Biggylocker Virus 🔐 (. $Big$ Files) — How to Remove?

What is Biggylocker virus?

Biggylocker appends its specific .$big$ extension to the name of each encoded file. For example, a file entitled “photo.jpg” will be turned into “photo.jpg.$big$”. In the same manner, the Excel file with the name “table.xlsx” will end up as “table.xlsx.$big$”, and so on.

In every folder that contains the encoded files, a read_me.txt file will be created. It is a ransom money note. Therein you can find information on the ways of contacting the racketeers and some other information. The ransom note usually contains a description of how to buy the decryption tool from the Biggylocker developers. You can obtain this decrypting software after contacting via email. That is how they do it.

The read_me.txt file coming in package with the Biggylocker ransomware states the following:

$$$BiggyLocker$$$ ransomware
Your files are encrypted with a AES and RSA algorithm , it is unbreakable .
you can\'t recover your files without our decryption service , the price is 120 USD in bitcoin
after the payment you must email us at : 
to prove us that you pay.
- do not use any decryption tools because those tools will just destroy your files , making recover   impossible .
- do not rename your files .

 

our bitcoin address : 36zvYAn9vtbWQFcKcidPKhcuAz6woMszE9
or
bc1qw0ll8p9m8uezhqhyd7z459ajrk722yn8c5j4fg

 

we guarantee you will receive the decryption software after the payment .
greeting !

In the picture below, you can see what a directory with files encrypted by the Biggylocker looks like. Each filename has the “.$big$” extension added to it.

How did my computer get infected with Biggylocker ransomware?

Nowadays, there are three most exploited methods for malefactors to have the Biggylocker virus planted in your digital environment. These are email spam, Trojan injection and peer-to-peer file transfer.

If you access your mailbox and see emails that look like familiar notifications from utility services companies, postal agencies like FedEx, Internet providers, and whatnot, but whose “from” field is strange to you, be wary of opening those emails. They are very likely to have a malware item enclosed in them. Therefore, it is even riskier to open any attachments that come with letters like these.

Another thing the hackers might try is a Trojan horse scheme². A Trojan is an object that gets into your computer pretending to be something else. For instance, you download an installer of some program you need or an update for some software. But what is unboxed reveals itself a harmful agent that encrypts your data. As the installation wizard can have any name and any icon, you have to make sure that you can trust the source of the things you’re downloading. The optimal thing is to use the software developers’ official websites.

As for the peer-to-peer file transfer protocols like BitTorrent or eMule, the danger is that they are even more trust-based than the rest of the Internet. You can never guess what you download until you get it. So you’d better be using trustworthy websites. Also, it is a good idea to scan the directory containing the downloaded files with the antivirus as soon as the downloading is done.