Remove DataLock Ransomware
Seeing the '.datalock' extension added to the names of your files can only mean one thing – your computer has been infected by a file locker known as the Datalock Ransomware. The Datalock Ransomware belongs to the MedusaLocker Ransomware family and, unfortunately, just like other members, it is also incompatible with free decryptors. The file-locking mechanism that the Datalock Ransomware uses is impossible to decipher – the only way to restore files to normal is to use a backup. The authors of the ransomware state that they have a working decryptor, but users can only use it if they pay some money upfront. The ransom fee that Datalock Ransomware's authors ask for is not specified, but they do mention that Bitcoin is the only type of payment they accept.
The full instructions of the Datalock Ransomware operators can be found in the file 'Recovery_Instructions.html,' which is available on all systems compromised by the threat. Apart from the offer of the extortionists, the document also contains the ways to get in touch with them – a TOR-based website and the emails diniaminius@winrof.com and soterissylla@wyseil.com.
Unfortunately, recovering from ransomware attacks is rarely an easy task – taking preventive measures is the best way to prevent malware like this one from causing you trouble. Thankfully, staying safe from the Datalock Ransomware is straightforward:
- Use a reliable ant-virus tool.
- Do not interact with unknown email attachments – corrupted emails are the #1 method to spread malware.
- Do not download pirated software/media.
- Always download updates/installers from legitimate sources.
What should you do if the Datalock Ransomware has damaged your data? Start by making sure to remove the threat with the use of an up-to-date antivirus scanner. After this, explore alternative data recovery options and tools.