Skip to content

Latest commit

 

History

History
15 lines (11 loc) · 875 Bytes

README.md

File metadata and controls

15 lines (11 loc) · 875 Bytes
Raw

ZLab - LooCipher Decryption Tool

This tool does not work if you restart your computer after the infection

Decryption tool for the LooCipher Ransomware

  1. Find the Process ID (PID) of the LooCipher ransomware
  2. Open cmd with elevated (Administrator) privileges
  3. Move to the path where this tool was downloaded
  4. In the cmd prompt, type ZLAB_LooCipher_Decryptor.exe <PID>

Disclaimer

Due to the continuing LooCipher infection campaign, we proceeded to release the decryptor in the shortest possible time in order to help the victims infected in the previous phase. So, the tool is a Beta release and it is still composed by an unsigned executable. We will provide to release some updates as soon as possible.