VBRansom 7 ransomware-affected file
File type: Ransomware encrypted file
A .vbransom file is a file renamed by the VBRansom ransomware.
VBRansom adds the .vbransom suffix but does not encrypt the affected files.
File type category:
Ransomware encrypted file
Date updated: October 14, 2026
The .vbransom file extension is associated with VBRansom, a ransomware program written in Visual Basic .NET. The ransomware renames affected files by adding the suffix to their existing filenames.
Unlike ransomware that encrypts data, VBRansom does not encrypt the affected files. The files therefore retain their original contents and formats, and the added suffix is the main change made to their names.
First ensure that VBRansom and any related malware have been removed. Then remove the .vbransom suffix from each affected filename, leaving the original extension intact. For example, rename document.docx.vbransom to document.docx.
After the original extension has been restored, open the file with the program normally associated with its original format.
A .vbransom file does not require conversion because VBRansom does not encrypt the file contents. Remove the added suffix to restore the original filename, then use the original file format's software if an export or conversion is needed.
Language