Lola ransomware is a malicious intruder that aims to get Bitcoins claiming to offer file decryption
Lola ransomware is a computer virus created for direct money extortion. This cryptovirus works the same way as all ransomware[1] – first, it encrypts all non-system files and renames them, then it creates ransom notes with ransom instructions. Victims are locked out of their data and won't be able to access it until a decryption tool is purchased from the cybercriminals.
During the encryption procedure, the file virus appends all personal user files (pics, audio and video files, documents, etc.) with .lola extension, hence the name of the virus. When that's completed, it drops ransom notes, titles Please_Read.txt, in all compromised folders so the victim could find them wherever they look.
| Name | Lola ransomware |
|---|---|
| type | Ransomware |
| Appended file extension | All non-system files are encrypted with .lola extension |
| Ransom note | Please_Read.txt can be found in all affected folders |
| Ransom amount | The amount isn't specified but a 50% discount if promised if the victims contact the criminals within 72 hours |
| Criminal contact email | getyourdata@tutanota.com |
| Malware removal | The infection should be removed using a reliable anti-malware software |
| System fix | Once the main removal is done, use the FortectIntego software to check overall system health and fix any issues the virus might have caused |
In the ransom note, the creators of Lola ransomware virus explain to the victims that all their personal files were locked and that the only way to regain access to those files is by purchasing a decryption tool from the cybercriminals. In most cases that is true but in no way does that mean that the victims should meet the perpetrators' demands.
There is an email address (getyourdata@tutanota.com) provided to establish contact by sending a unique appointed user ID and one encrypted file from the infected device for free decryption. This way the cybercriminals try to assure the victims of .lola virus that they really possess the decryption tool/key required to unlock the data.
Developers of the ransomware also warn the users not to try any third-party software to decrypt the files because that could lead to permanent data loss. The ransom will have to be made out using cryptocurrency Bitcoins. Although the ransom amount isn't specified, the criminals are nice enough to offer a 50% discount to victims that contact them within 72 hours. This proposal resembles Djvu family viruses such as Sglh and Jdyi.
Instead of paying off the cybercriminals, thus further expanding their dirty work, victims should focus on virus removal and computer system health. We recommend reliable anti-malware software such as SpyHunterCombo Cleaner or MalwarebytesMalwarebytes to remove Lola ransomware from the infected machines. Time-tested apps like these will automatically locate the virus and remove it.
After Lola ransomware removal, the victims should use the FortectIntego tool to perform a full system scan and see whether the virus has made any altercations to system files and settings. Viruses make these changes to help them with their mission. If left unattended these changes could cause anomalous computer behavior, such as performance decline, crashes, etc.
With the ransom note (Please_Read.txt) the creators of this ransomware send this message to the victims:
———————— ALL YOUR FILES ARE ENCRYPTED ————————
Don't worry, you can return all your files!
All your files documents, photos, databases and other important are encrypted with strongest encryption and unique key.
The only method of recovering files is to purchase decrypt tool and unique key for you.
This software will decrypt all your encrypted files.
What guarantees do we give to you?
You can send one of your encrypted file from your PC and we decrypt it for free.
But we can decrypt only 1 file for free. File must not contain valuable information
Don't try to use third-party decrypt tools because it will destroy your files.
Discount 50% available if you contact us first 72 hours.————-
To get this software you need write on our e-mail : getyourdata@tutanota.com
You will receive btc address for payment in the reply letter
Your personal ID :
The most common ways used by cybercriminals to spread their creations
Cybercriminals have various methods of malware distribution at their disposal, but the most common are spam emails and file-sharing platforms. Using these two methods, criminals infect thousands of computers each day.
Spam email is one of the most common ways different malware is distributed. Payload files of viruses are downloaded onto computers either by clicking on a mischievous hyperlink that redirects victims to a malicious website or by downloading email attachments.
File-sharing platforms, like torrent websites, are riddled with all kinds of viruses. They usually are camouflaged as illegal activation toolkits (popularly known as cracks[2]) for games or software. As soon as this kind of torrent is downloaded, the virus executes itself, and the infection is initiated.
Clean your PC from Lola ransomware virus and system-related issues
All malware should be erased from computers swiftly. Perform a full scan with SpyHunterCombo Cleaner or MalwarebytesMalwarebytes anti-malware apps to automatically find, isolate, and remove the file virus and all its allocated files. Unfortunately, .lola virus removal won't decrypt your files, but that doesn't mean that you should be doubtful. Search for other options to recover your files, never trust the criminals.
When Lola ransomware removal is done and your device is virus-free, experts[3] advise using the FortectIntego tool to fix any changes the virus might have caused to system files and settings. This app will undo all alterations with a push of a button so you could enjoy your computer anew!
Was this guide helpful?
Be the first to comment