Virus-extortionist: how to remove?

A virus-extortionist is a malicious program,blocking the work of the computer and offering to restore it by sending a paid SMS to a short number. Of course, to solve this problem, no SMS should not be sent, it will not bring a positive result. In order to remove the virus-extortion from the computer you need to determine its exact form.

Types of virus-extortionists

Extortion viruses are of different types. Some - limit the work with the browser or access to websites. Other viruses encrypt user files. And still others - restrict operations in the operating system or completely block access to it. Now you should learn how to remove the extortion virus, depending on its type.

Blocking access to the Internet

If you see a banner in front of yourequires you to send sms, and you can not go online, then most likely you are faced with a virus like the Trojan. How to get rid of the banner-extortionist in this case?

To do this, you need to find the Hosts file, whichlocated in the root directory of the system disk or in the WindowsSystem32driversetc folder, then use any text editor to open it and delete all the lines except 127.0.0.1localhost.

After that, you need to enable the antivirus, perform a full scan of the computer and reboot it.

Blocking browser

These viruses live only in the browser and do not blockwork of the whole computer. If you go to any sites, see a banner on the screen, explicit content, with the requirement to send SMS, then to remove this virus banner-extortion, you need to do the following.

First you need to open Internet Explorer and find themenu item "Service". Then select "Add-ons" - "Enable or disable settings". Clicking on the last item, you can see all the settings that are installed in the browser. It is necessary to check each of them, where the publisher is not specified or the inscription "Not checked" stands. To do this, you must start disconnecting them one at a time and restart Internet Explorer each time. The add-in, after disconnecting which the pornobanner will disappear - malicious. It will simply need to be disabled.

Blocking access to the operating system

In this case, you can not run onno programs except Internet Explorer and Outlook. And to restore the work of Windows 7, the virus-extortionist requires sending a text message to a short number.

To get rid of it you need to apply forhelp in the service of free unlocking, which can be found on the sites of such anti-virus programs as Kaspersky and Dr.Web. There are also detailed instructions for action. After unlocking it is necessary to conduct an in-depth scan of the computer with an antivirus.

It should be noted that in some casesthe removal of the extortion virus occurs on its own, after exactly 2 hours after entering the computer. Therefore, to get rid of the virus, you can try to forward more than 2 hours clock in the BIOS and restart the computer.The virus should disappear.

Encrypting viruses

Perhaps, these are the most terrible viruses-extortionists. You can recognize them by not having access to the window on your desktop or to a text document. How do you get rid of the extortion virus in this case?

To do this, you can use utilities,which the Dr.Web laboratory offers. They are designed specifically for the treatment of viruses of this type. They are provided for free. You can download the tools on the developer's site, there is also detailed instructions for the action.

In addition, it is worth paying attention to the utilitySymantec. It is successfully taken with a cryptographic virus called Ramvicrype. This virus encrypts files located in the system folder, assigns them a new extension. In this case, you can not run any programs on the computer. Download the utility that will help you remove this virus, you can on the official website of the company. Detailed recommendations for action are also described on the website. Please note that before running this utility, you should close all programs, and then disconnect the computer from the network.

Whatever it was, the main thing is not to panic andDo not send sms-ku to aboom, and suddenly unlock. You will only spend money and not get the expected result. If you can not solve this problem on your own, then call the knowledgeable friends or masters from the service center. There is nothing terrible in these viruses, they will not erase the information from the computer, do not worry!