ransomware is different …. This article discusses ways to get rid of ransomware - a malicious program, usually a trojan, that locks the computer and suggests sending money to a specific electronic wallet or paid SMS to a short number to restore it. As a rule, nothing changes after sending money or SMS, and the cost of SMS is much higher than that which was originally indicated. Ransomware viruses are different: some restrict the use of a browser or access to websites; others encrypt user files; still others block access to OS resources or restrict actions in it. Typically, these viruses are hidden among files with the extension rar, zip, bat, exe, com.
Instruction manual
1
If you can’t access the Internet or go to most sites, and a message appears saying that you need to send paid SMS, then most likely you are dealing with such viruses: Trojan-Ransom.BAT.Agent.c or Trojan-Ransom.Win32.Digitala (Get Accelerator, Digital Access, Get Access, Download Manager v1.34, Ilite Net Accelerator). The first virus has the bat extension, it modifies the Hosts file, which is located in the root directory on drive C (Windows-95/98 / ME) or in the WindowsSystem32driversetc folder (Windows NT / 2000 / XP / Vista). Open this file using any text editor and delete all lines except 127.0.0.1 localhost. After that, scan your computer with antivirus and restart it.
2
If a virus of the Trojan-Ransom.Win32.Digitala group appears: find out the activation code necessary to restore the computer’s health. Via another computer or mobile phone, go to the site of one of the manufacturers of anti-virus programs, go to the page with the service for deactivating ransomware viruses. Then fill in a few fields and get a code to unlock your computer. After unlocking, update the database and scan the computer.
3
If the unlock code you received doesn’t help, try treating your computer with the Digita_Cure utility (a product of Kaspersky Lab), which is specially designed to treat Trojan-Ransom.Win32.Digitala ransomware viruses, or use the CureIt program (Dr.Web product) detect other types of viruses. Before starting treatment, close the Internet access and reboot the computer in safe mode - press F8 immediately after turning it on and select "Download in safe mode. Then start the USB flash drive or utility disk and perform a full computer scan. After treatment, restart in normal mode.
4
If you use the Internet Explorer browser, and when you visit any site, a banner appears asking for money, which means that you were visited by the Trojan-Ransom.Win32.Hexzone or Trojan-Ransom.Win32.BHO virus. To get rid of it: open a browser and find in the menu the item "Tools" - "Add-ons" - "Enable or disable add-ons." After that, all add-ons that are installed in the browser will appear. Check all add-ons and find those that do not have an entry in the "Publisher" column or that say "Not verified." Now turn them off one at a time and after that launch the browser each time. After disabling the malicious add-in, the banner will disappear.
5
If you cannot run any programs except Outlook Express and Internet Explorer, this is the Trojan-Ransom.Win32.Krotten virus that blocks the operating system. Contact the free unlock service. After unlocking, check your computer with an anti-virus program with fresh databases. To avoid such cases, follow the safety rules and do not save on computer protection, use only licensed anti-virus programs, and store critical files on disks or flash drives.
note
Do not click on the links contained in emails from strangers or open the sent files. Most often, malware is contained there. You need to get rid of ransomware viruses as quickly as possible, but it is best to create all the conditions so that they can not harm you.
Useful advice
We will talk about them further. But if you are not sure that you can deal with the treatment of your computer yourself, it is better to contact a specialist for help. How to get rid of the ransomware virus. What should I do if the ransomware virus still gets into your computer? Firstly, do not panic. Despite the fact that ransomware viruses are rapidly evolving, they can still be fought.
