VenusLocker Ransomware

The VenusLocker Ransomware is a ransomware Trojan based on EDA2 and is used to take victims' files hostage. The VenusLocker Ransomware will encrypt the victim's files using AES-256 encryption. The VenusLocker Ransomware's encrypted files can be identified easily because it adds the extension '.Venusf' to the encrypted files' name. Unfortunately, the VenusLocker Ransomware uses a strong encryption method that makes it nearly impossible to recover the files that have been encrypted.

A Deity that Instead of Love and Beauty Represents Loss and Trouble

The VenusLocker Ransomware displays a ransom note in the form of an image file, which is contained in a file named Co3FhMAWcAEp-5y.jpg. The VenusLocker Ransomware will change the affected computer's Desktop image. In its ransom note, the VenusLocker Ransomware demands that the victim emails the VenusLocker@mail2tor.com to obtain information on the attack and payment.The VenusLocker Ransomware will drop its ransom note in text form too, in files named 'ReadMe.txt' in directories where it has encrypted content. The following is the full text of the VenusLocker Ransomware's lengthy ransom note:

---------------------------------------- Venus Locker ------------------------------------
Unfortunately, you are hacked.
1. What happened to my files?
Your personal files, including your photos, documents, videos and other important files on this computer, have been encrypted
with RSA-4096, a strong encryption algorithm. RSA algorithm generates a public key and a private key for your computer. The
public key was used to encrypt your files a moment ago. The private key is necessary for you to decrypt and recover your files.
Now, your private key is stored on our secret Internet server. And there is no doubt that no one can recover your files without
your private key.
For further information about RSA algorithm, please refer to https://en.wikipedia.org/wiki/RSA_(cryptosystem)
2. How to decrypt my files?
To decrypt and recover your files, you have to pay 100 US Dollars for the private key and decryption service. Please note that
you have ONLY 72 HOURS to complete your payment. If your peyment do not be completed within time limit, your private key will be
deleted automatically by our server. All your files will be permanently encrypted and nobody can recover them. Therefore, it is
advised that you'd better not waste your time, because there is no other way to recover your files except making a payment.
3. How to pay for my private key?
There are three steps to make a payment and recover your files:
1). For the security of transactions, all the payments must be completed via Bitcoin network. Thus, you need to exchange 100 US dollars
(or equivalent local currencies) to Bitcoins, and then send these Bitcoins (about 0.15 BTC) to the following address.
1Dj9YnMiciNgaKuyzKynygu7nB21tvV6QD
2). Send your personal ID to our official email: the VenusLocker@mail2tor.com

Your personal ID is cc673bcfcf644d2c1a88893cb0ff8fa7
3). You will receive a decryptor and your private key to recover all your files within one working day.
4. What is Bitcoin?
Bitcoin is an innovative payment network and a new kind of money. It is based on an open-source cryptographic protocol that is
independent of any central authority. Bitcoins can be transferred through a computer or a smartphone withour an intermediate
financial institution.
5. How to make a payment with Bitcoin?
You can make a payment with Bitcoin based on Bitcoin Wallet or Based on Perfect Money. You can choose the way that is more convenient for you.
About Based on Bitcoin Wallet
1) Create a Bitcoin Wallet. We recommend Blockchain.info (https://blockchain.info/)
2) Buy necessary amount of Bitcoins. Our recommendations are as follows.
LocalBitcoins.com -- the fastest and easiest way to buy and sell Bitcoins.
CoinCafe.com -- the simplest and fastest way to buy, sell and use Bitcoins.
BTCDirect.eu -- the best for Europe.
CEX.IO -- Visa / MasterCard
CoinMama.com -- Visa / MasterCard
HowToBuyBitcoins.info -- discover quickly how to buy and sell Bitcoins in your local currency.
3) As mentioned above, send about 0.15 BTC (equivalent to 100 USD) to our Bitcoin receiving address.
4) As mentioned above, and then, send us your personal ID via email, you will receive your private key soon.
About Based on Perfect Money
1) Create a Perfect Money account. (https://perfectmoney.is)
2) Visit to PMBitcoin.com. (https://pmbitcoin.com/btc)
input our Bitcoin receiving address in the "Bitcoin Wallet" textbox.
input 100 in the "Amount" textbox, the amount of Bitcoin will be calculated automatically.
click "PAY" button, then you can complete you payment with your Perfect Money account and local debit card.
6. If you have any problem, please feel free to contact us via official email.
Best Regards
the VenusLocker Team

Dealing with the VenusLocker Ransomware

The VenusLocker Ransomware's ransom amount is relatively small (about $100 USD, or 0.15 BitCoins). However, PC security analysts strongly advise computer users to avoid paying the VenusLocker Ransomware's ransom. Once the VenusLocker Ransomware has encrypted the victim's files, it may not be possible to recover these files. With this in mind, the best protection against the VenusLocker Ransomware attacks is to use a security product that is fully up-to-date to intercept the VenusLocker Ransomware attack and have backup copies of all important files. In this way, the files encrypted by the VenusLocker Ransomware can be easily restored from the backup copy.