Severity scale:  
  (95/100)

PC Locker ransomware virus. How to remove? (Uninstall guide)

removal by Julie Splinters - - | Type: Ransomware
12

The peculiar behavior of PC Locker virus

PC Locker virus is another threat from lock screen ransomware series. Though it is less destructive than the viruses, which employ AES and RSA algorithms for data encryption, it is still considered to be a serious infection. Despite that, even if this cyber misfortune has befallen you, you can still remove PC Locker without any problems. For that, you may require Reimage. This utility completes the elimination quickly and effectively. More about the removal instructions can be found below. The threat also threatens to lock your data within 72 hours and urge you to make the money. However, we do not recommend doing it.

It seems that lock screen viruses are gaining popularity among hackers. While there are tons of ordinary ransomware employing asymmetric encryption techniques, lock screen viruses are easier to program. Usually, they do not encode personal files which might be regarded as a big advantage. On the other hand, locked screen is a problematic phenomenon as well as you cannot cancel the window and perform any other functions. Therefore, when PC Locker infection infiltration gets into the device, a ransom note pops declaring of the threat‘s misdeeds. You may opt from administrator, log off, restart, and shutdown options. The virus researchers have identified that pchip2012 stands for the user and s2m2sug1 is used as a password. Such information was embedded in the source code of the ransomware. As it is common for lock screen viruses, this current infection also asks you to complete the survey in exchange for the password.

PCLocker might be less destructive

After completing the survey, a certain amount of money is transferred for their developers. Crooks might not be used relying on more trusted domains such as secret servers or bitcoin web pages. Hackers also encourage victims to fill them by setting a 72-hour time period. According to the ransom note, if a victim fails to complete the form within the specified time, all important documents and data might be locked. However, such scenario is unlikely as most of the lock screen viruses only manage to lock the screen. PC Locker malware seems to be the result of beginners as IT specialists have found a code how to unlock the screen without completing tiresome surveys.

The hackers messed up as they also included the unlock key in the cyber code. london1969paris is the key to unlocking the affected computer. The password might be associated with famous Grand Theft Auto game where an action takes place in this specific location and year. Therefore, there are more speculations that teenagers and more hacker-wannabes joining in the ransomware business. Furthermore, the virus is able to inject its specific [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] registry entry. Though the virus may seem less destructive in comparison with Cerber or Locky, it is necessary to perform proper PC Locker removal.

When does PC Locker ransomware infect computers?

It still uses the usual channels for distribution: spam, exploit kits, outdated tools, and file-sharing domains. Therefore, hardcore gamers might be the primary target of these hackers. Speaking of spam messages, be careful even if you receive the message from tax institution or even a local police office. Crooks have mastered ways how to forge credentials of official companies to make the hoax messages more realistic. Additionally, if you can reduce the risk of encountering the virus via spam messages, then exploit kits are another matter. They might lurk in any website. The only probable way to block them is to launch a security tool.

Eliminate PC Locker effectively

When it comes to ransomware termination, the very process does not take long if you employ an anti-spyware program (Reimage or Malwarebytes Anti Malware). Launch it and update it before scanning. Therefore, the tool will be able to detect and remove PC Locker virus completely. Manual elimination might not be as effective as the virus inserts not only the mentioned registry entry but other smaller elements as well. When PC Locker removal is finished, you may read about data recovery possibilities. In the end, keep in mind that personal caution may also highly reduce the risk of PC Locker hijack or other cyber threat.

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use. By Downloading any provided Anti-spyware software to remove PC Locker ransomware virus you agree to our privacy policy and agreement of use.
do it now!
Download
Reimage (remover) Happiness
Guarantee
Download
Reimage (remover) Happiness
Guarantee
Compatible with Microsoft Windows Compatible with OS X
What to do if failed?
If you failed to remove infection using Reimage, submit a question to our support team and provide as much details as possible.
Reimage is recommended to uninstall PC Locker ransomware virus. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

More information about this program can be found in Reimage review.

More information about this program can be found in Reimage review.

Manual PC Locker virus Removal Guide:

Remove PC Locker using Safe Mode with Networking

Reimage is a tool to detect malware.
You need to purchase Full version to remove infections.
More information about Reimage.

