How to remove BDKR ransomware

BDKR ransomware — yet another version of file-encrypting LockCrypt ransomware

BDKR ransomware is a dangerous cryptovirus working on extorting money from users seeking to recover encrypted files. This is the newest version of LockCrypt which is already known for year and more. To lock various users' data, the virus applies Army-Grade encryption^[1] algorithm. In addition, encoded files receive .BDKR file appendix at the end of the already existing file name and become unusable. Typically, these file extensions are formed in this way: id-[victim's_ID]-.BDKR pattern. The ransom note is called How To Restore Files.txt which gives for the victim big_decryptor@aol.com email address to contact cybercriminals. At the time of writing, there is no information about the ransom amount. 

BDKR ransomware virus infiltrates the system silently and starts working in the background. Immediately after the initial infection, ransomware scans the system to make sure that the device is not encrypted already. Additionally, it chooses various formats of data and encrypts them using symmetric or asymmetric encryption algorithm.

Additionally, the .BDKR files virus creates a text file named as How To Restore Files.txt which is placed in every folder that contains encoded data. It provides hackers' email address and other details related to files' recovery. How To Restore Files.txt contains the following information:

Important !!!
Your personal id – 
Warning: all your files are infected with an unknown virus.
To decrypt your files, you need to contact at big_decryptor@aol.com.
The decoder card is received by bitcoin.
You can buy bitcoins from the following links://blockchain.info/wallet
Do not try to restore files your self, this will lead to the loss of files forever
GUARANTEES!!!
You can send us 2-3 encoded files.
And attach for testing, we will return them to you for FREE

BDKR ransomware is a very destructive virus that you shouldn't deal with. Paying the ransom is not the solution as you can be left with no money and no files. If you want to get your files back, you need to restore them from a backup after virus elimination. Keep in mind that adding new files to the infected system results in data loss. 

To prevent that, you need to remove BDKR ransomware from your computer at first. Then, try to restore data from cloud service or by using data recovery software. There is no official decryption tool developed yet, and researchers^[2] do not recommend trusting test decryption by hackers. 

You can proceed with BDKR ransomware removal using anti-malware tools like FortectIntego. Various AVs have already started detecting this ransomware^[3] as the latest version of LockCrypt. If you are disabled when trying to launch security software on your computer, we have a few other suggestions below the article. 

Ransomware payload is distributed via spam email attachments  

The most common way for cyber threats to spread their malicious components are spam email attachments. The way these campaigns work is by luring people into downloading an insecure file from the email attachment. Macro-embedded MS Word or Excel documents look safe when called “invoice” or “order information” and attached to an email sent from FedEx or another well-known service.

Unfortunately, malicious actors disguise their products with legitimate names to make people open and download these files. When a user opens the email and downloads this infected file, the direct ransomware script loads on the system and infects the computer. Malicious activity starts immediately. If you want to avoid these infections, make sure you open and download files from secure emails only.

BDKR ransomware removal tips

To remove BDKR ransomware from the machine completely, you need to employ tools like FortectIntego, SpyHunterCombo Cleaner or MalwarebytesMalwarebytes. These anti-malware programs can detect existing malware like ransomware or other threats and eliminate them from the system. After the process, you can use these tools again to repair virus damage.

However, file recovery can be done after the proper BDKR ransomware removal only. Make sure the system is clear and then restore encoded files from cloud services, backup or try data recovery tips that we have presented below.