Locky Ransomware Encrypted File
3.3 | 3 Votes
What is a YKCOL file?
The Locky virus is highly dangerous malware. It is commonly referred to as ransomware, where the purpose of the virus is to take your files hostage and force you to pay the perpetrator (typically by way of bitcoin) to unlock your files.
The virus is commonly introduced through spam emails titled "Status of invoice" with a .7Z attachment, which is a .VBS file compressed with 7-Zip compression. If you download the 7Z file and decompress it, the VBS file is run and the virus begins scrambling your files, renaming them with the ".ykcol" extension, and encrypting them. The virus then generates a .BMP (ykcol.bmp) or .HTM (ykcol.htm) ransom note informing you of the takeover and what you need to do to recover your files.
NOTE: YKCOL is LOCKY backwards.
How to open a YKCOL file
Unfortunately, there is no program currently available to effectively restore YKCOL files to their original state. If you backup your files you can execute a full system restore.
FileInfo.com recommends you never pay a ransom to decrypt files encrypted by ransomware. Paying a ransom encourages ransomware distributors to continue their efforts, and there is no guarantee that paying a ransom will give you access to your files. Instead, you should restore your data from a recent backup created before the ransomware infected your computer.