HappyLocker Ransomware Removal Guide

Do you know what HappyLocker Ransomware is?

HappyLocker Ransomware is a computer malware that can enter your computer covertly and execute an attack on it. It was designed to encrypt files that are stored on your PC and removable drives in an effort to extort money from you. It indiscriminately encrypts all files to encrypt valuable content for which you would be willing to pay whatever amount the developers ask you to pay. However, you should refrain from doing so if it happens to encrypt your files because you might not receive the promised deryptor.

Our cyber security specialists have concluded that HappyLocker Ransomware is a release variant of HiddenTear Ransomware. Also, it works similarly to Locky Ransomware, so it is a highly dangerous computer infection. Researchers say that its dropper file named Instant Satoshi BOT is distributed via http://viseopages{.}com/btc. This site poses as legitimate, but it is unclear what it tries to imitate. In any case, you should not visit this site because your computer can be secretly infected with this ransomware. Apart from this well-crafted distribution method, HappyLocker Ransomware could also be distributed using email spam, but we have yet to hear of a case when this ransomware was distributed in this manner.

Malware researchers say that this malicious application is designed to encrypt many file formats that include, without limitation, .mid, .wma, .flv, .mkv, .mov, .avi, .asf, .mpeg, .vob, .pdf, .xls, .ppt, .stw, .sxw, .ott, and .odt. In short, this particular ransomware was designed to target nearly all possible file formats, particularly those that are likely to contain personal and, thus, valuable information. It appears that it was programmed to use the AES (Advanced Encryption Standard) to encrypt your files which is unfortunate because regardless of the key size, an AES encryption is difficult to crack and it is rather unlikely that HappyLocker Ransomware will have a free decryption program anytime soon. It starts encrypting the files upon infection and appends them with the .Happy file extension. Once the encryption is complete, it drops two files named READDDDDDD.txt and READ.png. Both of them feature the same information which states that your files were encrypted and that you need to visit a certain website to decrypt them. This website is at http://ysasite{.}com/happy and it is a simple platform for managing the ransom payment.HappyLocker Ransomware Removal GuideHappyLocker Ransomware screenshot
Scroll down for full removal instructions

The cyber criminals behind this ransomware ask you to pay 0.1 BTC which is currently an approximate 73.37 USD. Sure, it is not much money, but consider the fact that you might not receive the decryptor once you have paid because ransomware developers are notoriously untrustworthy because they are only in it for the money. Also, even if you get the decryptor, there is no guarantee that it will work. Therefore, you should not trust the cyber criminals and refrain from giving them your money because that money will serve only to encourage them to produce more malicious and highly sophisticated ransomware programs.

Evidently, HappyLocker Ransomware is one malicious piece of programming that deserves to be deleted ASAP. Unfortunately, its executable file can be dropped anywhere on your PC, so we recommend using SpyHunter’s free scan to detect it and then go to the folder where the executable is stored and remove it manually. Please consult the instructions below and remember that the only way you can prevent future infections is to practice safe browsing and get a powerful anti-malware tool.

How to delete HappyLocker Ransomware

  1. Open your web browser.
  2. Type http://www.spyware-techie.com/download-sph in the address box and hit Enter.
  3. Download SpyHunter-Installer.exe and run it.
  4. Install the program, run it and click Scan Computer Now!
  5. After the scan is complete copy the file path of the malicious executable.
  6. While in desktop, press Windows+E.
  7. Type the file path of the executable in File Explorer’s address box and hit Enter.
  8. Right-click the file and click Delete.
  9. Empty the Recycle Bin.

In non-techie terms:

HappyLocker Ransomware is a malicious program that is set to covertly infect your computer, encrypt your most valuable files and demand that you pay a ransom to get the decryptor to get your files back. Its developers are motivated by money and even though they do not ask for much, we do not recommend paying the ransom, but suggest that you remove it.