Skip to content
  • Active
  • Severity: High
  • Ransomware
  • Windows
  • Verified · Nov 2016

How to remove Wicked Locker HT ransomware virus

A step-by-step removal guide for affected devices. Follow the verified procedure below — most readers complete it in under 10 minutes.

Julie Splinters · Anti-malware specialist

The developers of HiddenTear launch Wicked Locker HT virus

Wicked Locker HT virus has recently entered the virtual arena. The IT specialists have discovered that it is an improved version of another file-encrypting menace called HiddenTear 2.0 virus. Once it invades the system, it encrypts the files using AES encryption algorithm. By launching repetitive cycles of plaintext and cipher text, the virus is able to encrypt victim‘s files. As a result, decrypting the files becomes a complicated task even for IT professionals. Nonetheless, there is no need to panic even if your computer got into the list of targets. You can remove Wicked Locker with the help of an anti-spyware tool, for example, FortectIntego. There is no need to delay the process as the threat entangles the system even more. More about Wicked Locker removal, you can find in the last section of this article.

The structure of this ransomware does not differ much from the rest of ransomware viruses. It operates via command and control servers. With their help, a different email address might be generated for the communication needs with the victims. However, in the majority of cases, wickedhosting@gmx.com was detected as the label of Wicked Locker HT malware. After the malware succeeds in invading a computer, it sets out to encode the files. Therefore, within seconds, you mays see that all your files bear .locked extension. The latter has been used by multiple viruses, ranging from its original distributor, Locky, to other threats, such as Anonymous virus. As usual, for this type of viruses, the current infection also uses Bitcoin address for receiving the ransoms. However, remitting the payment might be futile as the hackers do not give any guarantees of sending the decrypter. In READ_IT_0.txt, READ_IT_1.txt and READ_IT_24.txt files, the crooks indicate one bitcoin (approximately 600 USD) as the amount of money for victims to pay in exchange for the data. Within this year, hackers already made over $1.45 billion profit. Therefore, relying on users’ conscience is futile.

The screenshot of Wicked Locker HT virus

How is WickedLocker HT malware distributed?

Its transmission techniques are not of particular interest. It still fishes for the victims by disguising in a fake delivery package, invoice files, and tax reports. Unfortunately, the virtual community still carelessly opens up the attacked contents of spam messages without even questioning the possibility of Wicked Locker HT hijack or other virus assault. Consequently, still, a high number of users become the victims of ransomware. Reviewing spam messages should not be your priority. Even if you do it, do not rush to launch .doc. .scr, .js, or .exe files as they might be just a disguise for the ransomware to invade the computer.

Wicked Locker HT elimination guidelines

It is not difficult to remove Wicked Locker HT virus if you run a security tool, for example, FortectIntego or MalwarebytesMalwarebytes. Check whether the applications have the newest virus definitions and launch the scan. In some cases, without renewing the database, the software may fail to detect the ransomware all its related elements. It is not surprising if you encounter some Wicked Locker HT removal problems. Specifically, after downloading the programs, they might be forcefully shut down or inactive due to the virus interference. In that case, follow our guidelines. Below the access restoration instructions, you will get acquainted with the additional tools suitable for data decryption.

3 comments

Spyware news
Privacy preferences

We use cookies to improve your experience and analyze traffic. Some cookies enable embedded content like videos and social posts. Choose what you allow — you can change this anytime.