The actors behind ZeroLocker are asking $300 worth of BTC for decrypting the files. This goes up to $500 and $1000 as time passes. The malware gets executed at boot from C:ZeroLockerZeroRescue.exe. It encrypts virtually all files on the system, rather than using a set of pre-defined filetypes to encrypt. After encryption the malware runs the cipher.exe utility to remove all unused data from the drive, making file recovery much harder.”]
Source: https://securelist.com/zerolocker-wont-come-to-your-rescue/66135/