Severity scale:  
  (95/100)

Locker virus. How to remove? (Uninstall guide)

removal by Ugnius Kiguolis - -   Also known as Locker ransomware, Locker v1.7 | Type: Ransomware
12

What is Locker virus?

Locker virus (can also be found as Locker v1.7, Locker V2.16, Locker v2.60, Locker v3.5.3, Locker v.3.49 and Locker V5.52) is a seriously dangerous cyber threat that acts just like it is suggested by its name. Once it infiltrates its target computer, it checks the system for predetermined files and “locks” them down. In addition, when trying to open any of these files, it shows a warning message that asks to make a payment in exchange for the specific decryption key. Typically, it is needed when trying to unblock these compromised files and get ability to use them again. Locker belongs to ‘ransomware’ or ‘crypto-ransomware’ category, what means that it tries to push people into paying a ransom. In fact, it’s not very hard to do that because, before asking to pay a ransom of 0.1 BTC (bitcoins), Locker encrypts each of these popular files:

3fr, .accdb, .ai, .arw, .bay, .cdr, .cer, .cr2, .crt, .crw, .dbf, .dcr, .der, .dng, .doc, .docm, .docx, .dwg, .dxf, .dxg, .eps, .erf, .indd, .jpe, .jpg, .kdc, .mdb, .mdf, .mef, .mrw, .nef, .nrw, .odb, .odm, .odp, .ods, .odt, .orf, .p12, .p7b, .p7c, .pdd, .pef, .pem, .pfx, .ppt, .pptm, .pptx, .psd, .pst, .ptx, .r3d, .raf, .raw, .rtf, .rw2, .rwl, .srf, .srw, .wb2, .wpd, .wps, .xlk, .xls, .xlsb, .xlsm, .xlsx

As you can see, this threat can easily lead you to the loss of each of your photos, music files, art files and other documents. In order to get ability to decrypt these files, you will need to make a required payment within 72 hours. If the victim fails to pay a random, Locker ransomware raises it to 1.0 BTC.

What can be done when dealing with such issue? First of all, you should remove Locker virus from the system before it manages to encrypt more of your files. In addition, you should look for extra copies of your blocked files. If you still don’t know how can you make backups of your important files, you should check this post: Why do I need backup and what options do I have for that? If you don’t have backups, you can also try using these tools: R-Studio, Photorec. Unfortunately, but if these programs failed to work for you, it means that your files are doomed..

For the removal of Locker virus we highly recommend Reimage, that has been showing great results when dealing with this ransomware.

Locker virus

How can Locker virus infect my computer?

There are lots of similar ransomwares that are spreading around at the moment of writing, including the famous one Cryptolocker, CTB locker, Cryptobot, Cryptographic Locker and similar ones. They all rely on similar distribution techniques that have been used by lots of other viruses, such as rogue anti-spywares, trojans and other threats. If you want to avoid each of them, the main thing that you have to remember is that they have been actively promoted with a help of spam. Spam is undesired email messages that are either filled with infected attachments or malicious links. When seeking to trick people into clicking these links or downloading these malicious attachments to their computers, they report about tricky things, such as missing payments, warnings from governmental authorities and similar invented things that people are usually scared about. Please, do NOT fall for such messages and always check the sender and the body of the message. If it is filled with typo or grammar mistakes, there is a huge possibility that it is fake. In addition, Locker virus can also infiltrate your PC after clicking on misleading pop-up ad that may interrupt you during your browsing. Please, stay away from each ad that reports about missing updates, including Java, Flash Player and similar ones.

How to remove Locker virus?

If you are one of Locker ransomware victims, you should waste no time and remove it from your computer. For that you can use these guidelines that are given below. Besides, we highly recommend thinking about the prevention of such infections like Locker. For that you can use previously mentioned programs. Besides, don’t forget to think about the immunity of your files and backup. For that you can use USB external hard drives, CDs, DVDs, or simply rely on online backups, such as Google Drive, Dropbox, Flickr and other solutions. More information about backups can be found in this post: Why do I need backup and what options do I have for that?

