NOTE: While this tool could make Cryptolocker visible to A/V tools and therefore removable, that does NOT mean it can recover encrypted files.

This removal tool, however, has been built with the sole purpose of attacking the rootkit, and working with regular A/V software, it could help bring your PC back.įor more information on Gameover ZeuS and Cryptolocker, see this news article. Regular anti-virus utilities may not be capable of detecting Gameover ZueS due to its use of a rootkit to protect itself, and that rootkit may not be easily removed by anti-virus suites. Crypolocker can destroy files if the fee is not paid. Gameover ZeuS is also one of the primary delivery menthods for the Cryptolocker ransomware, which is a nasty piece of malware that encrypts the victim's files and folders and won't decrypt them until a fee of 1 bitcoin is paid, which can be hundreds of dollars. It harvests sensitive financial information from victims PCs and can be used to initiate or redirect wire transfers also. This is a particularly nasty piece of malware that is used to build and maintain a botnet. Trojan.Zbot Removal Tool from Symantec can detect and remove the infection of the Gameover variant of Trojan.Zbot, which uses the Necurs rootkit to protect itself.

Symantec trojan poweliks removal tool