Merry I Love You Bruce File Virus Removal (+Recover Files)

How to Remove Merry I Love You Bruce Ransomware?

We’ve come across thousands of ransomware infections. There were viruses named Locky, Thor, Odin, Heimdall, Aaesir. There were 6 versions of Cerber. There were viruses that add extensions such as .marlboro, .braincrypt, .merry, etc. In other words, hackers could create some really bizarre ransomware-type programs. The parasite you’re stuck with right now is yet another original infection. It adds the Merry_I_Love_You_Bruce extension to the files it encrypts. There must have been a better way for a love confession than creating a parasite. Especially ransomware. Unfortunately, ransomware is so notoriously dreaded for a reason. Not only are file-encrypting infections secretive and sneaky but aggressive as well. As soon as the virus lands on board, it immediately starts wreaking havoc. You will very quickly realize what you’re dealing with. This pest firstly performs a thorough scan of your computer. By doing so, it finds all your data. Yes, all your data. That includes photos, music, favorite videos, important documents, etc. Ransomware is aiming at your personal files and it doesn’t discriminate. Once the target data is located, encryption begins. Ransomware programs use strong encrypting ciphers and this virus is no exception. It effectively locks every single bit of information stored on your PC. Obviously, such a trick could cause you serious damage. The ransomware renames your files. This one in particular adds the Merry_I_Love_You_Bruce extension. How romantic. It would be even more romantic if your files weren’t now inaccessible. Seeing the parasite’s appendix added to your data means the encryption process is over. Your data receives a brand new (malicious) extension. As a result, your computer can’t recognize its new format. That means you’re unable to open, view or use ANY of the private data on your machine. Due to the ransomware’ shenanigans, your files are turned into unreadable gibberish. And that’s not all. While locking your data, the virus also creates detailed ransom notes. You can tell where this is going, can’t you? These ransom messages appear on your desktop as well as in every folder that contains encrypted files. Hackers provide you payment instructions and bombard you with lies. Therefore, you can’t afford to give into panic. Many people become incredibly anxious and worried when faced with ransomware. This is how they fall straight into crooks’ trap. Are you willing to let hackers scam you? No? Then keep on reading.

How did I get infected with?

Despite being exceptionally dangerous, ransomware needs to get properly installed. The thing is, you never agreed to download this pest, did you? Such infections rely on your distraction instead of your cooperation. For example, the virus might have been disguised as a legitimate email or message. Next time you receive some spam email, just delete it. There might be a vicious intruder hiding behind it so pay attention. Ransomware might be presented as a job application or a message from a shipping company. Don’t rush to open such questionable emails/messages. Put your security first. Malware also travels the Web via exploit kits, malicious torrents, fake program updates. It could get attached to some freeware or shareware bundle. To prevent virus infiltration, take your time online. Stay away from what you don’t trust and be careful. Another famous trick involves Trojan horses. They often serve as back doors to file-encrypting infections. Hence, check out your device for more parasites because the ransomware might be having company.

Why is Merry I Love You Bruce dangerous?

To sum up, this program slithers itself on board without your knowledge. It then uses a complicated algorithm to encrypt your personal files. The parasite holds your data hostage and drops payment instructions. Now, according to the ransom notes, hackers would provide you a decryption key. All you need to do is pay a certain sum of money in Bitcoin. Crooks usually demand over 0.5 Bitcoins which equals 452 USD. Furthermore, you should know that paying the ransom guarantees you nothing. It goes without saying that hackers aren’t among the most honorable people out there. The only thing they are interested in is blackmailing you and the decryptor is out of the picture. Ransomware is just another clever attempt for a cyber fraud. Unless you keep that in mind, you may lose your money. Following hackers’ instructions is the very last thing you should do. Keep your money and tackle the ransomware instead. To get rid of this virus for good, please follow our manual removal guide down below.

Merry I Love You Bruce Removal Instructions

STEP 1: Kill the Malicious Process

STEP 2: Reveal Hidden Files

STEP 3: Locate Startup Location

STEP 4: Recover Merry I Love You Bruce Encrypted Files

STEP 1: Stop the malicious process using Windows Task Manager

• Open your task Manager by pressing CTRL+SHIFT+ESC keys simultaneously
• Locate the process of the ransomware. Have in mind that this is usually a random generated file.
• Before you kill the process, type the name on a text document for later reference.

• Locate any suspicious processes associated with Merry I Love You Bruce encryption Virus.
• Right click on the process
• Open File Location
• End Process
• Delete the directories with the suspicious files.
• Have in mind that the process can be hiding and very difficult to detect

STEP 2: Reveal Hidden Files

• Open any folder
• Click on “Organize” button
  
• Choose “Folder and Search Options”
• Select the “View” tab
• Select “Show hidden files and folders” option
• Uncheck “Hide protected operating system files”
• Click “Apply” and “OK” button

STEP 3: Locate Merry I Love You Bruce encryption Virus startup location

• Once the operating system loads press simultaneously the Windows Logo Button and the R key.

• A dialog box should open. Type “Regedit”
• WARNING! be very careful when editing the Microsoft Windows Registry as this may render the system broken.

Depending on your OS (x86 or x64) navigate to:

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] or
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] or
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

• and delete the display Name: [RANDOM]

• Then open your explorer and navigate to:

Navigate to your %appdata% folder and delete the executable.

You can alternatively use your msconfig windows program to double check the execution point of the virus. Please, have in mind that the names in your machine might be different as they might be generated randomly, that’s why you should run any professional scanner to identify malicious files.

STEP 4: How to recover encrypted files?

• Method 1: The first and best method is to restore your data from a recent backup, in case that you have one.

• Method 2: File Recovery Software – Usually when the ransomware encrypts a file it first makes a copy of it, encrypts the copy, and then deletes the original. Due to this you may try to use file recovery software to recover some of your original files.
• Method 3: Shadow Volume Copies – As a last resort, you can try to restore your files via Shadow Volume Copies. Open the Shadow Explorer part of the package and choose the Drive you want to recover. Right click on any file you want to restore and click Export on it.