How to Eliminate Xxlecxx (Malware)

What is Xxlecxx? Xxlecxx is malicious Trojan infection that poses as a ransomware. It pretends to encrypt your files using a lock screen that contains the ransom note to scare you into thinking that you files are encrypted when in fact, they’re not. In other words, it is nothing but a deceptive malware that uses lock screen to imitate a ransomware infection. Although it is merely a prank-like virus, most users fall for this trick since the creator behind this malware has applied social engineering tricks in creating a believable ransom note. This so-called ransom note is as follows:

“Your files are encrypted with the xXLecXx Ransomware
Your files have been encrypted by the xXLecXx Ransomware.
You cannot access your PC right now. You have 2 options
1. We delete all your files
2. You pay us $150 USD and we decrypt all your files
The choice is yours. If you choose option 2, click the button below, (What to Do) and pay us $150 USD and get a decrypt code
What to Do
Have your decrypt code? Submit it here. [TEXT BOX] Submit”

Based on the ransom note, this fake ransomware will demand $150 from you for the supposed file decryption code and will imply that there is no other way out of the problem but to pay the ransom which is preposterous, considering that it does not really encrypt your files. The “What To Do” button shows you additional information on how to process the payment. This is another reason why some users are deceived. The ransom note is detailed that without a closer look through a keen eye it’s hard to decipher it from a real ransomware. You need not to panic for there are lots of alternative solutions such as this article, to remove this lock screen Trojan.

How is Xxlecxx distributed?

According to our research team, this malware spreads through spam emails. The attackers attach a corrupted file named Xxlecxx.exe to the spam email. These spam emails are opened without hesitation by some users since some of them looked like legitimate emails like invoices, receipts, etc. That’s why you have to be cautious if you open emails from unknown senders for you never know what the message may contain, if possible, you can check the sender’s identity for verification and whatnot.

Removing Xxlecxx malware from your computer:
Step 1: Hold down Alt + F4 simultaneously to unlock the computer screen.
Step 2: Open the Windows Task Manager by pressing Ctrl + Shift + Esc. Go to the Processes tab. Locate suspicious processes that can be related to Xxlecxx. Right-click on them and select Open File Location then scan them using any up-to-date antivirus. After opening each folder, end the infected processes and delete their folders.

Step 3: Open Control Panel by pressing Start key + R to launch Run and type appwiz.cpl in the search box and click OK.

Look for Xxlecxx or any suspicious program that might be related to it and then click Uninstall.

Step 4: Go to the System Configuration. To do so, click the Windows button and type msconfig in the search box and hit Enter Proceed to Startup and unmark items with an unknown manufacturer.
Step 5: Hold down Windows + E keys simultaneously.
Step 6: Go to the directories listed below and delete everything in it. Or other directories you might have saved the file related to Xxlecxx.

%USERPROFILE%\Downloads
%USERPROFILE%\Desktop
%TEMP%

Step 7: Look for Xxlecxx.exe or any suspicious executable file that could be related to Xxlecxx.
Step 8: Right-click on it and click Delete.

The next step below is not recommended for you if you don’t know how to navigate the Registry Editor. Making registry changes can highly impact your computer. So it is highly advised to use PC Cleaner Pro instead to get rid of the entries that Xxclecxx may have created. So if you are not familiar with the Windows Registry skip to Step 13 onwards.

However, if you are well-versed in making registry adjustments, then you can proceed to step 9 and make sure to export any entries you will modify just to be safe.
Step 9: Open the Registry Editor, to do so, tap Win + R and type in regedit and then press enter.
Step 10: Locate the path below and check if there is a new suspicious entry.
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
Step 11: If there is a new suspicious entry that can be related to Xxlecxx and delete it.
Step 12: Close the Registry Editor.
Step 13: Empty the Recycle Bin.
Step 14: Restart your PC.
Follow the continued advanced steps below to ensure the removal of Xxlecxx:

Perform a full system scan using SpyRemover Pro.

Turn on your computer. If it’s already on, you have to reboot it.

After that, the BIOS screen will be displayed, but if Windows pops up instead, reboot your computer and try again. Once you’re on the BIOS screen, repeat pressing F8, by doing so the Advanced Option shows up.

To navigate the Advanced Option use the arrow keys and select Safe Mode with Networking then hit Enter.

Windows will now load the Safe Mode with Networking.

Press and hold both R key and Windows key.

If done correctly, the Windows Run Box will show up.

Type in explorer http://www.fixmypcfree.com/install/spyremoverpro

A single space must be in between explorer and http. Click OK.

A dialog box will be displayed by Internet Explorer. Click Run to begin downloading SpyRemover Pro. Installation will start automatically once download is done.

9. Click OK to launch SpyRemover Pro.