MrLocker Ransomware

The MrLocker Ransomware is a Trojan that threatens to delete your files unless you pay a ransom, similarly to the Jigsaw Ransomware campaign. While its symptoms are similar to file-encrypting threats, the MrLocker Ransomware doesn't encrypt or erase data at this time. Remove the MrLocker Ransomware with full system scans from your anti-malware products once you see signs of an infection, or block it with appropriate security features preemptively.

Trojans Waving Recycling Bins Ominously

Trojans that threaten to do more damage than is in their power to inflict are a dime a dozen phenomena, but not every threat actor bluffs in the same way. Malware experts' latest discovery points to a new Trojan by the name of the MrLocker Ransomware using most of the philosophy of a file-encrypting one, but with deletion substituting for an encryption algorithm. The symptoms are, as always, little more than a way to trick a victim into paying ransoms without need.

The MrLocker Ransomware is a Visual Studio-based program for Windows systems. Although its development may be unfinished, malware experts see two, separate variants of the Trojan. Both versions of the MrLocker Ransomware launch a pop-up that may or may not block your desktop accessibility, depending on which version is infecting the PC. The screen-locking variation of the MrLocker Ransomware claims that the PC's user has committed non-specific illegal actions and that the system is under a lock-down until the user enters a code. The other version uses a separate message with traditional ransoming demands for Bitcoin payments in ten days before it deletes your files.

Critically, neither version of the MrLocker Ransomware can encrypt or delete documents, images, or other content on your PC. Primary security concerns from the MrLocker Ransomware infections, therefore, are concentrated on the potential for its pop-up feature to block your Windows interface, as well as the chance of other threats being responsible for its presence.

Sending Mister out the Door

If your version of the MrLocker Ransomware requires an unlocking code, you can disable its pop-up with the string '6269521' in the field just above the Enter button. However, Trojans requesting Bitcoin money never should be paid to resolve security issues with your PC, especially concerning the MrLocker Ransomware, since the Trojan has no timer or file-deleting features. If keyboard shortcuts, such as Alt + F4, are non-functional, you can use the Windows Safe Mode feature to reboot and avoid this symptom.

Always scan your computer with anti-malware products after confirming an infection from any threatening software, including ones with limited attacks like the MrLocker Ransomware. While the MrLocker Ransomware is, alone, a low-level threat, it doesn't distribute itself and may be being installed by other Trojans. Because this Trojan has a minimalist payload, malware experts are finding that most security products identify it generically, although they should remove the MrLocker Ransomware.

To threat actors, anything they can do to get money with less work than usual is a net win for their 'business.' Assuming that a Trojan like the MrLocker Ransomware is making an honest effort at communicating is asking to be taken advantage of, both security-wise and financially.