Ransomware virus that locks computers. How to remove it

andy | November 1, 2012

Ransomware is a special type of computer infection that locks the screen or desktop of the infected PC and then asks for a ransom amount to be paid in favor of hackers that developed it. The majority of contemporary ransomware infections present themselves as some warnings supposedly coming from police and other law enforcement bodies of various countries. Ransomware lockers today have an international character, this means that they’re localized depending on the target country and language of the infected PC. The niche of this threats is ever-increasing today, so take heed to the steps one needs to undertake to unlock the computer infected with this type of infection.

Ransomware virus

As we’ve already mentioned above, the virus known as ransomware often has the form of police locker. It comes up suddenly, out of the blue, and immediately starts accusing users of committing various crimes online with application of the infected computer, thus attempting to explain the reason for the PC being locked. However, this type of warning isn’t associated with the police, not at all. The whole truth you should know about it is that this is the virus locker that tries to fulfill its mission that was implanted into its codes by the hackers that elaborated it.

The text of the ransomware’s warning often accuses users of performing various forms and types of crimes, such as watching illegal content over the Internet, storing and spreading it among other users, illegally downloading audio, video and software samples, reproducing them and spreading throughout the Internet, visiting the sites of terrorist organizations for the purposes of supporting them, sending unsolicited spam, etc. Thus, the hackers bring users to the point where they will be instructed to pay certain amount of funds as a fine (penalty or forfeit) as a ransom to unlock the computer.

In many cases hackers who developed the ransomware infection prompt users to send them the codes of some well-known payment processing companies, such as Ukash, Paysafecard or GreenDot MoneyPak. The first two are especially popular in Europe, whereas the final one gained popularity in the US and Canada. Thus, the fraudsters want users to donate payment in their favor by means of indication of special voucher of PIN codes of these payment systems.

We hope that you will never obey the misleading instructions of ransomware trojans. Of course, it is quite scary to see your PC locked like described above. Still, now you know the whole truth about what ransomware locker is. It doesn’t let you work with your PC in a normal manner. Restarting the computer does not help and the locked status persists. So, in order to revive your PC back to the fully functional mode we strongly recommend that you follow the guide below that will teach you how to do it with the help of our recommended security software.

Ransomware unlocking procedure

Note! This tutorial is effective for all Ukash and Paysafecard viruses.

1. Restart your computer and press F8 while it is restarting.
2. Choose safe mode with networking.
safe mode with networking
3. Launch MSConfig.
Press Start –> Run
RUN
or press [Win]+R on keyboard
Type MSConfig
MSConfig
4. Disable startup items rundll32 turning on any application from Application Data.
5. Restart your system once again.
6. Scan with http://trojan-killer.net/download.php?trojankiller to identify file and delete it.

Some versions of these viruses disable all safe modes, but give a short gap that you can use to run anti-malware programs. Then do following:
1. Reboot normally.
2. Start –> Run.
3. Enter: http://trojan-killer.net/download.php?trojankiller If malware is loaded, just press alt+tab once and keep entering the string blindly then press Enter.
4. Press Alt+tab and then R (letter) couple of times. The process of ransomware virus should be killed.

  • GridinSoft Trojan Killer is recommended for a real system checkup
  • Leave a comment

    *