.LOCKED File

The locked file extension is infamously associated with a ransomware labeled as KimcilWare that is distributed via e-mails, encrypts users files and them demands ransom in bitcoins for their recovery.

This particular ransomware was encountered in late march 2016 and targets web sites running the Magento Platform. Since then, many other ransomware use this suffix although they are of completely different types.

Below is a list of some of the known ransomware that share locked extension.

For example, ransomware called Apocalypse which was first encountered in June 2016 also seems to us this extension. But it does not appear to be the same as KimcilWare.

Some Turkish ransomware that appeared in July 2016 called 'Uyari' seems to also parasite on this extension, but that is also completely different ransomware.

Same goes for some Arabic ransomware that pretends to be PokemonGO.

A ransomware called ShelllLocker appeared in November 2016 and also shares this suffix, although is of new origin.

December 2016 brings another ransomware that also shares this suffix. Two types were found and labeled as "You Have Been Hacked!!!" and Gusto.

How to open:

Such files can only be accessed again and recovered when you pay the ransom in bitcoins. You can also wait until new decrypter is made and available for public.

How to convert:

You cannot convert or recover *.locked files without some decryption utility.