Try to recover .LOCKY files.

Recuva
1

I am trying to recover .LOCKY file which are infected by locky virus on my Windows XP PC before 4 days ..

I download Recuva and open the infected directory ,

in the first stage , the files is listed with real names before the infection , which is good to see all your files with real names .

After that i try to recover one selected file and export it to another location . the problem is when i open it , the file content is still encrypted , and does not open it .

I try with Recuva as free edition ,

The question , if i wanna buy a professional version / business version , is it able to decrypt the files content inside and convert it back to the old state ..

Thanks .

2

You cannot use Recuva as a file decrypter.

At the moment there is no known decrypter for .locky :(

Please see this forum which deals with all Ransomware.

You can see the thread about LOCKY listed

http://www.bleepingcomputer.com/forums/f/239/ransomware-tech-support-and-help/

Make a backup of your encrypted PC and save it somewhere in case a decrypter is found (don't give up hope :) )

3

Strange, because with a help of Recuva I managed to decrypt some of files encrypted by this Odin ransomware.

Or this is not a decryption but only recovery from shadow copies ?

4

Recuva cannot decrypt files, LETS GET THAT CLEAR.

You may have been very lucky and recovered some shadow copies. At the moment there is no working Decrypter.

Also Odin is not Locky although it is the same 'family' . Locky morphed into .Zepto and has now morphed into .Odin.