Mechapixel Forums

Mechapixel Forums (
-   Technology Bytes (
-   -   Ransomeware (

Chuck 2011-05-24 6:10

If you haven't had the displeasure consider yourself lucky, if you have dealt with it not an easy job to get rid of so I hope this helps.
This time for me was MS Removal (not me personally, co-workers times 2), basically like others a phony antivirus that holds your system hostage saying it is infected and you must pay to fix it. Well don't and you darn sure shouldn't.
The fix
You may need to be in safemode with networking to even get started since some of these bastard programs don't even allow you to open a browser window.
Step A. Download rkill from one of these links.
Step B. If you don't have it download malwarebytes from here.
Step C. If you aren't in safe mode get there, you know the f8 key on startup, safe mode with networking.
Step D. Once to the desktop run rkill, it will shut down the malware/ransomeware to allow for removal.
Step E. Once rkill is done run a full scan of malwarebytes, view results and remove infected. If you are online or can get there update malwarebytes if not run it anyway and keep your fingers crossed.
Step F. Quit clicking random porn links and ask for advice on the sites that are safe.

As a footnote I keep a thumbdrive loaded with all the tools I can to fight this stuff. Get one, load it up and keep it handy.

b0rg9 2011-05-24 7:24

Good advice. I have a shitty low-memory thumbdrive I got for free -- this sounds like a good use for it.

/mmm, random porn links...

RepoMan 2011-05-24 9:05

:thumbsup: Yeah, just did those exact steps with a computer I was working on.

This does seem to be the common infection these days.

Dinahmoehum 2011-05-24 10:25

A friend of mine said he has a machine that is locked up like that, but didn't ask for a fix.

All times are GMT -5. The time now is 4:46.

Powered by vBulletin®
Copyright ©2000 - 2019, Jelsoft Enterprises Ltd.