Windows Problems Help Center

Monday, September 9, 2013

How to Remove CryptoLocker Ransomware?


Help! Lot of my important files and image files has been encrypted. What should I do? 

My computer is infected with CryptoLocker. Lots of ways have been tried, but they won’t work. Any suggestions about how to remove it? 


Some of my files are locked by CryptoLocker ? It asks for paying 100 USD to decrypt the files? Should I pay?




If you are one of the victims, you have come to the right place. You will get workable removal instructions.

CryptoLocker Ransomware Description


CryptoLocker is a newly ransom virus that could attack computer users from all over the world. It installs out of permission and may bring with other computer threat like rogue programs. Once executed, lots of word files and image files will be encrypted.




Then it lists lots of the encrypted files:


It states that you need to pay 100 USD to decrypt the files. After trying lots of security programs, but end with no avail, lots of computer users may pay and take the chance. This is the ransom virus that created by virus creators to gain benefits. Hackers may decrypt the files for the time being after you paying the money, but it will come back again and again to gain more money. If you are one of the unfortunate victims, don’t pay the money. What you should be is removing the virus completely to protect more files from being encrypted.

CryptoLocker is Really Dangerous


1. CryptoLocker installs to your computer out of consent.
2. It may bring with other kinds of computer threats.
3. It encrypts lots of word files and image files.
4. It states that you need to pay the money to decrypt the files.

Guide for Removing CryptoLocker


Step one: Access to the safe mode with networking

Restart your computer. As your computer restarts but before Windows launches, tap “F8″ key constantly. Use the arrow keys to highlight the “Safe Mode with Networking” option, and then press ENTER


Step two: Pressing keys “CTRL + Shift + ESC” to open the Task Manager, and then end all CryptoLocker running processes.


random.exe

Step three: Click on the “Start” menu and then click on the “Search programs and files” box to clear up all files created by CryptoLocker:

%AppData%\NPSWF32.dll
%AppData%\random.exe
%AppData%\result.db

Step four: Open Registry Editor by navigating to “Start” 
Menu, type “Regedit” into the box and click “OK” to proceed. When Registry 
Editor is open, remove all related registry entries to CryptoLocker:



HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Inspector %AppData%\random.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\WarnOnHTTPSToHTTPRedirect 0
HKCU\Software\Microsoft\Windows\CurrentVersion\Settings\ID 4
HKCU\Software\Microsoft\Windows\CurrentVersion\Settings\UID [rnd]
HKCU\Software\Microsoft\Windows\CurrentVersion\Settings\net [date of installation]
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\ConsentPromptBehaviorAdmin 0
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\ConsentPromptBehaviorUser 0
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\EnableLUA 0
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AAWTray.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AAWTray.exe\Debugger svchost.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVCare.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVCare.exe\Debugger svchost.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVENGINE.EXE
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVENGINE.EXE\Debugger svchost.exe


Step five: Deleting CryptoLocker by installing Anti-Malware program SpyHunter 


1) Click the icon below to download Spyhunter.


2) Install Spyhunter step by step:





3) Start a full and quick scan with SpyHunter .


4) Remove detected threats.



Attention 
CryptoLocker is a quite harmful Trojan horse. The sooner you take actions, the less danger your computer will face. Thus, you should get CryptoLocker out of your computer immediately once you find out its trace. Here I strongly recommend you to use the automatic way to remove CryptoLocker. Therefore, downloading Anti-Malware program SpyHunter is your best choice. For it is safe, reliable and convenient. It can help you to delete virus thoroughly and can prevent your computer from attacking in the future.

No comments:

Post a Comment