Emsisoft Decrypter for LooCipher helps to decrypt files encrypted by the LooCipher ransomware.

The LooCipher ransomware is crafted to encrypt your files using AES-128 ECB, and adds the extension ".lcphr." There is no ransom note file left by LooCipher, but it does display a lock screen telling the victim to make a BitCoin payment. And then use the same malware to decrypt their files once payment is complete.

Below you will find an image of the LooCipher lock screen:



The decrypter requires an internet connection, and access to a file pair consisting of one encrypted file and the original, unencrypted version of the encrypted file to reconstruct the encryption keys needed to decrypt the rest of your data. Please do not change the file names of the original and encrypted files - this is due to the fact that the decrypter may perform file name comparisons to determine the correct file extension used for encrypted files on your system.

Decrypters typically offer various options depending on the particular malware family. The available options are located in the Options tab and can be enabled or disabled there. After you have added all the locations you want to decrypt to the list, click the “Decrypt” button to start the decryption process. The screen will switch to a status view, informing you about the current process and decryption status of your files.

Emsisoft Decrypter for LooCipher is configured to inform you that the decryption process has been completed. If you require a report for your records, you can save it by clicking the Save Log button. You also have the option to copy it straight to your clipboard for use in emails, forum posts, etc., if needed.