Locky Locker Ransomware

Posted by Max Lehmann on August 7, 2018

What is Locky Locker Ransomware?

Locky Locker Ransomware is a computer infection that tries to scare users into giving away their money. As you can obviously tell from the title, this program is an encrypting ransomware application, so it will encrypt your files. While a public decryption tool is not available at the moment, it does not mean that you have to pay the ransom to decrypt your files. It is strongly recommended that you remove Locky Locker Ransomware from your computer instead, and then look for alternative methods to restore your files. Please bear in mind that sometimes users are left with no other choice but to start anew. test test

Where does Locky Locker Ransomware come from?

It might look like Locky Locker Ransomware is related to Locky Ransomware, which is a rather prominent computer infection. However, our research suggests that this program merely impersonates Locky Ransomware to make itself look more formidable. On the other hand, it doesn’t mean that Locky Locker Ransomware cannot encrypt your files because the program performs this task quite well.

That being said, the infection clearly uses the most common methods to reach its victims, and we can assume that it mostly spreads through spam email messages. It also means that users tend to get infected with Locky Locker Ransomware when they accidentally open the installer files.

It is somewhat discouraging, having in mind that the efforts to educate regular computer users about cyber threats have been made throughout the years. And yet, we still see a number of users getting tricked into opening phishing emails that carry ransomware installers. The simplest way to protect yourself from such infections is to delete emails from unfamiliar parties immediately. What’s more, it is always possible to scan the attached files with a security tool of your choice before opening them. So do take those few minutes of your time to check whether the files you are about to open are safe or not. After all, you might be protecting yourself from Locky Locker Ransomware.

What does Locky Locker Ransomware do?

As expected, this program is a regular encrypting ransomware infection that runs a full system scan the moment it enters a target computer. The program looks for all the types of files it can encrypt, and then it launches the encryption that locks up most of the files it can find in the default user folders. During the encryption, it adds the locky extension to all of the affected files. So once the encryption is complete, you will recognize which files were affected by it almost immediately. Not only will it change the file icon, the filename will be different, too. As a result, the system will no longer be able to read the encrypted files.

Aside from encrypting your files, Locky Locker Ransomware will also drop an instructions file under the LOCKY_README.TXT filename. The file contains the ransom note that says the following:

All your files, pictures document and data has been encrypted with Military Grade Encryption RSA AES-256.
Your information is not lost. But Encrypted.
In order for you to restore your files you have to purchase Decrypter.

Follow this steps to restore your files.
1* Download the Tor Browser. ( Just type in google “Download Tor” ).
2* Browse to URL : hxxp://4wcgqlckaazugwzm.onion/index.php
3* Purchase the Decryptor to restore your files.

As you can see, the infection requires you to pay the ransom fee, so you could get the decryption key. Will it really issue the key if you transfer the money? That is highly doubtful because the program might not be able to connect to its control and command center in the first place.

How do I remove Locky Locker Ransomware?

Upon the installation, this program does not drop any additional files, so it is not hard to terminate it. You just need to delete the file that launched the infection, so you have to check the directory where you save downloaded files.

If you are not sure which file needs to be removed, scan your computer with the SpyHunter free scanner. The scanner will list all the potentially harmful files, and you will be able to terminate them automatically. Do everything you can to clean your system and then safeguard them from other potential threats.