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use. By Downloading any provided Anti-spyware software to remove Locker virus you agree to our privacy policy and agreement of use.
do it now!
Download
Reimage (remover) Happiness
Guarantee
Download
Reimage (remover) Happiness
Guarantee
Compatible with Microsoft Windows Compatible with OS X
What to do if failed?
If you failed to remove infection using Reimage, submit a question to our support team and provide as much details as possible.
Reimage is recommended to uninstall Locker virus. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

More information about this program can be found in Reimage review.

More information about this program can be found in Reimage review.
Locker virus snapshot
Locker virus

Manual Locker virus Removal Guide:

Remove Locker using Safe Mode with Networking

Reimage is a tool to detect malware.
You need to purchase Full version to remove infections.
More information about Reimage.

  • Step 1: Reboot your computer to Safe Mode with Networking

    Windows 7 / Vista / XP
    1. Click Start Shutdown Restart OK.
    2. When your computer becomes active, start pressing F8 multiple times until you see the Advanced Boot Options window.
    3. Select Safe Mode with Networking from the list Select 'Safe Mode with Networking'

    Windows 10 / Windows 8
    1. Press the Power button at the Windows login screen. Now press and hold Shift, which is on your keyboard, and click Restart..
    2. Now select Troubleshoot Advanced options Startup Settings and finally press Restart.
    3. Once your computer becomes active, select Enable Safe Mode with Networking in Startup Settings window. Select 'Enable Safe Mode with Networking'
  • Step 2: Remove Locker

    Log in to your infected account and start the browser. Download Reimage or other legitimate anti-spyware program. Update it before a full system scan and remove malicious files that belong to your ransomware and complete Locker removal.

If your ransomware is blocking Safe Mode with Networking, try further method.

Remove Locker using System Restore

Reimage is a tool to detect malware.
You need to purchase Full version to remove infections.
More information about Reimage.

  • Step 1: Reboot your computer to Safe Mode with Command Prompt

    Windows 7 / Vista / XP
    1. Click Start Shutdown Restart OK.
    2. When your computer becomes active, start pressing F8 multiple times until you see the Advanced Boot Options window.
    3. Select Command Prompt from the list Select 'Safe Mode with Command Prompt'

    Windows 10 / Windows 8
    1. Press the Power button at the Windows login screen. Now press and hold Shift, which is on your keyboard, and click Restart..
    2. Now select Troubleshoot Advanced options Startup Settings and finally press Restart.
    3. Once your computer becomes active, select Enable Safe Mode with Command Prompt in Startup Settings window. Select 'Enable Safe Mode with Command Prompt'
  • Step 2: Restore your system files and settings
    1. Once the Command Prompt window shows up, enter cd restore and click Enter. Enter 'cd restore' without quotes and press 'Enter'
    2. Now type rstrui.exe and press Enter again.. Enter 'rstrui.exe' without quotes and press 'Enter'
    3. When a new window shows up, click Next and select your restore point that is prior the infiltration of Locker. After doing that, click Next. When 'System Restore' window shows up, select 'Next' Select your restore point and click 'Next'
    4. Now click Yes to start system restore. Click 'Yes' and start system restore
    Once you restore your system to a previous date, download and scan your computer with Reimage and make sure that Locker removal is performed successfully.

Finally, you should always think about the protection of crypto-ransomwares. In order to protect your computer from Locker and other ransomwares, use a reputable anti-spyware, such as Reimage, Plumbytes Anti-MalwareWebroot SecureAnywhere AntiVirus or Malwarebytes Anti Malware

About the author

Ugnius Kiguolis
Ugnius Kiguolis - The mastermind

If this free removal guide helped you and you are satisfied with our service, please consider making a donation to keep this service alive. Even a smallest amount will be appreciated.

Contact Ugnius Kiguolis
About the company Esolutions

Removal guides in other languages


  • Justin

    Thanks for the step-by-step instructions on how to remove the virus. Comes very handy. In your method 2, in where you list system restore, I would also add alternatives (deep freeze, reboot restore rx) as well. These are very easy to install, and in the case of the later, Reboot Restore Rx, dont require an investment to use it. It also is more robust because it works independently from Windows.