How to remove InfinityLock ransomware virus

InfinityLock is the virus that encrypts files with RSA algorithm and threatens to delete them

InfinityLock is a ransomware-type virus that spreads as an Adobe Premier “crack.” It uses a sophisticated encryption cipher to corrupt files on the device. Following this procedure, it changes the computer’s desktop picture and delivers a ransom note called “INFINITYLOCK_UNIQEID.TXT.”

During data encryption malware appends a random file extension to various targeted files, such as images, audio, video, archives, documents, and other files. The ransom note claims that the virus uses RSA 2048 cipher. Thus, encoded data cannot be unlocked without a specific decryption tool.

Authors of the ransomware claim that victims can buy decryptor for 0.17 Bitcoins. In order to scare victims and convince them to follow the instructions, criminals threaten to delete their files if people try to eliminate the virus. However, currently, there’s no proven information about malware’s ability to destroy data.

InfinityLock shows a fake Command Prompt window that informs about a ransomware attack. However, further terms and instructions of data recovery are provided in the new background picture and the ransom note in the .txt file. Victims are asked to send Bitcoins to the provided address and include their ID number in the description. Then files are supposed to be decrypted automatically.

However, security experts do not recommend following these instructions and paying the ransom. Authors of the malware might not have a working decryption software or do not permit you to use it. Thus, you should avoid their threats and focus on InfinityLock removal.

The first thing you have to do after a ransomware attack is to obtain a professional malware removal program, such as SpyHunterCombo Cleaner or MalwarebytesMalwarebytes. It will help to remove the infection safely from the system. A detailed explanation on how to succeed with the elimination is given at the end of the article. Additional data recovery options also get listed there.

Dissemination methods of the file-encrypting virus

The malware spreads as a PremiereCrack.exe file. Users are most likely to download this file as an Adobe Premier “crack.”^[1] Therefore, people usually get infected after installing fake or illegal software. Thus, to avoid these (and many other) ransomware viruses, you should always choose legal and credible software.

Other ways how ransomware might enter the system are:

• malicious spam email attachments;
• exploit kits;
• fake updates;
• malvertising;
• unprotected RDP configuration.

Security experts from Finland^[2] report that the installation of reputable antivirus is not enough^[3] to keep your device protected from ransomware. If you click or download infected content, malware is likely to bypass your computer’s security and take your files hostage.

InfinityLock malware removal instructions

As we have mentioned at the beginning, this malware removal requires obtaining security software and scanning the device, with help it. Ransomware is not a simple threat. This malware belongs to the most dangerous ransomware viruses that make system changes. Thus, attempts to locate and delete malware-related files manually might lead to irreparable damage to your PC.

In order to remove InfinityLock safely, we recommend using SpyHunterCombo Cleaner or MalwarebytesMalwarebytes. If you cannot download these or your preferred anti-malware, please follow the instructions below. Malware might be resistant and prevent you from accessing security software. You should then rely on repair solutions like FortectIntego and alternate decryption options.