.locked File Virus is the dangerous file-encrypting virus that can be classified as ransomware. It is mainly created by cyber criminals with main motive to make illegal benefit from infected users. Cyber security researchers noted that it is the variant of open-sources ransomware project known as HiddenTear. Once it enters, it will scan the whole system and encrypt your various file and demand ransom for its decryption key. It uses AES-256 and the RSA-2048 encryption algorithm to encrypt the file and append the file name as .locked extension. After encryption, it will create a ransom note in the form of Windows screen and drop it on the desktop. According to the ransom note, it contains a short message about encrypted files and payment method to buy decryption key.
According to ransom message, cyber crooks demand ransom in the form of Bitcoins in exchange for decryption key and encourage users to buy it from designated wallet address. The cost of the decryption key is 0.022 Bitcoins which is equivalent to 500 USD. They can also warn users that if you not make payment in 48 hours then the amount of ransom will be doubled and after some time your files has been deleted permanently. After infiltration, .locked File Virus makes new registry entries in Window Registry to achieve high-level persistence that can allow other adware or malware threats into the system. It can also block Window Firewall and other security tools to hide in the system for a long time. Through this virus, cyber crooks monitor your online activities and steal your privacy for improper use.
.locked File Virus is mainly distributed through spam email attachments, via exploit kits, P2p sharing of the network, Freeware and shareware downloads, visiting suspicious sites like porn and torrent sites and much more. It is strongly advised that never make payment to the cyber criminals. It is not sure that you will successfully receive decryption key after making payment. Once you make payment, you also support their malicious business. Therefore, it is hardly advised you to remove .locked File Virus from the PC as soon as possible.