I am infected with medusalocker. What should i do???
I am infected with medusalocker. What to do?
Saara Nieminen, | MedusaLocker ransomware |
Ask a question
Community Answers
Your opinion regarding I am infected with medusalocker. What to do?
You must be logged in to post a comment.
Medusalocker is a relatively new malware family, although its purpose remains the same: to lock files on victims' computers and demand ransom to be paid in Bitcoin cryptocurrency in exchange for decryption software.
Medusalocker ransomware encrypts each of the files with AES cipher, and each of then is then repeatedly encrypted with RSA. In other words, the decryption of locked data is almost impossible without paying cybercriminals.
The next course of action should be as follows:
1. Backup all the encrypted files to a USB flash or an online drive.
2. Scan your machine with powerful anti-malware software to remove malware (note: ransomware sometimes self-deletes, so the infection might not be present. To make sure, scan your PC with multiple security tools).
3. Attempt to recover files by using methods listed here.
4. If not successful, there is no other way to retrieve files without paying criminals (which is not recommended).
Note that decryption software may or may not be created by cybersecurity experts in the future, so keeping the backups of encrypted files is highly advised.
Good luck,
2-spyware team