Sunteți pe pagina 1din 6

4/18/2016

HowtoremoveLockyvirusanddecrypt.lockyfiles|BugsFighter

Home

Downloads

Reviews

Tutorials

Contacts

MARCH 17, 2016 JAMES KRAMER

How to remove Locky


virus and decrypt .locky
les
What is Locky virus

About

SEARCH

READ IN OTHER
LANGUAGES
English

by

Locky is ransomware virus that encrypts you files using the


RSA-2048 and AES-1024 algorithms and demands 0.5 BTC
(bitcoins) (equivalent to $207) for receiving Locky
Decrypter to allow user decrypt his documents and
images. This is very dangerous blackmailing virus and there
are currently only few ways to decrypt your files. In this

HELPFUL LINKS
Reset Google Chrome
Reset Mozilla Firefox

guide we collected all information available that can help


you remove Locky ransomware virus and restore infected

Reset Internet

files.

Explorer

DOWNLOAD
ANTIMALWARE

Bycontinuingtousethesite,youagreetotheuseofcookies.moreinformation

Accept

How Locky virus infected your PC


https://www.bugsfighter.com/removelockyvirusdecryptlockyfiles/

1/6

4/18/2016

HowtoremoveLockyvirusanddecrypt.lockyfiles|BugsFighter

Locky virus spreads via spam e-mail attachments as .doc or


.xls file. Texts of these e-mails try to ensure user that
attachments contains important invoice. Aer downloading
it asks user to enable macros to be able to see the contents
of the document. This macros downloads and runs
executable file that starts encrypting user files. Aected
files names are modified to unique 16 letter and digit
combination with a .locky file extension. Then Locky virus
opens _Locky_recover_instructions.txt file with instructions
and URLs that lead to The Locky Decrypter Page.

CATEGORIES
Adware
Pop-ups
Ransomware
Reviews
Rogue/Fake
Toolbars&Hijackers
Tutorials
Unwanted Apps
Viruses

RECENT POSTS
How to remove Cerber
ransomware and decrypt
.cerber files
How to remove Safe
Finder
How to remove MPC
Cleaner
How to remove DNS
Unlocker
How to remove
Newsearch123.com

Download Locky Virus Removal


Tool
DownloadRemoval
Tool
To remove Locky Virus completely we recommend you to
use SpyHunter from EnigmaSoware Group LLC. It detects
and removes all files, folders and registry keys of Locky
https://www.bugsfighter.com/removelockyvirusdecryptlockyfiles/

2/6

4/18/2016

HowtoremoveLockyvirusanddecrypt.lockyfiles|BugsFighter

Virus.

Alternative remover
DownloadMalwarebytesAntiMalware
As a good free alternative to remove Locky Virus use
Malwarebytes Anti-Malware. It will detect core files and
processes of Locky ransomware and eliminate them to
allow you start decryption of your files.

How to remove Locky virus


manually
It is not recommended to remove Locky virus manually,
for safer solution use Removal Tools instead.

Locky virus les:

%UserpProfile%\Desktop\_Locky_recover_instructions.bmp
%UserpProfile%\Desktop\_Locky_recover_instructions.txt
%Temp%\[random].exe

Locky virus reg keys:

HKCU\Software\Locky
HKCU\Software\Locky\id
HKCU\Software\Locky\pubkey
HKCU\Software\Locky\paytext
HKCU\Software\Locky\completed1
HKCU\ControlPanel\Desktop\Wallpaper
"%UserProfile%\Desktop\_Locky_recover_instructions.bmp"

How to decrypt and restore .locky


les
https://www.bugsfighter.com/removelockyvirusdecryptlockyfiles/

3/6

4/18/2016

HowtoremoveLockyvirusanddecrypt.lockyfiles|BugsFighter

There is no purpose to pay the ransom, because there


is no guarantee you will receive the key, but you will
put your bank credentials at risk.
If you are infected with Locky ransomware and removed it
from your computer you can try to decrypt your files.
Antivirus vendors and individuals create free decryptors for
some cryptolockers. However, there is currently no
automatic decryption tool for .locky files. To attempt to
remove them you can do the following:

Using Windows Previous Versions option:


1. Right-click on infected file and choose Properties.
2. Select Previous Versions tab.
3. Choose particular version of the file and click Copy.
4. To restore the selected file and replace the existing one,
click on the Restore button.
5. In case there is no items in the list choose alternative
method.

Using Shadow Explorer:


1. Download Shadow Explorer program.
2. Run it and you will see screen listing of all the drives and
the dates that shadow copy was created.
3. Select the drive and date that you want to restore from.
4. Right-click on a folder name and select Export.
5. In case there is other dates in the list choose alternative
method.

If you are using Dropbox:


1. Login to the DropBox website and go to the folder that
contains encrypted files.
2. Right-click on the encrypted file and select Previous
Versions.
3. Select the version of the file you wish to restore and
https://www.bugsfighter.com/removelockyvirusdecryptlockyfiles/

4/6

4/18/2016

HowtoremoveLockyvirusanddecrypt.lockyfiles|BugsFighter

click on the Restore button.

How to protect computer from


viruses like Locky in future
Use Malwarebytes Anti-Ransomware Beta
Malwarebytes Anti-Ransomware Sne...

Famous anti-malware vendor Malwarebytes along with


EasySync Solutions created tool that will help you with
active anti-ransomware protection as additional shield to
your current protection.
DownloadMalwarebytesAntiRansomware
Beta

Use HitmanPro.Alert with CryptoGuard


HitmanPro.Alert 2.5 with CryptoGuar...

Dutch vendor of legendary cloud-based scanner HitmanPro


https://www.bugsfighter.com/removelockyvirusdecryptlockyfiles/

5/6

4/18/2016

HowtoremoveLockyvirusanddecrypt.lockyfiles|BugsFighter

Surfright released active antivirus solution


HitmanPro.Alert with CryptoGuard feature that eectively
protects from latest versions of cryptoviruses.
DownloadHitmanPro.AlertwithCryptoGuard
RANSOMWARE, VIRUSES
DECRYPT .LOCKY FILES, REMOVE LOCKY
RANSOMWARE, REMOVE LOCKY VIRUS, RESTORE .LOCKY FILES

Leave a Reply

Name *
Email *
Website
SubmitComment

BugsFighter.com 2016

https://www.bugsfighter.com/removelockyvirusdecryptlockyfiles/

6/6

S-ar putea să vă placă și