LOCKFILE Ransomware is Based on the Xorist Project

LOCKFILE Ransomware is a file-locker, which could be potentially decryptable. However, we advise you not to rely on the decryptor to save you from this attack. Instead, invest in reputable antivirus software that will keep threats like the LOCKFILE Ransomware away from your system for good.

This particular file-locker appears to be based on the Xorist Ransomware project. Thankfully, this might mean that it uses a predictable file-locking routine, which can be cracked. If you are a victim of any Xorist Ransomware variant, you could try the free Xorist decryption tools to try and restore your data.

The LOCKFILE Ransomware attack marks files with the '.LOCKFILE' suffix and creates a ransom document with a Russian title – 'ДЕБЛОКИРОВКА ФАЙЛОВ.txt.' The file advises victims to message unlockmen@excite.com for assistance. It also warns them that they might need to pay some Bitcoin in order to receive a decryption tool. We assure you that trying to buy software from cybercriminals is a bad idea, and this should be your very last resort. Victims of the LOCKFILE Ransomware should use an antivirus scanner to ensure the complete removal of the malware. Once they do this, they can proceed to experiment with alternative file recovery tools and options.