How to Remove Locky Virus – Best Way to Get Rid of Locky Ransomware from Your PC

I’ve been infected with the Locky Virus that encrypted all my files. AVG does not seem to be detecting it. How do I remove this virus and get back my files? Please help.

What is Locky?

Locky is a new ransomware which has become a commonly seen type of ransomware after it held thousands of users’ important files hostages. It is often spread by JavaScript attachments on the emails. Your click on the attachment will then lead to the download of a ransomware called Locky. This ransomware, once infiltrated, can change your desktop wallpaper with this:

locky virus screenshot

Meanwhile, the Locky will start encrypting your important files in your local disk or even on your network shares with a .locky extension. Commonly, this ransomware can infect the files with the following extensions:

.ibank; .t13; .t12; .qdf; .gdb;.mdbackup; .syncdb; .gho; .cas; .svg; .map; .wmo; .itm; .sb; .db0; .DayZProfile; .xxx; .desc; .py.flv; .js; .css; .rb; .png; .jpeg; .txt; .p7c; .p7b; .p12; .dng; .jpeg; .jpg; .eps; .pdf; .pdd; .psd; .dbfv; .mdf; .wb2; .rtf; .wpd; .dxg; .xf; .dwg; .pst; .accdb; .mdb; .pptm; .pptx; .ppt; .xlk; .xlsb; .xlsm; .xlsx; .xls; .wps; .docm; .docx; .doc, etc.

This dangerous ransom virus can also delete Shadow Volume copies of encrypted files as well as System Restore points, making it impossible for computer users to use alternate methods to recover their files. Sadly, it is currently not possible to decrypt the files encrypted by the locky ransomware without the encryption key. Even so, you are not suggested to follow the _Locky_recover_instructions to pay for the ransom which is worth of several hundred dollars through BitCoin or other anonymous methods. There is no guarantee that you can get back your files. To save your computer for all the troubles, you might follow the guide below to remove it from your computer.

How to Remove Locky Ransowmare from Windows Computer?

Method 1: Manually Remove Locky Ransomware with Simple Steps

Method 2: Automatically Remove Locky Ransomware with SpyHunter Anti-Malware

SpyHunter Download

Method 1: Manually Remove Locky Ransomware with Simple Steps

Firstly, you needs to restart the infected computer and then log on safe mode with networking.

There is a guide: restart PC and before windows interface loads, tap “F8” constantly. Choose “Safe Mode with Networking” option, and then press Enter key.


Secondly, stop all processes related to Locky Ransomware

1. Press CTRL+ALT+DELETE to open the Windows Task Manager. Or Press Win + R to open Run, input “taskmgr”, and then click OK or hit Enter.

2. Click on the “Processes” tab, search for processes related to Locky Ransomware (this may look suspicious with random name or look normal but consume a lot of CUP), then right-click it and select “End Process” key.


Thirdly, show hidden folder, locate and delete Locky Ransomware associated files:

Click Start on the bottom left, input “folder options” in the search bar and hit enter. On the jump-out window,click View tab, tick Show hidden files, folders and drives, and untick Hide protected operating system files (Recommended) and then click OK.


c:\documents and settings\administrator\local settings\temp\awpde4f.tmp
c:\documents and settings\administrator\local settings\temp\jtmdf77.tmp
c:\documents and settings\administrator\local settings\temp\voh7a62.tmp

Fourthly, detect and remove Locky Ransomware related registry entries as listing:

Click on Start button, type into “regedit” and hit Enter. Then Clean all the malicious files and keys of Locky Ransomware in the registry editor.


registry editor


Finally, reboot computer and then clear up the files in the quarantine area.

Method 2: Automatically Remove Locky Ransomware with SpyHunter Anti-Malware

SpyHunter is a legitimate, real-time anti-spyware application designed to assist the average computer user in protecting their PC from malicious threats. Here shows how it works.

Step 1. Click the below button to download the file.


Step 2. Double click on SpyHunter-Installer.exe to install the program. Then click Run button.

Step 3. Open SpyHunter and click Scan Computer Now! to allow the program to start a scan on your computer.

Step 4. When the scan is completed, all the threats in your computer are successfully detected. Tick Select All and then click Remove button to uninstall it.

Optional Choice: Optimize your PC with RegCure Pro

RegCure Pro is an advanced optimizer which is able to solve your computer system problems, remove your privacy items produced by online searches, delete junk files, uninstall malware and fix performance problems. Here shows how it works.

1. Click the below button to download RegCure Pro

RegCure Pro

2. Run the RegCureProSetup Application and click the Yes button to install the program step by step.

3. When the program is successfully installed, double click on its desktop shortcut to open it. On the Overview tab, check all the scan settings and then click on the Click to Start Scan button to run a system scan on your computer. The first system scan will take some time, please be patient.

4. When the system scan is done, click on Fix All button to completely remove all the performance problems in your computer.

Warm Tips:

The manual removal process is cumbersome and should be handled with adequate expertise skills. Any mistake of removing critical files and registry entries will lead to your computer crash terribly. To get your PC problem resolved successfully within only a short period of time, you’d better to download SpyHunter Malware Removal to help you quickly and safely remove all possible infections from your computer.

Leave a Reply

Your email address will not be published. Required fields are marked *

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>