Locky ransomware virus spreading via Word documents
Kevin Beaumont
166

On the top result in google I found an article that told me to delete certain registries. Do you think that it could work?

Link here

Look for these files:

%UserpProfile%\Desktop\_Locky_recover_instructions.bmp
%UserpProfile%\Desktop\_Locky_recover_instructions.txt
%Temp%\[random].exe
Additionally, type Regedit in the windows search field, and deal with the following registries:

HKCU\Software\Locky
HKCU\Software\Locky\id
HKCU\Software\Locky\pubkey 
HKCU\Software\Locky\paytext
HKCU\Software\Locky\completed
HKCU\Control Panel\Desktop\Wallpaper

Show your support

Clapping shows how much you appreciated Martin Naydenov’s story.