I wrote this article to help you remove Love.server@mail.ru. This Love.server@mail.ru removal guide works for all Windows versions.
Hello,
I crypted all your important data
I stored the crypted data in your hard disk.
If you want to become your date back, send me an email containing your ip adress.
Your ip adress: [your real IP address]
Email: love.server@mail.ru
If you see this message on your monitor, it means that you are in big trouble. You have been infected with a nasty ransomware infection. However, this parasite, dubbed the LoveServer Ransomware based on the email address it provides, does stand out from its relatives. Of course, its main goal remains the same – your money. And its way of getting it is pretty standard as well – by extortion. But LoveServer is more of a Trojan with encrypting capabilities that a usual ransomware.
Unlike most ransomware threats which encrypt each file individually and append a pesky extension, this one uses a different method. Instead of locking all of your files one by one, LoveServer takes all of them and adds them to an archive. Of course, the archive is password-protected. It is named ‘BACKUP DONT DELETE’ and it doesn’t have any extension added. Each folder that contained your data before it still on your PC but it is empty.
All of your files, pictures, videos, music, documents, presentation, etc. are in the archive. And if you what them back you have to pay a ransom. This is when the email address from the message comes in hand. You are asked to get in touch with the crooks so they can send you detailed instructions on how to make the payment. After that, the cybercriminals promise to send you the password needed to free your data. Don’t contact these people no matter what. Nothing good will come out of this. Let`s say that you pay up but the crooks don’t deliver.
How can you be sure that they will send you the password? You cannot. There is no guarantee that these people will keep their end of the deal whatsoever. You will end up double-crossed with no money and still locked data. The only thing that would change is that the money you sent will be used for nothing but more malware creation. Do you want to help hacker expand their business? Do you want to become their sponsor? We doubt it. And even if they do send you the pass, you still lose. There is no scenario in which you can come out as a winner. Why?
Well, suppose you pay and they give you the password to unlock the archive. But then what? The nasty LoveServer is still on your PC. You didn’t remove it and it can strike again anytime. How many time are you willing to pay up to free your files? Because crooks can go on and on. After all, it is your money what they are after. That’s why the only way to end this is to permanently delete the pest from your machine so its author cannot get a hold of you. Not to mention that by paying you do not only fill crooks` pockets but you are also jeopardizing your private information. By contacting them via the love.server@mail.ru email address you are granting them access to your private life. They can even get their hands on your identifiable and financial details. Don’t allow this to happen. Use our removal guide at the end of this article and clean your PC of this ransomware/trojan.
However, there is one more very important question left. How did LoveServer enter your system? Well, such infections need your permission to get in which means that you must have given it at some point. But don’t rush blaming yourself. The ransomware doesn’t ask you for permission straightforward. Of course not. This way you will absolutely stop it from slithering. Instead, it uses trickery and deception. It hides behind freeware, bogus program updates, corrupted links/ads/torrents/pages. Not to forget the spam emails attachments as well. The means of infiltration are many but none of them is good to succeed without something else. Your carelessness.
All cyber threats NEED your negligence. Otherwise, they can never enter. Be more careful. Think twice before opening/clicking/agreeing to something. Remember that preventing an infection is much easier that dealing with it later.
Love.server@mail.ru Removal
Method 1: Restore your encrypted files using ShadowExplorer
Usually, Love.server@mail.ru deletes all shadow copies, stored in your computer. Luckily, the ransomware is not always able to delete the shadow copies. So your first try should be restoring the original files from shadow copies.
- Download ShadowExplorer from this link: http://www.shadowexplorer.com/downloads.html.
- Install ShadowExplorer
- Open ShadowExplorer and select C: drive on the left panel
- Choose at least a month ago date from the date field
- Navigate to the folder with encrypted files
- Right-click on the encrypted file
- Select “Export” and choose a destination for the original file
Method 2: Restore your encrypted files by using System Restore
- Go to Start –> All programs –> Accessories –> System tools –> System restore
- Click “Next“
- Choose a restore point, at least a month ago
- Click “Next“
- Choose Disk C: (should be selected by default)
- Click “Next“. Wait for a few minutes and the restore should be done.
Method 3: Restore your files using File Recovery Software
If none of the above method works, you should try to recover encrypted files by using File Recovery Software. Since Love.server@mail.ru first makes a copy of the original file, then encrypts it and deletes the original one, you can successfully restore the original, using a File Recovery Software. Here are a few free File Recovery Software programs:
