Restore Files Encrypted by CryptoLocker Virus

Using system restore feature to restore your CryptoLocker virus infected Windows to a previous healthy state point. This is how you're likely to decrypt files encrypted by CryptoLocker ransomware. Or, try EaseUS Data Recovery Wizard to restore files that were hidden or deleted by CryptoLocker virus, when system restore is not enabled.

Table of Contents

What You'll Do When Issue Happens

When CryptoLocker kidnapped your files on your computer, relax. It's just bluffing. You can simply bring them back with the following 4 steps:

Workable Solutions Step-by-step Troubleshooting
Remove CryptoLocker

1. Disconnect your computer from the network...Full steps

2. Run antivirus software to clear CryptoLocker...Full steps

3. Restore lost files removed by CryptoLocker...Full steps

4. Perform System Restore if files not found...Full steps

About CryptoLocker Ransomware

It can be a catastrophic disaster if your Windows computer was intruded by this type of ransomware called CryptoLocker, which propagated mostly in the form of seemingly innocuous email attachments. It's always late when you detect the intrusion, as many of your files had been encrypted by the ransomware virus. Do you know how many types of files will be affected soon after CryptoLocker attacked your computer? UP to 80s! And the most known types are .doc, .docx, .wps, .xls, .xlsx, .ppt, .pptx, .pst, .pdf, .jpg, .jpeg...

Remove CryptoLocker & Decrypt Files Encrypted by CryptoLocker Virus

We've sensed the danger of CryptoLocker virus, so it's urgent to find a way to remove it off from our computer and decrypt files. As all the ransomware's blackmail mechanism, spending money from tens to hundreds even to thousands of dollars would possibly get the virus removed, however, not able to restore the encrypted files as it advocates.

What is the other possible way to remove CryptoLocker from your computer? How to recover files deleted or encrypted by ransomware virus?

#1. Disconnect Network Connection to Prevent Further Infection

If your computer has been infected by CryptoLocker, disconnect from your wireless or wired network right away to prevent further file encryption.

#2. Run Antivirus Software on Your PC, Clear CryptoLocker Virus 

No matter you've lost files by virus attack or get files damaged by CryptoWall/CryptoLocker, it's all recommended that you should apply some anti-virus software to clean up and wipe out all virus, malware, ransomware, etc from your PC.

#3. Restore Hidden and Deleted Files after Clearing CryptoLocker Virus

EaseUS file recovery software is good at virus file recovery, and it has helped recover files infected by shortcut virus, locky virus, and .crypt files infected by ransomware in many ways.

This CryptoLocker virus encrypts files by first making a copy of the files, encrypting the copy, and then deletes the original. So, you should feel no hesitated to restore the original files for the first attempt.

  • Select the infected hard drive and click "Scan".
  • Run a scan to find all virus hidden and deleted files.
  • Preview and recover data.

Step 1. Select the virus infected drive to scan

Run EaseUS virus file recovery software on your Windows PC.

  • If it's an HDD where files were hidden or deleted by virus, it's better to install the software on a different volume or an external USB drive to avoid data overwriting.
  • If the infected device is an external hard drive, flash drive or memory card, it doesn't matter to install the software on the local drive of the computer.

Select the correct drive according to its drive letter and click Scan

select a location and click scan

Step 2. Wait for the scan results

The software will immediately start a scan process to find your lost files on the virus infected hard drive. Do not stop the deep scan until all lost files show up. To quickly locate the wanted files, you can use the Filter feature to display only the pictures, videos, documents, emails, etc.

When the process finishes, you can double-click files to preview their contents.

scan deleted files

Step 3. Select file(s) to recover

Select the files you want and click the Recover. You should save these files to another safe spot on your PC/storage device, not where they were lost.

Restore lost data from drive which was infected by virus

#4. Perform System Restore if File Recovery Failed

If EaseUS data recovery wizard failed to bring back the encrypted files, you need to do a system restore from Shadow Copy, File History or a third-party backup and recovery software, or restore the previous version of a document or file before CryptoLocker encryption, by right-clicking the encrypted file and choose properties.

Was This Page Helpful?

Updated by Roxanne

Roxanne is one of the main contributors to EaseUS and has created multiple posts on digital devices like PCs, Mobile phones, tablets, Mac, etc. She loves to share ideas with people of the same interest.

Read full bio

Written by Jean

Author Jean has been writing tech articles since she was graduated from university. She has been part of the EaseUS team for over 5 years. Her special focuses are data recovery, disk partitioning, data space optimization, data backup and Mac OS. By the way, she's an aviation fan!

Read full bio

Product Reviews

TrustScore 4.7 | 323 reviews
  • EaseUS Data Recovery Wizard is a powerful system recovery software, designed to enable you to recover files you’ve deleted accidentally, potentially lost to malware or an entire hard drive partition.

    Read More
  • EaseUS Data Recovery Wizard is the best we have seen. It's far from perfect, partly because today's advanced disk technology makes data-recovery more difficult than it was with the simpler technology of the past.

    Read More
  • EaseUS Data Recovery Wizard Pro has a reputation as one of the best data recovery software programs on the market. It comes with a selection of advanced features, including partition recovery, formatted drive restoration, and corrupted file repair.

    Read More