Skip to content
  • Active
  • Severity: High
  • Ransomware
  • Windows
  • Verified · Sep 2017

How to remove Locked_file ransomware virus

A step-by-step removal guide for affected devices. Follow the verified procedure below — most readers complete it in under 10 minutes.

Julie Splinters · Anti-malware specialist

The new ransomware appends .Locked_file extensions to encrypted files and demands a ransom

Locked_file virus

Locked_file ransomware is a new computer virus that targets Windows operating systems. The virus is very similar to .locked file extension virus, however, it adds a slightly modified file extension – .[restoreassistant2@tutanota.com].LOCKED_FILE. The virus aims to encrypt[1] all files as fast as possible, and afterward, it drops !HOW_TO_UNLOCK_FILES!.html file to provide a ransom-demanding message to the victim.

The Locked_file virus also modifies the original file name, replacing it with a set of random characters.

The ransom note launches via default web browser and suggests that “all files have been encrypted with strong cryptographic algorithm.” The threatening message suggests that the victim has 72 hours to contact cyber criminals via restoreassistant2@tutanota.com. The note also contains victim’s personal ID, which is used to identify each victim.

Traditionally, criminals provide a “test our decryption tool” feature and ask to send some files along with the identification code to their email address.

However, at the moment ransomware is under analysis, so it is unknown whether a free data recovery is possible. Please stay patient, because malware analysts might come up with a free .locked_file decryption tool.

To remove Locked_file virus, you will need a powerful and up-to-date anti-malware software. We suggest using FortectIntego, although you can use a security software of your choice. Before running your malware or spyware removal tool, make sure you restart your computer in Safe Mode with networking first. You can use Locked_file removal guidelines that we prepared to complete this task with ease.

Locked_file ransomware

Distribution of the new virus

The recently discovered ransomware doesn’t seem to be an in-development or test version of the virus, meaning that it poses a real threat to the virtual community and can get into anyone’s computer with only one condition – the computer has to be unprotected. Novirus.uk[2] experts share these tips that can help you to protect yourself against a ransomware attack:

  • To prevent ransomware attacks, we suggest installing a good security product and creating a data backup[3]. These are essential steps to take towards better computer security.
  • In addition, we strongly recommend staying away from questionable emails you might receive in your email account. If you noticed a suspicious letter from someone who wasn’t supposed to contact you – be it a well-known company or a suspicious stranger, do not open file attachments or links included in the email. These might appear to be straight paths to a complete data loss.
  • Finally, keep your programs up-to-date. It means that you should always use the latest versions of software so that cyber criminals couldn’t exploit vulnerabilities in them.

Remove Locked_file ransomware

If you want to continue using your computer, it is a must to remove Locked_file virus now. To entirely eliminate the malware, you must use a professional anti-malware software. Technically, it is possible to delete the virus manually, but you need to have outstanding computing skills to detect and eliminate them all.

Therefore, we strongly suggest choosing a reliable software to perform an automatic Locked_file removal for your.

Be the first to comment

Spyware news
Privacy preferences

We use cookies to improve your experience and analyze traffic. Some cookies enable embedded content like videos and social posts. Choose what you allow — you can change this anytime.