How to remove LightningCrypt ransomware virus

LightningCrypt takes files to hostage and asks to pay the ransom

LightningCrypt is a crypto-malware^[1] that uses a strong encryption cipher to wreck various data stored on the targeted computer. This file-encrypting virus appends .LIGHTNING file extension to each of the corrupted pictures, audio, video, and text files, documents, databases and other widely used records. As soon as all targeted data is locked, ransomware delivers a ransom note in LightningCrypt_Recover_Instructions.txt file and triggers a pop-up window. The threatening letter from cyber criminals tells that trying to recover data or delete LightningCrypt ransomware will lead to the data loss. According to the ransom note, the only way to decrypt files is to transfer 0.17 Bitcoins to the provided address. Once the transaction is made, damaged files should be recovered immediately. However, chances that you will never get back your files are quite high. Cybercriminals created this malicious program to swindle the money from innocent computer users. Thus, they may not bother about decrypting their files because no one can find them and punish for a unkept promise. In case of the cyber attack, we highly recommend focusing on LightningCrypt removal. Scanning affected machine with FortectIntego, or other reputable malware removal program helps to delete this nasty virus and protect a computer from similar cyber threats in the future.

The biggest chances to encounter LightningCrypt is to open an infected email attachment. As soon as a person clicks on such file, malware payload is dropped and executed on the system. Apart from encrypting data, ransomware also modifies the registry and makes some entries in order to run itself automatically when Windows OS is launched. What is more, this cyber infection makes computer’s system vulnerable and might open the backdoor to other malware. For this reason, you should remove LightningCrypt immediately. Letting it stay in the system may allow data-stealing Trojans, various viruses or worms to get inside the computer and cause you even more damage. Unfortunately, virus elimination does not bring back your files. Besides, it’s unknown whether it deletes Shadow Volume Copies^[2] of the targeted files or not. If not, there’s hope that encrypted data might be restored with credible third-party software. At the end of this article, you will find detailed instructions how to wipe out malware from the system and try to recover your files.

The main ransomware distribution channels

We have briefly mentioned that malicious payload spreads attached in emails. Thus, you can let LightningCrypt ransomware virus to enter the system after clicking on fake statement, parcel delivery information and other “important” document. Crooks became great in social engineering and learned how to convince people into opening an obfuscated Word or PDF file. However, relying on only one distribution channel is not enough. Malware might also enter the system as a bogus software update. Usually, such fake updates show up as pop-up messages that claim about a necessity to install Adobe Flash or Java. However, you should not get tricked, and simply set automatic software update in order to avoid misleading notifications. What is more, you can encounter LightningCrypt in the form of “useful” program in questionable file-sharing websites. Thus, you should avoid using such sites and install software or their updates from official publishers’ websites.

Terminate LightningCrypt virus using malware removal program

For LightningCrypt removal, you will need to employ a professional security software and get rid of it automatically. Manual elimination is not recommended due to the complexity of the virus. As we have mentioned, this cyber parasite may modify Windows Registry, and it might install malicious files all other the system. Identifying them is complicated because ransomware-related components might be named as legitimate system files. Therefore, it’s better to let professional software to detect malicious entries and delete them for you. We suggest you to remove LightningCrypt using one of these tools: FortectIntego, SpyHunterCombo Cleaner or MalwarebytesMalwarebytes. Before installing malware removal program, you may need to reboot the device to the Safe Mode first.