immediately from your computer.

It is not too complicated to eliminate this ransomware program. If you follow our instructions below, you may be able to clean your system of this annoying threat. Please note that this alone will not give you your files back. You need to try to employ a decryption tool designed to recover files encoded by Hidden Tear variants. We do not advise you to do this alone if you are not an advanced user though. If you would like to defend your PC more effectively, we suggest that you install a trustworthy malware removal program, such as SpyHunter.

How to remove Bass-fes Ransomware from Windows

1. Press Win+E.
2. Locate and remove the malicious .exe file you downloaded and run.
3. Delete any other files that seem suspicious.
4. Bin the ransom note file from your desktop.
5. Empty your Recycle Bin.
6. Reboot your PC.