  • Step 1: Reboot your computer to Safe Mode with Networking

    Windows 7 / Vista / XP
    1. Click Start Shutdown Restart OK.
    2. When your computer becomes active, start pressing F8 multiple times until you see the Advanced Boot Options window.
    3. Select Safe Mode with Networking from the list Select 'Safe Mode with Networking'

    Windows 10 / Windows 8
    1. Press the Power button at the Windows login screen. Now press and hold Shift, which is on your keyboard, and click Restart..
    2. Now select Troubleshoot Advanced options Startup Settings and finally press Restart.
    3. Once your computer becomes active, select Enable Safe Mode with Networking in Startup Settings window. Select 'Enable Safe Mode with Networking'
  • Step 2: Remove PC Locker

    Log in to your infected account and start the browser. Download Reimage or other legitimate anti-spyware program. Update it before a full system scan and remove malicious files that belong to your ransomware and complete PC Locker removal.

If your ransomware is blocking Safe Mode with Networking, try further method.

Remove PC Locker using System Restore

Reimage is a tool to detect malware.
You need to purchase Full version to remove infections.
More information about Reimage.

  • Step 1: Reboot your computer to Safe Mode with Command Prompt

    Windows 7 / Vista / XP
    1. Click Start Shutdown Restart OK.
    2. When your computer becomes active, start pressing F8 multiple times until you see the Advanced Boot Options window.
    3. Select Command Prompt from the list Select 'Safe Mode with Command Prompt'

    Windows 10 / Windows 8
    1. Press the Power button at the Windows login screen. Now press and hold Shift, which is on your keyboard, and click Restart..
    2. Now select Troubleshoot Advanced options Startup Settings and finally press Restart.
    3. Once your computer becomes active, select Enable Safe Mode with Command Prompt in Startup Settings window. Select 'Enable Safe Mode with Command Prompt'
  • Step 2: Restore your system files and settings
    1. Once the Command Prompt window shows up, enter cd restore and click Enter. Enter 'cd restore' without quotes and press 'Enter'
    2. Now type rstrui.exe and press Enter again.. Enter 'rstrui.exe' without quotes and press 'Enter'
    3. When a new window shows up, click Next and select your restore point that is prior the infiltration of PC Locker. After doing that, click Next. When 'System Restore' window shows up, select 'Next' Select your restore point and click 'Next'
    4. Now click Yes to start system restore. Click 'Yes' and start system restore
    Once you restore your system to a previous date, download and scan your computer with Reimage and make sure that PC Locker removal is performed successfully.

Bonus: Recover your data

Guide which is presented above is supposed to help you remove PC Locker from your computer. To recover your encrypted files, we recommend using a detailed guide prepared by 2-spyware.com security experts.

If your files are encrypted by PC Locker, you can use several methods to restore them:

Opting for Data Recovery Pro

Though in this case, PCLocker ransomware does not affect your files. Be aware that Data Recovery Pro comes in handy retrieving the encrypted files.

The benefits of ShadowExplorer

This utility might be highly useful as it recreates the files according to the patterns of volume shadow copies.

  • Download Shadow Explorer (http://shadowexplorer.com/);
  • Follow a Shadow Explorer Setup Wizard and install this application on your computer;
  • Launch the program and go through the drop down menu on the top left corner to select the disk of your encrypted data. Check what folders are there;
  • Right-click on the folder you want to restore and select “Export”. You can also select where you want it to be stored.

Finally, you should always think about the protection of crypto-ransomwares. In order to protect your computer from PC Locker and other ransomwares, use a reputable anti-spyware, such as Reimage, Plumbytes Anti-MalwareWebroot SecureAnywhere AntiVirus or Malwarebytes Anti Malware

About the author

Julie Splinters - Malware removal specialist

If this free removal guide helped you and you are satisfied with our service, please consider making a donation to keep this service alive. Even a smallest amount will be appreciated.

Contact Julie Splinters
About the company Esolutions


  • monyD

    The hackers are still enjoying themselves…

  • Donalddonaldio

    At leats, we have the key.

  • socialStatus

    It would be interesting to see the source code of the virus…