Updated variants of this ransomware use 6 random letters as an extension for encrypted files. Crypt0l0cker provides DECRYTP_INSTRUCTIONS.html and DECRYPT_INSTRUCTIONS.txt files with instructions on how to pay the ransom. enc prefix in dedicated folders containing encrypted files. txt (files needed for normal Windows operation). After successful infiltration, this malware encrypts files on victims' computers and demands ransom payments of 2.2 Bitcoin to decrypt them.Ĭrypt0l0cker ransomware (some newer variants use the name CryptoLocker) encrypts all files found on victims' computers except the following. Crypt0L0cker (or TorrentLocker) is a ransomware infection that infiltrates computers using infected email message attachments (message topics often include: “package tracking”, ”speeding tickets”, “unpaid invoice”, etc.) Note that cyber criminals localise these spam email messages to make them appear legitimate.įor example, computer users located in the United Kingdom receive fake email messages claiming to be package tracking messages from Royal Mail, PC users from Australia receive messages from Australia Post, etc.

Crypto locker decryption tool