Skip to content
  • Active
  • Severity: High
  • Ransomware
  • Windows
  • Verified · Oct 2016

How to remove Lock93 ransomware virus

A step-by-step removal guide for affected devices. Follow the verified procedure below — most readers complete it in under 10 minutes.

Julie Splinters · Anti-malware specialist

Is Lock93 ransomware related to Locky?

Lock93 virus belongs to the group of recently discovered file-encrypting malware. It is associated with the same hackers who released suppteam01@yandex.ru threat. The current virus presents the message in two languages – English and Russian. What is more, the malware is distributed with the help of a trojan horse, so it should not be underestimated. In fact, remove Lock93 right away. You can do it with the help of an anti-spyware application, for example, FortectIntego. More information about Lock93 removal can be found below.

File-encrypting viruses are no novelty to any Internet users. Cerber and Locky keep sweeping their way throughout the world, so few are not aware of what ransomware does. In recent years, the activity of such viruses has boosted significantly. Speaking of Lock93, it does not stand out much. While using a trojan, it sneaks into the system and locks all the data. You might notice strange Windows messages warning you of suspicious programs running in your background. While executing its commands, the threat locks all the data and adds .lock93 extension file. Though .Locky and .locked extensions are popular among many ransomware creators; it is suspected that the virus might be generated by the same hackers who disguise under new versions of CrytoLocker.

The image showing Lock93 virus

.Lock93 file extension virus displays bilingual text for English and Russian speakers. It is called as ИНСТРУКЦИЯ INSTRUCTION.txt file. The threat demands 1000 rubles in exchange for the files. The victims should contact the hackers using oplaticydadeng@mail.ru to recover the files. There is additional mail provided: zaplatiddeng@yandex. ru. As usual, it threatens the victims not to meddle with the files as any action might irreversibly damage them. Certainly, it is a common habit among ransomware creators. You should proceed to the elimination process of Lock93 malware.

How does the virus spread?

It has been detected that the threat spreads in two ways. It targets users via spam messages. To convince victims to open the message, the cyber criminals make up fake police notifications or tax reports. After a user clicks on the supposed attachment containing invoice or another official report, he or she activates the threat. In some cases of Lock93 ransomware, its executable lies in the explorer.exe file. By using Trojan-Ransom.Win32.Crypmodadv.xda, the ransomware infiltrates the system. If you do not own a proper security application or the software is outdated, then there are more than enough chances for Lock93 hijack to occur.

Lock93 elimination strategies

We do not recommend meddling with this ransomware since it employs a complex encryption and execution technique. You can remove Lock93 virus using the services of an anti-spyware application, such as FortectIntego or MalwarebytesMalwarebytes. Only when the process is complete, you can concentrate on the file recovery. At the moment, there is no free, suitable decrypter released for this virus, but you may use one of the alternative modes to decode the files. If you encounter problems which prevent you from completing Lock93 removal, then use the following instructions. Regain access to the computer. In the end, feel free to use our guide to data recovery.

3 comments

Spyware news
Privacy preferences

We use cookies to improve your experience and analyze traffic. Some cookies enable embedded content like videos and social posts. Choose what you allow — you can change this anytime.