Oblivion Ransomware Removal Guide

Do you know what Oblivion Ransomware is?

If you are careless enough, you might invite Oblivion Ransomware into your operating system without really knowing it. The infection’s launcher could be concealed using bogus file icons and misleading installers, and cyber criminals behind it could exploit known security vulnerabilities to let this infection in. If the infection slithers in without your notice, it can quickly encrypt your most valued personal files to use them as leverage. Once files are encrypted, the infection makes a demand for a ransom, and it is suggested that files would be decrypted if the demands were met. Of course, trusting cyber criminals and their promises is extremely risky. In this report, we discuss how to remove Oblivion Ransomware, as well as other important details about this infection. If you are interested, keep reading.

Oblivion Ransomware is also known as Scarab-Oblivion Ransomware, and when it slithers into the operating system and encrypts the files it is after, it adds the “.OBLIVION” extension to the corrupted files. Unfortunately, the infection also renames these files, which can make it impossible for you to assess the situation correctly. Hopefully, you do not need to worry about the corrupted files at all because you have backup copies stored somewhere safe (whether externally or online). If that is not the case, it is most likely that your files are lost for good. Sure, you could try different free file decryptors, but one that would work did not exist at the time of research. You might also be interested in paying the ransom requested by Oblivion Ransomware, but that is something we do not recommend doing because your money is unlikely to help you obtain a legitimate file decryptor.

According to the ransom note that is delivered using the “OBLIVION DECRYPTION INFORMATION.TXT.” The message within the file informs that you need a decryption tool to recover personal data, and that to obtain the tool, you need to email obliviondecrypt@cock.li or obliviondecrypt@protonmail.com. As you can see, these email addresses were set up by the creator of the ransomware. They also use the Telegram Messenger to set up communication with their victims. Note that if you contact the creator of the ransomware, they could send you malicious files or push you into disclosing personal information about yourself. Therefore, if you are not willing to waste your money, you should not even contact the cyber criminals. If you do, they will send you a Bitcoin Wallet Address and a specific sum of money that you need to transfer to it. Needless to say, we suggest focusing on the removal of this malware.

Deleting Oblivion Ransomware is not easy. First of all, you might be hesitant to make your move in fear of jeopardizing your personal files. Unfortunately, if they were encrypted, and you do not have backups, it is unlikely that there is a way for you to recover them. Even if you pay the full price demanded by cyber criminals, it is unlikely that you would get your files decrypted. Therefore, you should focus on erasing this malware instead. You can use the instructions below, but we cannot guarantee that you will be able to erase the threat successfully because its launcher could be placed anywhere, and identifying it could be difficult. What should you do if manual removal is not an option? In this case, we advise using an anti-malware program. It will automatically find and delete every single malicious component.

Remove Oblivion Ransomware

  1. Find and Delete the launcher of the ransomware ({unknown name}.exe). It is possible that you could find it in these directories:
    • %USERPROFILE%\Desktop
    • %USERPROFILE%\Downloads
    • %TEMP%
  2. Delete all copies of the OBLIVION DECRYPTION INFORMATION.TXT file.
  3. Scan the system using a legitimate malware scanner to make sure you have not overlooked any malicious components. If you have, you must delete them ASAP.

In non-techie terms:

If you have time to install trustworthy anti-malware software and back up your personal files, you need to make sure that you do it as soon as possible. Oblivion Ransomware is a dangerous threat, and you need to make sure that you protect yourself against it. If it slithers in and encrypts your files, you might have nothing else to do but delete Oblivion Ransomware, and, unfortunately, that does not mean that your files will be decrypted. In fact, file decryption is unlikely to be possible at all, which is why it would be ideal if you had your files backed up. If that is not the case, make sure you start backing up data in the future to prevent further losses. Ultimately, whether or not you get your files back, removing the ransomware is extremely important, and we strongly suggest using anti-malware software for it.