I wrote this article to help you remove A1Lock Ransomware. This A1Lock Ransomware removal guide works for all Windows versions.
Do you remember the Globe ransomware? Well, today`s article is about one of its new variants – the A1Lock infection. Don’t expect any originality from this one. It does exactly what other ransomware pieces do. It sneaks into your machine in complete silence and then encrypts all of your files. Also in silence. There is a reason why ransomware is so feared. Experts even consider it the most dangerous cyber pest you can encounter.
A1Lock locks all of your files behind your back. Your pictures, music, videos, MS Office files, presentations, databases, etc. and etc. all fall victims to the parasite. They receive the “.707” extension which turns them into unreadable gibberish. Your machine cannot recognize them anymore, hence you are not able to use any of them. Is that fair? A1Lock took your own files and made them inaccessible. All of this for the single purpose of having a leverage. Ransomware pieces get created to help their developers make money. Once the encryption process is over, A1Lock proceeds to the money-making part.
It drops the RECOVER_FILES.html files on your desktop as well as in every folder containing locked data. These messages explain your unpleasant situation and provide instruction. According to them, if you want your files back, you have to pay up. The crooks demand 0.06 Bitcoins (an untraceable online currency) in exchange for a special decryption tool. The claim that once you pay, they will send you the tool. However, do you think these people are reliable enough to make deals with them? After all, they are ones to encrypt your data in the first place. And now they want to help? Ironic, isn’t it.
Let us get one thing straight. They don’t care about your data. They want your money. In fact, they probably won`t send you the decryptor even if you pay. But even if they do, what then? You will free your data but the decryptor only goes that far. It doesn’t remove the actual infection. A1Lock remains on your PC ready to strike again. It can re-encrypt everything hours later and send you back to square one. It is not worth it. Paying is not an option. You cannot win by complying with the hackers` demands. You will only make your situation worse. So, don’t do it. If you want to recover your data safely, the pest must be gone. Use our removal guide at the end of this article to remove it for good. Then, continue using the guide to try and retrieve your files.
How did A1Lock enter? There are several techniques that ransomware infections use to get on board. One of them is the old but gold spam email method. Crooks haven`t forgotten it as it is still very effective. When you receive a message from someone you don’t know, proceed with caution and don’t open it. Better yet, delete it. Also, when you are installing updates, be careful. Always read the Terms and Conditions before agreeing.
Ransomware infections are often disguised as fake updates in order to trick you. Be always on the alert. The web is full of infections, praying for your haste, distraction, and carelessness. Don’t grant them. Protect yourself. Also, stay away from shady pages and illegitimate torrents. Don’t click on every ad/link that crosses your eyes. And, a piece of advice, always keep backup copies of your most valuable files. When it comes to ransomware, thinking in advance is the best thing you can do.
A1Lock Ransomware Removal
Method 1: Restore your encrypted files using ShadowExplorer
Usually, A1Lock Ransomware deletes all shadow copies, stored in your computer. Luckily, the ransomware is not always able to delete the shadow copies. So your first try should be restoring the original files from shadow copies.
- Download ShadowExplorer from this link: http://www.shadowexplorer.com/downloads.html.
- Install ShadowExplorer
- Open ShadowExplorer and select C: drive on the left panel
- Choose at least a month ago date from the date field
- Navigate to the folder with encrypted files
- Right-click on the encrypted file
- Select “Export” and choose a destination for the original file
Method 2: Restore your encrypted files by using System Restore
- Go to Start –> All programs –> Accessories –> System tools –> System restore
- Click “Next“
- Choose a restore point, at least a month ago
- Click “Next“
- Choose Disk C: (should be selected by default)
- Click “Next“. Wait for a few minutes and the restore should be done.
Method 3: Restore your files using File Recovery Software
If none of the above method works, you should try to recover encrypted files by using File Recovery Software. Since A1Lock Ransomware first makes a copy of the original file, then encrypts it and deletes the original one, you can successfully restore the original, using a File Recovery Software. Here are a few free File Recovery Software programs:
