CryptoLocker is a computer virus called Ransomware, meaning “ransom virus” when controlling the victim’s computer. It will encrypt important data files of the machine and simultaneously issue a ransom warning, sometimes 100 $, 200 $, 300 $ or 2 Bitcoin. Victims have up to 100 hours to process the ransom transfer. Otherwise, the data will be deleted.

Phục hồi một ổ cứng bị nhiễm CryptoLocker

How to Recover CryptoLocker Infected Hard Drive (Ransom Virus)

To decrypt your CryptoLocker infected files, go over to. To find the decryption key, you need to submit an encrypted file template and your email address so that the website can send you the decryption keys and a free program to decrypt the encrypted files. Don’t worry; your email address will not be used for any marketing purposes (by website). Upload only files with no sensitive information.

Continue entering your email address, click the “Choose file” button -> select a sample CryptoLocker encrypted file, enter the CAPTCHA code, and click the “Decrypt” button.


Once you’ve submitted the sample file, it will be processed, and the website will send you a decryption key (private key) along with a link to download the decryption program.

Giải mã-cryptolocker-tập tin-email

Once you have emailed the decryption key and decryption tool, launch the decryption tool and use the command below to decrypt your encrypted files.
 Decryptolocker.exe -key "  "

Unfortunately, the tool provided does not automatically decrypt all the files on your computer. You have to decode one file at a time unless you know how to automate things using Windows Powershell or batch scripts. You can find more information about CryptoLocker decryption above.

CryptoLocker is a nasty malware that feeds users precious. If you are infected with CryptoLocker, you can use the above service to get your files back. Also, make sure you are using good antivirus software to protect yourself against future attacks.

Note that although this process (hopefully) works with crypto locker, it may not be able to decrypt files encrypted by the variant crypto locker like CryptoBit, CryptoDefense, etc.