.lockyou Virus is a hot computer virus this week and now it is harming more and more computer users. Our team received many emails from the victims infected by .lockyou Virus, they are all looking for assistance to completely remove this severe infection, thus we post this guide to assist all users clean up the ransomware and avoid further damages from it. If you are one of the victims, check details below and learn to get rid of .lockyou Virus in time. To remove .lockyou Virus and avoid the same issues happening again in the future, you need to have a complete knowledge about this kind of threat, so we will let you know all details of the virus first: How does it invade your system? What damages will it cause? Should you buy the decryption key?
With several researches, we have confirmed that .lockyou Virus is mainly distributed through spam email attachment and Trojan. Hackers send spam emails to PC users and cheat them to download and open the attached ZIP files, which is the activation code of .lockyou Virus. Therefore, to avoid such threat in the future, do not download or open any spam email attachments or click links on it. Besides, .lockyou Virus can be loaded due to Trojan horse embedded on porn websites or free download software. When you click a link on porn site, or run the freeware installed shared by unsafe sites, the ransomware will be triggered to infect all your files.
.lockyou Virus will encrypt all your files, regardless of the file type. All your images, photos, documents will be locked with malicious file extensions. Meanwhile, you will read a ransom note left by .lockyou Virus, which asks you to follow its instruction to buy the decryption key.
But you should never pay for it ! Firstly, these hacker will not give any guarantee for the so-called decryption key, that means you will pay for nothing. Besides, the payment procedure may put your account and information at risk. These hackers can hack your files, don’t you think that they will not be able to hack your bank accounts? In short, purchase of decryption key from hacker will make you lose money, lose files and lose your sensitive information, do not buy it! In such situation, the most important thing is to remove .lockyou Virus from your system first so that it cannot cause more loss. After removing it, you can search for some well-known data recovery software to get some of your files back.
Step 1 – Uninstall malicious programs from Control Panel.
Ransomware may infect your system after you install some malicious programs. To avoid being re-infected, first you should uninstall malicious programs from your computer:
- 1. Press “Windows key + R key” together to open Run window
- 2. Input “control panel” in Run window and hit Enter key to open Control Panel
- 3. Click Uninstall a program:
- 4. Right-click programs which may be related with .lockyou Virus and click Uninstall:
↓ Download SpyHunter Anti-Malware
Step 2 Find and remove malicious registry entries of .lockyou Virus or malicious program.
Note – In case any suspicious files, unwanted program, unwanted browser extension, or unwanted search engine cannot be removed manually, it is often caused by malicious program, which may adds files to registry or make changes in registry . Therefore, to uninstall such stubborn items, you need to find and remove malicious files in the Registry Editor. Check the steps below:
1. Press “Windows key + R key” together to open Run window;
2. Input “regedit” in Run window and hit Enter key to open Registry;
3. Click Edit menu and select Find >> Type virus’s name into it and click Find Next >> Right click on the files and click Delete (Only If you can determine that they are related with malware):
↓ Download SpyHunter Anti-Malware
Step 3 Restoring the files encrypted by .lockyou Virus.
Do not pay any money to recover your files. Even if you were to pay the ransom, there is no guarantee that you will regain access to your files.
The right way to recover your files is to count on legitimate decryption tools. Here are websites of popular cybersecurity community, you can try the decryption tools shared on their sites:
EmsiSoft Decryptor (Free)
EmsiSoft is working on developing free decryptor for the newest ransomware. Currently it provide user with over 40 free and useful decryptors. Please visit https://decrypter.emsisoft.com/ to find and download the decrypter you need.
3. Trend Micro Decryptor (Free)
Trend Micro Ransomware File Decryptor tool is able to decrypt certain type of ransomware. Visit the download page here to follow its instructions to download and use the decryotor for free.
4. Avast Free Ransomware Decryption Tools
Avast free ransomware decryption tools can help decrypt files encrypted by the many types of ransomware. Go to this Avast page and download the decyptors for the latest ransomware.
5. Kaspersky Free Ransomware Decryptors
Kaspersky russian lab now provides many free decryptors. Visit Kaspersky page here and have a try .
6. NoMoreRansom Decryptors
The No More Ransom Project provides free decryption tools for lots of ransomware. Have a try on these tools at this page: https://www.nomoreransom.org/en/decryption-tools.html