New ransomware alert – REKTLocker virus. What should you know about it?
The first appearance of REKTLocker ransomware has been registered on August 2016. Once it compromises a computer, it implements RSA-2048 encryption procedure and locks all of the victim’s files. What is more, it adds .rekt file extension to each encrypted record. Encrypted files cannot be opened, edited, or manipulated in any way. Consequently, the virus drops ransom notes and asks to pay a ransom to rescue the encrypted data. Unlike other ransomware viruses, this one does not provide a payment website, but leaves a Bitcoin address in the ransom note (which is a Readme.txt file) and commands the victim to transfer 1 BTC (approximately 590$) to the given address. Authors of REKTLocker malware claim that they have the decryption tool and that the user needs to buy it if he wants to get access to his personal files ever again. That is nothing but a filthy blackmail! The full message is provided below:
Your computer has been encrypted.
Send 1 BTC to 1NuLLtgCmigRb5mXeFgsGDFnVLypLC4a8Y or your files will be permanently encrypted.
Decryptor:
other people’s keys will not work on your computer.
Do not think your antivirus will save you, it will not.
Please do not support criminals by paying them – this is the only way to stop cyber crime. If you paid, they would use your funds for further ransomware projects, and this is exactly what all of us, computer users, do not want to happen. To remove REKTLocker virus, use a strong malware removal program, for instance, FortectIntego. The anti-malware program will not decrypt your files, but it will remove the virus from the computer.
How to decrypt your files?
Unfortunately, REKTLocker decryption tool has not been released yet, but let us tell you something promising. Malware experts research such viruses every day and put great efforts into their work. Sometimes, they come up with decryption tools, but we expect you to be understanding and realize that such analysis cannot be done in a few days or a week. In other words, you have to wait patiently – the decryptor might show up shortly. You can also recover your data from backups, so if you have such, implement REKTLocker removal immediately and plug in the storage device to your PC then.
How does this ransomware spread?
Just like we have mentioned before, this piece of malware spreads via Neutrino and Nuclear exploit kits. This means that if the user has any outdated or vulnerable programs on the system and visits a compromised Internet site, the malware can silently be dropped on the system and executed. To protect your PC from such threats, install a decent anti-malware program and update all programs.
Other ransomware threats also tend to spread via email; they come in a form of officially-looking emails with documents attached to them. Once the victim opens such attachment, the virus activates itself and starts to wreak havoc on the computer system.
How to remove REKTLocker malware?
REKTLocker virus is a severe computer infection, and if your computer has been compromised by it, you should take it seriously. Most likely you will not be able to retrieve your data now, so you should implement REKTLocker removal as soon as possible. We do not recommend you to attempt to delete this malware manually, as it is a complicated program that consists of many components, and you might not be experienced enough to identify, locate and delete all of them. Therefore, we recommend you to remove REKTLocker and all related threats with a help of the anti-malware program. The virus might attempt to block your antivirus program, or prevent you from downloading one, so in such case, follow these instructions:
Was this guide helpful?
4 comments