Ransomware - Printable Version

Ransomware - Printable Version

+- SA-MP Forums Archive (https://sampforum.blast.hk)
+-- Forum: Other (https://sampforum.blast.hk/forumdisplay.php?fid=7)
+--- Forum: Everything and Nothing (https://sampforum.blast.hk/forumdisplay.php?fid=23)
+--- Thread: Ransomware (/showthread.php?tid=409921)

Ransomware - Robber - 23.01.2013

They are real f*cked up trojans.

Does anyone know a good way to remove them?!
I've tried scanning my computer with ubcd4win...
No results...

Re: Ransomware - Mr.Anonymous - 23.01.2013

Quote:

How do I avoid ransomware?
There are several free ways to help protect your computer against ransomware and other malware:

Keep all of the software on your computer up to date. Make sure automatic updating is turned on to get all the latest Microsoft security updates.

Keep your firewall turned on.

Don't open spam email messages or click links on suspicious websites.

Download Microsoft Security Essentials, which is free, or use another reputable antivirus and anti-malware program. If you run Windows 8 or Windows RT, you don’t need Microsoft Security Essentials.

Scan your computer with the Microsoft Safety Scanner.

Source:
http://www.microsoft.com/security/re...re-whatis.aspx

Re: Ransomware - DuelZ - 23.01.2013

http://www.malwarebytes.org/

Re: Ransomware - Robber - 23.01.2013

Quote:

Originally Posted by Norbert_

http://www.malwarebytes.org/

Once you have it you can't access windows anymore.
Not even in safe mode!

So installing malware bytes won't work...

If fixed it thought!

A restore point fixed it.

Re: Ransomware - Mean - 24.01.2013

Quote:

Originally Posted by Robber

Once you have it you can't access windows anymore.
Not even in safe mode!

So installing malware bytes won't work...

If fixed it thought!

A restore point fixed it.

They really aren't that fucked up if a system restore can get rid of them.

Re: Ransomware - Robber - 24.01.2013

Quote:

Originally Posted by Mean

They really aren't that fucked up if a system restore can get rid of them.

They cript many of your files, they change the registery in windows NT, you can not boot in safe mode, and you can't access windows normally.

I booted windows in command line, and executed the system restore program via command line.

I guess they didn't thought of that.

Re: Ransomware - brett7 - 24.01.2013

Is that the ukash virus? If so http://malwaretips.com/blogs/remove-ukash-virus/

Re: Ransomware - AMEENAMEEN - 24.01.2013

try spybot search and destroy

Re: Ransomware - !damo!spiderman - 24.01.2013

There's lots of linux based live discs which will allow you to boot into a linux environment and will do a full virus/removal on a windows machine

Re: Ransomware - Robber - 25.01.2013

Quote:

Originally Posted by !damo!spiderman

There's lots of linux based live discs which will allow you to boot into a linux environment and will do a full virus/removal on a windows machine

Tried with slacko puppy and lucid puppy, but you can not edit the windows registery from them.
In the registery, the virus changes the "boot" in the Windows NT section, to "explorer.exe.C:/..." (can't remember) hence why I tried with ubcd4win but it didn't help much, also, the virus gets encrypted, so most of the anti-virus programs won't work.