How to remove iLock ransomware virus

The latest information about iLock ransomware virus

First variants of iLock virus emerged in March 2016^[1]. Various anti-malware programs detected it under several different names, for instance, iLock, iLockLight, or even Lortok. What is unusual about the earlier copy of the virus is that it used to target Russian-speaking computer users only; meanwhile, the vast majority of ransom-demanding viruses act the opposite way – they do not infect the computer if it is set to use the Russian language as default one^[2]. However, the newer version that emerged at the beginning of 2017 is updated and provides a ransom note (WARNING OPEN-ME.txt in English. The Russian ransom note version is called ВНИМАНИЕ_ОТКРОЙТЕ-МЕНЯ.txt. The virus explains to be using AES encryption and describes the power of this encryption standard quite precisely. It brags that no one is able to crack this algorithm and that the only possible way to restore encrypted files is to obtain the individual decryption key (in other words, to pay the ransom).

What is interesting about the new virus is that it comes with a whole pack of features. It does provide a live chat in case the victim wants to chit chat with the culprit of the ransomware attack and prepares a unique Tor website^[3] for each victim. Currently, iLock’s Tor network is down and cannot be reached, therefore, our researchers were unable to find out how much money criminals want in exchange for the data decryption key. If you have been attacked by this virus, we strongly recommend you to resist limitations and remove iLock malware as quickly as possible. The fastest way to delete the virus is to run anti-malware software like FortectIntego, but before you do that, the computer needs to be restarted in a Safe Mode with Networking mode.

How did I get infected with iLock ransomware?

Although there was a noticeable slowdown in this virus’ distribution, we have no doubts that 2017 is the year of its comeback. Our experts noticed malicious email campaigns distributing this virus at the end of 2016, but currently, the virus can be downloaded from the Internet along with pirated software^[4], too. Therefore, we suggest you be careful when browsing various file sharing websites or exploring unknown Internet websites. It is way easier to get a ransomware virus than to remove it and fix problems that it causes, so be careful! Remember – you can always fight off such threats by protecting your PC with anti-malware software^[5].

Removal tips

Although many malware removal tools can easily remove iLock virus, bear in mind that this malware can try to block your antivirus or anti-malware and prevent you from removing the infection smoothly. In such situation, you will have to make a few adjustments manually. Therefore, we suggest you use a powerful anti-malware tool for iLock removal. You can find detailed removal instructions below, as well as comprehensive data recovery guides.