Severity scale:  
  (97/100)

NOT_OPEN LOCKER ransomware. How to remove? (Uninstall guide)

removal by Lucia Danes - - | Type: Ransomware

NOT_OPEN LOCKER is a ransomware which is classified as a new version of Everbe virus

NOT_OPEN LOCKER ransomware image
NOT_OPEN LOCKER ransomware is a file-encrypting virus which makes valuable data unusable.

NOT_OPEN LOCKER ransomware is a file-encrypting virus which emerged from Everbe ransomware virus. Once it enters the system, this crypto-malware starts encrypting data and files are marked with .[notopen@countermail.com].NOT_OPEN extension. Victims receive !_HOW_RECOVERY_FILES_!.txt ransom note which urges to contact the criminals via notopen@countermail.com email address. 

Name NOT_OPEN LOCKER
Type Ransomware
Danger level High. Makes data unreadable
Precursor Everbe ransomware
Extension .[notopen@countermail.com].NOT_OPEN
Email address notopen@countermail.com
Amount of the ransom Unknown
Ransom note !_HOW_RECOVERY_FILES_!.txt
Decryption tools Official NOT_OPEN LOCKER decryption software is still under development
Distribution It is distributed via infected spam emails
Removal The only way to uninstall NOT_OPEN LOCKER ransomware is to get a robust antivirus. Additionally, you can get rid of the virus damage with Reimage

Usually, malicious programs like NOT_OPEN LOCKER virus enter the system if one opens an infected email attachment. Once clicked, it drops the payload and starts encrypting valuable information. After data encryption[1], all files become unusable, and victims merely can see the ransom note. Here is the fraction of it:

2. [ HOW TO RECOVERY FILES? ]
To receive the decryption program write to email: notopen@countermail.com
And in subject write your ID: ID-902d495a94
We send you full instruction how to decrypt all your files.
If we do not respond within 24 hours, write to the email: not.open@mailfence.com

Criminals behind NOT_OPEN LOCKER malware inform people about the infection and urge to contact them via one of the identified email addresses. Additionally, they try to gain users' trust by promising to decrypt up to three files for free. However, experts warn that hackers should not be trusted. 

We advise you to NEVER pay the ransom as there are alternative ways how to decrypt files which are encrypted by NOT_OPEN LOCKER ransomware. Although, first you should remove NOT_OPEN LOCKER virus from your computer with a professional antivirus. 

Researchers have prepared guidelines which can help you restore encoded files after NOT_OPEN LOCKER removal. You can find them at the end of this article or install Reimage to fix virus damage. 

Spam emails carry malicious programs inside

It is essential to understand that spam emails might be dangerous and include either malicious scripts or payloads of malware. This is the primary distribution source for ransomware and similar cyber threats. Therefore, you should learn how to identify a potential attempt to infiltrate malware.

Usually, spam emails might look legitimate and innocent. Criminals design them to resemble well-known companies or brands. Likewise, they may even include a logo or other recognizable item. However, malicious emails also try to create urgency to open an attachment or click on the link.

If you have any suspicions, you should contact the company directly and ask to confirm the electronic letter. Furthermore, avoid clicking on unknown commercial content online, such as ads, banners[2], surveys or unverified links. 

NOT_OPEN LOCKER ransomware elimination guidelines

Researchers[3] note that ransomware-type infections are the most dangerous ones. Thus, regular computers might not be able to remove NOT_OPEN LOCKER on their own and even damage their system. The best option is to get professional help to deal with file-encrypting viruses.

You should install a reliable anti-malware for NOT_OPEN LOCKER removal. You can either use one from the list below or pick your own. Run a full systems scan and let it identify ransomware-related files. Later, put them into quarantine and delete permanently.

If you are unable to download and install the security tool, boot your computer into Safe Mode. Instructions showing how to do it are appended below together with alternative file recovery steps. Please, be attentive and follow them strictly to avoid any potential damage to your system.

Offer
We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use. By Downloading any provided Anti-spyware software you agree to our privacy policy and agreement of use.
do it now!
Download
Reimage (remover) Happiness
Guarantee
Download
Reimage (remover) Happiness
Guarantee
Compatible with Microsoft Windows Supported versions Compatible with OS X Supported versions
What to do if failed?
If you failed to remove virus damage using Reimage, submit a question to our support team and provide as much details as possible.
Reimage is recommended to remove virus damage. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.
More information about this program can be found in Reimage review.

If you decided to select another anti-spyware, uninstall Reimage from your computer.
Press mentions on Reimage
Alternative Software
Different security software includes different virus database. If you didn’t succeed in finding malware with Reimage, try running alternative scan with Malwarebytes.
Alternative Software
Different security software includes different virus database. If you didn’t succeed in finding malware with Reimage, try running alternative scan with Combo Cleaner.

