How to Remove JiangLocker Ransomware

JiangLocker is a newly discovered ransomware variant. It does not seem to belong to one of the big ransomware clone families.

JiangLocker will encrypt almost all files on the victim system, leaving untouched only files that are essential to Windows. Once encrypted, files receive the ".jiang" extension. This means that a file called "music.mp3" will turn into "music.mp3.jiang" upon encryption.

When encryption finishes, the ransomware swaps out the system wallpaper with a new one and deposits its ransom note inside both a text file called "read.ini" and a pop-up window.

The ransom is set at 0.05 BTC. Of course, it is not recommended to negotiate with hackers or pay the ransom. The full ransom note goes as follows:

What Happened to My Computer?
Your important files are encrypted.
Many of your documents, photos, videos, databases and other files are no longer accessible because they have been encrypted. Maybe you are
busy looking for a way to recover your files, but do not waste your time. Nobody can recover your files without our decryption service.

Can I Recover My Files?
Sure. We guarantee that you can recover all your files safely and easily. But you have not so enough time.
If you want to decrypt all your files, you need to pay.

How Do I Pay?
Payment is accepted in Bitcoin only. For more information, click .
Please check the current price of Bitcoin and buy some bitcoins. For more information, click .
And send the correct amount to the address specified in this window.
After your payment, click button.
Once the payment is checked, you can start decrypting your files immediately. it may take a few hours.

We strongly recommend you to not remove this software, and disable your anti-virus for a while, until you pay and the payment gets processed. If your anti-virus gets updated and removes this software automatically, it will not be able to recover your files even if you pay!

1. To pay us, you have to use Bitcoin currency. You can easily buy Bitcoins at following sites:
hxxps://cex.io/
hxxps://www.binance.com/
hxxps://www.coinbase.com/

2. After then, if you already have Bitcoins, pay our Bitcoin address.

3. Then, press the "Check Payment & Decrypt all Files" button. We will automatically decrypt your files, after bitcoin transfer.