How to remove survey warning (ransomware)

It has been recently noticed by our anti-malware technician team that a new way of ripping users off has been invented by the pack of cyber hackers. Certain virus may infiltrate your PC and then ask you to pass certain survey. In reality, this is not any survey at all. The virus asks you to put in some unlocking code, but to obtain such code users are prompted to pay via the site http://fileice(dot)net/download(dot)php?file=40l49. Below you may find the screenshots of such misleading surveys, which are the ransomware in reality:

Survey warning

By the way, in case you indicate the wrong code twice, the malware will reboot your PC. Once this scam comes into your workstation, it creates the following paths:

%AppData%\CommandPrompt.exe
%AppData%\sd.bat
HKCU\Software\Microsoft\Windows\CurrentVersion\Run!CommandPrompt %AppData%\CommandPrompt.exe

In order to get rid of this nasty malware from your system we strongly recommend you to scan your computer with GridinSoft Trojan Killer through the direct download link below. Surely, the presence of this fake survey warning is surely annoying, since it also blocks launching of the following processes:

taskmgr
cmd
msconfig
wmplayer
calc
regedit
notepad
explorer
skype
msnmsgr
steam
origin
utorrent
bittorrent
desura
powershell
winrar
winword
excel
powerpnt
outlook
vlc
javaw
mirc
ccleaner
poweriso
mspaint
photoshop
teamviewer
defraggler
moviemaker
wireshark
acrord
rstrui
filezilla
vmware
iexplore
firefox
chrome
safari
opera

Plus, this scam may annoy you with opening the CD/DVD drive without your consent. In addition, this virus may at its own desire spontaneously open the following sites:

hxxp://www.****her.com
hxxp://www.****pusgirl.com
hxxp://www.****rain.com
hxxp://www.****orn.com
hxxp://trol****olololololololo.com
hxxp://www.****me.com
hxxp://www.****ecash.org
hxxp://www.****forums.net/member.php?action=profile&uid=1
hxxp://www.****ube.com/watch?v=******
hxxp://anti****us-software-review.toptenreviews.com
hxxp://www.****e-cows.com
hxxp://mayt****rcebewithyou.com
hxxp://www.****ube.com/watch?v=*****
hxxp://meat****.com
hxxp://www.****orngay.com

Download GridinSoft Trojan Killer for thorough system checkup

Leave a Comment


*