To remove NOT_OPEN LOCKER virus, follow these steps:

Remove NOT_OPEN LOCKER using Safe Mode with Networking

Start NOT_OPEN LOCKER removal by rebooting your computer into Safe Mode with Networking:

  • Step 1: Reboot your computer to Safe Mode with Networking

    Windows 7 / Vista / XP
    1. Click Start Shutdown Restart OK.
    2. When your computer becomes active, start pressing F8 multiple times until you see the Advanced Boot Options window.
    3. Select Safe Mode with Networking from the list Select 'Safe Mode with Networking'

    Windows 10 / Windows 8
    1. Press the Power button at the Windows login screen. Now press and hold Shift, which is on your keyboard, and click Restart..
    2. Now select Troubleshoot Advanced options Startup Settings and finally press Restart.
    3. Once your computer becomes active, select Enable Safe Mode with Networking in Startup Settings window. Select 'Enable Safe Mode with Networking'
  • Step 2: Remove NOT_OPEN LOCKER

    Log in to your infected account and start the browser. Download Reimage or other legitimate anti-spyware program. Update it before a full system scan and remove malicious files that belong to your ransomware and complete NOT_OPEN LOCKER removal.

If your ransomware is blocking Safe Mode with Networking, try further method.

Remove NOT_OPEN LOCKER using System Restore

  • Step 1: Reboot your computer to Safe Mode with Command Prompt

    Windows 7 / Vista / XP
    1. Click Start Shutdown Restart OK.
    2. When your computer becomes active, start pressing F8 multiple times until you see the Advanced Boot Options window.
    3. Select Command Prompt from the list Select 'Safe Mode with Command Prompt'

    Windows 10 / Windows 8
    1. Press the Power button at the Windows login screen. Now press and hold Shift, which is on your keyboard, and click Restart..
    2. Now select Troubleshoot Advanced options Startup Settings and finally press Restart.
    3. Once your computer becomes active, select Enable Safe Mode with Command Prompt in Startup Settings window. Select 'Enable Safe Mode with Command Prompt'
  • Step 2: Restore your system files and settings
    1. Once the Command Prompt window shows up, enter cd restore and click Enter. Enter 'cd restore' without quotes and press 'Enter'
    2. Now type rstrui.exe and press Enter again.. Enter 'rstrui.exe' without quotes and press 'Enter'
    3. When a new window shows up, click Next and select your restore point that is prior the infiltration of NOT_OPEN LOCKER. After doing that, click Next. When 'System Restore' window shows up, select 'Next' Select your restore point and click 'Next'
    4. Now click Yes to start system restore. Click 'Yes' and start system restore
    Once you restore your system to a previous date, download and scan your computer with Reimage and make sure that NOT_OPEN LOCKER removal is performed successfully.

Bonus: Recover your data

Guide which is presented above is supposed to help you remove NOT_OPEN LOCKER from your computer. To recover your encrypted files, we recommend using a detailed guide prepared by 2-spyware.com security experts.

If your files are encrypted by NOT_OPEN LOCKER, you can use several methods to restore them:

Install Data Recovery Pro

If you want to recover files encrypted by NOT_OPEN LOCKER ransomware, try using this professional software. Note that it might be handy if you have accidentally deleted important data as well.

  • Download Data Recovery Pro;
  • Follow the steps of Data Recovery Setup and install the program on your computer;
  • Launch it and scan your computer for files encrypted by NOT_OPEN LOCKER ransomware;
  • Restore them.

Try ShadowExplorer tool

Check if the ransomware hasn't deleted Shadow Volume Copies from your system. If they are still in place, use the instructions below.

  • Download Shadow Explorer (http://shadowexplorer.com/);
  • Follow a Shadow Explorer Setup Wizard and install this application on your computer;
  • Launch the program and go through the drop down menu on the top left corner to select the disk of your encrypted data. Check what folders are there;
  • Right-click on the folder you want to restore and select “Export”. You can also select where you want it to be stored.

NOT_OPEN LOCKER decryptor

Unfortunately, experts are still working on NOT_OPEN LOCKER decryptor. Meanwhile, you can try using this tool which is designed for the original version — Everbe ransomware:

Finally, you should always think about the protection of crypto-ransomwares. In order to protect your computer from NOT_OPEN LOCKER and other ransomwares, use a reputable anti-spyware, such as Reimage, Malwarebytes MalwarebytesCombo Cleaner or Plumbytes Anti-MalwareMalwarebytes Malwarebytes

About the author

Lucia Danes
Lucia Danes - Virus researcher

If this free removal guide helped you and you are satisfied with our service, please consider making a donation to keep this service alive. Even a smallest amount will be appreciated.

Contact Lucia Danes
About the company Esolutions

References