Today some PCs have become infected by a certain virus called Locker. It acts like a typical ransomware, but also it encrypts some of your important files. As a result, users may be unable to use these files, yet they will do have a chance to continue using their computer. However, the access to some particular encrypted files will not be available. In this guide you will find some information on how to remove this Locker from your PC. Also, you will get certain links that will lead you to trusted web pages dedicated to fixing this problem and restoring your files, at least partially if not completely.
This ransomware has several variations, such as Locker v1.7, Locker v2.16, Locker v2.30, Locker v3.53, Locker v5.52, etc. It is actively spread in the Internet today. The sad part of the story is that all major antivirus programs today fail to detect this infection ahead of time, thus allowing it to penetrate into the computer. Very often this virus is spread in the Internet through various suspicious emails containing malicious attachments.
As we’ve said above, the infection doesn’t restrict you from using your computer in a regular way. Yet, in indeed encrypts certain information on your hard drive, such as your pictures, Microsoft Word files, and few other file formats. By the way, it doesn’t encrypt video files or PDF documents.
At the same time, for many of us our photos are very important, aren’t they? This is why hackers who stand behind this locker ransomware are quite smart in understanding what needs to be encrypted by them. Right now it’s clear that many users now experience the sad part of their life after this infection attacked their PCs and made it practically impossible to view the pictures of their loved ones, their own selfies, the images of their family members, etc. Plus, the majority of their documents may also be encrypted like that.
Keep in mind that this locker actually may infect all the drives available in your system. The good part of the story is when you have some backup of your information available at certain storage like cloud or hard drive facilities. Many users today actually report that it is practically impossible to get those files unlocked except for actually paying the ransom. Here is the example of the text used by this locker:
All your personal files on this computer are locked and encrypted by Locker v2.30. The encrypting has been done by professional software and your files such as: photo’s, video’s and cryptocurrency wallets are not damaged but just not readable for now. You can find the complete list with all your encrypted files in the fields tab.
The encrypted files can only be unlocked by a unique 2048-bit RSA private key that is safely stored on our server till 5/28/2015 12:27:44 AM. If the key is not obtained before that moment it will be destroyed and you will not be able to open your files ever again.
Obtaining your unique private key is easy and can be done by clicking on the payment tab and pay a small amount of 0.1 BTC to the wallet address that was created for you. If the payment is confirmed the decryption key will be send to your computer and the Locker software will automatically start the decrypting process. We have absolutely no interest in keeping your files encrypted forever.
You can still safely use your computer, no new files will be encrypted and no malware will be installed. When the files are encrypted Locker v2.30 will automatically uninstall itself.
Warning any attempt to remove damage or even investigate the Locker software will lead to immediate destruction of your private key on our server.
The only conclusion we recommend you to make out of the information above is as follows. Make sure you have the backup copies of all your important data, such as pictures and valuable documents. This backup storage, of course, must not be connected to your computer. If the decrypted data is especially valuable to you, it might be that you will come to the conclusion to actually pay that ransom, however, there’s no guarantee that these hackers will fulfill their part of their fraudulent deal. We recommend you to scan your PC with GridinSoft Trojan Killer, remove all the infections it finds on your computer (with its registered version), and to follow this guide dealing with this Locker ransomware in more details. This tutorial in the link might give you more helpful information dedicated to this issue. Good luck!