alexalex Posted January 27, 2012 Share Posted January 27, 2012 Free tool offered by Kaspersky called WindowsUnlocker which is useful in neutralizing complicated malware such as a ransomware that makes your computer unusable until you follow the on-screen instruction to transfer money in order to get the unlock code. The smarter ransomware starts automatically when Windows is booted up and even in Safe Mode, automatically prevent explorer.exe from starting and also blocking vital hotkeys such as CTRL+SHIFT+ESC to launch Task Manager which can be used to kill the ransomware process or manually run explorer.exe. Kaspersky WindowsUnlocker can be used to fix the registry to stop the ransomware from automatically being loaded when Windows is booted up. It does not touch any of the files on your computer other than the registry. Once Windows can be started up normally, you can use a good antivirus to perform a full scan and remove any found malwares. Kaspersky WindowsUnlocker comes in an ISO image file where you will either need to burn it to a CD or USB flash drive via Kaspersky USB Rescue Disk Maker and then boot up the infected computer with it... http://www.raymond.cc/blog/kaspersky-windowsunlocker-disinfects-registry/ Link to comment Share on other sites More sharing options...
jnelsoninjax Posted January 27, 2012 Share Posted January 27, 2012 Has anyone ever had a screen lock like this before? Or seen someones system with it? I admit that I have never seen anything like this before! SinghKing 1 Share Link to comment Share on other sites More sharing options...
AbandonedTrolley Posted January 27, 2012 Share Posted January 27, 2012 Can't say that I have ever seen nor heard of it, when I saw the thread in the minispy i was expecting to turn up to a spam thread! :D Link to comment Share on other sites More sharing options...
The Teej Posted January 27, 2012 Share Posted January 27, 2012 Haha, that's an interesting screen. Of course, I'd just reboot into Ubuntu and back up all of my files (and then format, y'know, because there's no way you're probably going to remove something that bad). Link to comment Share on other sites More sharing options...
jnelsoninjax Posted January 27, 2012 Share Posted January 27, 2012 ^What?! You wouldn't fall for it?! :D Link to comment Share on other sites More sharing options...
alexalex Posted January 28, 2012 Author Share Posted January 28, 2012 Has anyone ever had a screen lock like this before? Or seen someones system with it? I admit that I have never seen anything like this before! I did, twice. ^What?! You wouldn't fall for it?! :D You wouldn't but your Windows PC is locked. Either format and re-install / Restore from image backup, or, use an application to remove the ransomware app. Link to comment Share on other sites More sharing options...
Fubar Posted January 28, 2012 Share Posted January 28, 2012 boot into safe mode and run hitman pro free 30 day trial, it will remove it, failing that install malwarebytes anbd it will find it, no need to format Link to comment Share on other sites More sharing options...
goretsky Supervisor Posted January 28, 2012 Supervisor Share Posted January 28, 2012 Hello, Most of the reports I have seen of ransomware have been in Russia, but it seems the scam is slowly moving into the rest of Europe. Regards, Aryeh Goretsky Link to comment Share on other sites More sharing options...
neo1911 Posted January 28, 2012 Share Posted January 28, 2012 boot into safe mode and run hitman pro free 30 day trial, it will remove it, failing that install malwarebytes anbd it will find it, no need to format If you read the article, it clearly mentions that the ransomware disables safe mode or appears in safe mode as well. Link to comment Share on other sites More sharing options...
Recommended Posts