Extortion of your hard earned money has begun. Once the encryption process is complete a message, pops up on your screen delivering both the bad news and a ransom demand. Once a user opens the attachment or the website link, the virus is activated and promptly goes about encrypting your files (both on the infected machine and on any additional network shares it can find).

The payload hides within an attachment or a link to a website. Cryptolocker is propagated via infected email attachments, and via a botnet when activated, the malware encrypts certain types of files stored on local and mounted network drives using RSA public key cryptography. Recently new variants have appeared that are essentially the same Trojan, but are much more effective in preventing Cryptolocker removal & data retrieval. Once your data is encrypted you are in big trouble! Data retrieval & Cryptolocker removal is a big deal. Cryptolocker doesn’t discriminate, from the single user to the largest corporate network, it can invade and lock down all data inside the network. The Cryptolocker family of ransomware viruses and look-alikes (CTB Locker, Cryptowall, Torrent Locker, Locker, Locky etc.) are now well known as one of the major causes of data corruption and data loss across the world.

Crypto locker on machine