When it finished encrypting your data the infection displayed a screen titled Locker, where version number were random numbers such as 1.7, 2.62, 1.91, etc. Once Locker was activated, it scanned all drive letters for specific file extensions and encrypted them using AES encryption. On May 25 at Midnight local time, a Trojan.Downloader was issued the command to install Locker onto an infected computer. Locker is a file-encrypting ransomware program that targets all versions of Windows including Windows XP, Windows Vista, Windows 7, and Windows 8. I would also like to thanks Fabian Wosar, Mark Loman, Erik Loman, Nathan Scott, and White Hat Mike for their input on this infection. Once at the topic, if you are a registered member of the site you can ask or answer questions or subscribe to the topic in order to get notifications when someone posts more information. If you are interested in this infection or wish to ask questions about it, please visit either the Locker Ransomware Support Topic. Info: There is an active Locker Ransomware support topic that contain discussion and the experiences of a variety of IT consultants, end users, and companies who have been affected by this computer infection.

Provent crypto locker