How to Remove LockData Ransomware

LockData is a newly discovered ransomware strain. The new file-encrypting malware is a member of the wider family of ransomware strains based on the Chaos ransomware.

The LockData ransomware behaves like you would expect it to. It would encrypt common file types, including most media and document formats. Files encrypted in the process receive a random string of four characters as a newly appended extension, preserving the original one. In this way, a file called "record.doc" will transform into something like "record.doc.j8xc". The string in the new extension can contain both letters and numbers.

Once encryption completes, the ransomware changes the system's desktop wallpaper with one that informs the victim their files are encrypted. The LockData ransomware drops its ransom note in a plain text file called "read_it.txt".

The ransom demand is 5 BTC, which suggests the ransomware will be targeting organizations and businesses and not home users. The desktop message also threatens to leak the data on the dark web, further suggesting the ransomware will be used against companies and not private users.

The full ransom note goes as follows:

----> LockData is multi language ransomware. Translate your note to any language <----

All of your files have been encrypted

Your computer was infected with a ransomware virus. Your files have been encrypted and you won't

be able to decrypt them without our help.What can I do to get my files back?

Only if you pay the rasnom. Payment can be made in Bitcoin only.

How do I pay, where do I get Bitcoin?

Purchasing Bitcoin varies from country to country, you are best advised to do a quick google search

yourself  to find out how to buy Bitcoin.

Many of our customers have reported these sites to be fast and reliable:

Coinmama - hxxps://www.coinmama.com Bitpanda - hxxps://www.bitpanda.com - hxxps://www.coinbase.com/

Payment informationAmount: 5 BTC

Bitcoin Address:

[alphanumeric string]