How to remove ABCLocker ransomware virus

ABCLocker ransomware might lock the majority of the files stored on your computer

ABCLocker is a new crypto-malware that encrypts files with AES-256 cryptography. Following data encryption, malware delivers a ransom note where victims learn that they need to pay 0.5 Bitcoins within 5 days time in order to decrypt their files.

Authors of ABC Locker note the size of the ransom doubles if people do not pay in set time. After 5 days people will have to pay 1 Bitcoin. Criminals provide detailed instructions what people have to do:

1. Buy the necessary amount of Bitcoins.
2. Send them to the provided Bitcoin wallet address.
3. Confirm the payment.
4. Go to the provided address where victims can find decryption software.

It seems that crooks are willing to help victims. If they have some questions or need help, they can send an email to abchelper@sigaint.org. However, trusting the hackers is not recommended. Nevertheless, they claim to be the only ones who have a working decryption software; it may not be true. Thus, you should not risk losing few hundreds of dollars.

Therefore, you should remove ABCLocker instead of trying to recover your files with unknown decryption software. The information in the ransom note does not lie – antivirus programs won’t help to rescue encrypted data. However, it will help to clean the computer from malware and stop malicious processes running in the system.

ABCLocker virus is executed from the cloudsword.exe file. Thus, it might be related to CloudSword ransomware virus that has been spotted at the beginning of 2017 attacking English-speaking and Chinese^[1] computer users.

After the infiltration, malware checks if a computer is protected with antivirus, and might disable it. It might also create new processes on the system, modifies proxy settings, queries sensitive IE security settings, delete particular files and install malicious files. Therefore, ABCLocker makes computer’s performance sluggish and Windows OS – vulnerable.

In order to use your computer normally again and try safe data recovery options, you have to get rid of the virus first. We recommend FortectIntego for ABCLocker removal. However, ransomware might prevent you from installing or accessing security software, so you might find removal instructions below the article handy.

Ransomware executable might be installed on the system after opening malicious email attachment

One of the main methods how ransomware spreads is malicious email attachments. Social engineering helps cyber criminals to craft letters that look like sent from governmental institutions, banks, delivery services or popular shops. Therefore, you should learn to identify phishing email:^[2]

1. Crooks usually make grammar, spelling or use of English mistakes. Thus, if the email is written poorly, it’s an obvious sign that it is not real.
2. Check the sender’s address and compare it with organization's address.
3. Urge to open an important document, such as invoice or statement, should make you suspicious too. Especially, if you did not expect to receive such email.
4. Crooks often threatens to “delete the account” or informs about “compromised account” in order to encourage you to take an action. However, you should login to that account directly by opening new browser’s tab and typing website address yourself.

Keep in mind that you should open links or email attachments only if you can trust the sender. What is more, you should be careful when browsing the web too.^[3] Avoid untrusted file-sharing sites, suspicious ads, and clickbait links. Of course, you should also keep your software and OS updated, and strengthen computer’s security by installing antivirus software.

Security tools helps to terminate ABCLocker virus

The only safe way to remove ABCLocker is to employ a powerful and professional malware elimination tool, such as FortectIntego, SpyHunterCombo Cleaner or MalwarebytesMalwarebytes. As you already know, malware can install numerous malicious files or affect system processes in order to operate on the affected computer. It’s nearly impossible to detect and stop such activities manually.

Malware is expected to block access to security software or prevent from installing it. Therefore, you may need to take additional actions to remove ABCLocker automatically. You can find the instructions below.