Il tuo computer e stato infettato da Cryptolocker!

Posted by Lisa Blanc on October 6, 2016

What is Il tuo computer e stato infettato da Cryptolocker!?

If you want to know that Il tuo computer e stato infettato da Cryptolocker! is, then you have come to the right cyber security site. It is a ransomware-type infection and should be removed as soon as possible because it is designed to encrypt files on the infected computers and demand that their owners pay a ransom to decrypt the files. Hence, all of the cards are in this cyber criminal’s hands, and there is nothing you can do about this infection. Our malware researchers say that a free decryption is yet to be developed, but we do not recommend paying the ransom as the cyber criminal might not keep his end of the bargain. test

What does Il tuo computer e stato infettato da Cryptolocker! do?

Il tuo computer e stato infettato da Cryptolocker! is not the kind of application that you can download from a website directly. No, it is distributed in a secretive and malicious manner. Our security experts say that its malicious executable can be dropped anywhere on your computer, so it may be difficult to find it. For example, the dropper file might place the malicious executable in %APPDATA%, %USERPROFILE%\Downloads, %TEMP%, %WINDIR%\Syswow64 or %WINDIR%\System32. However, finding this executable is like finding a needle in a haystack, so we suggest that you use SphyHunter’s free scanner to locate this malware and then go to its location and delete it. However, before we go into that, let us discuss how this ransomware works in greater detail.

Once on your computer, this ransomware will scan it for encryptable files and then go to work. It is configured to target all kinds of files ranging from documents to executables. For Example, it is set to encrypt .7z, .asp .avi, .bmp, .pdf, .sql, .png, .accdb, .zip, .cad, .cdr, .doc, and .docm, among other file types with a unique RSA-2048 encryption algorithm. Researchers say that, while encrypting the files, it will append them with the .locked file extension. The icons of the files are also set to change and, but the names of the files should remain intact. Without a doubt, this ransomware is designed to encrypt as many files as possible to compel you to pay the ransomware if it manages to encrypt your personal and valuable files.

Once the encryption is complete, Il tuo computer e stato infettato da Cryptolocker! will launch its ransomware window that features the random note in the Italian language. The note contains a user ID and other information such as the email address of the cyber criminal to contact him and pay the ransom. The criminal wants you to pay 130 Euros which might not be a lot of money for some but keep in mind that you might not receive the decryption key even after you have paid for it.

Where does Il tuo computer e stato infettato da Cryptolocker! comes from?

Apparently, whoever created this ransomware is either based in Italy or just tailored this ransomware to be distributed in Italy. Nevertheless, no one is safe from it regardless of location. Researchers say that this ransomware is currently being distributed trough malicious emails that feature zipped attachments. These attachments are likely to contain some kind of file that secretly injects this ransomware’s executable on your PC. Our security experts think that the file contained in the zipped attachment can be a JavaScript file that runs a malicious script through Rundll32.exe. Hence, the infection will occur secretly, and this ransomware will be launched automatically.

How do I remove Il tuo computer e stato infettato da Cryptolocker!?

We hope that you found this short description useful. As you can see, Il tuo computer e stato infettato da Cryptolocker! is a highly malicious infection that can encrypt your files and ruin them beyond repair. You can try to pay the ransom, but there is no guarantee that you will get it. Therefore, we recommend that you remove this ransomware from your PC. Since the locations where its dropper file injects the executable varies, we suggest using SpyHunter’s free scanner to locate it for you. Please follow the instructions below.