How To Remove Cryptolocker Virus Windows 7

With  nasty malware like Locky making the rounds—encrypting its victims' files, and so refusing to unlock them unless y'all pay up—ransomware is a serious headache. But not all ransomware is so difficult.

You tin can remove many ransomware viruses without losing your files, only with some variants that isn't the case. In the past I've discussed general steps for removing malware and viruses, but you need to apply some specific tips and tricks for ransomware. The process varies and depends on the type of invader. Some procedures involve a elementary virus scan, while others require offline scans and avant-garde recovery of your files. I categorize ransomware into three varieties: scareware, lock-screen viruses, and the really nasty stuff.

Scareware

An instance of a fake antivirus app.

The simplest type of ransomware, aka scareware, consists of bogus antivirus or clean-up tools that claim they've detected umpteen issues, and need that you lot pay in order to set up them. Some specimens of this variety of ransomware may allow you to use your PC but bombard you with alerts and pop-ups, while others might foreclose you from running any programs at all. Typically these invaders are the easiest blazon of ransomware to remove.

Lock-screen viruses

The Kovter ransomware locks down your computer, displaying a fake notice claiming to be from several government authorities.

Next is the ransomware variety I telephone call lock-screen viruses, which don't allow y'all to use your PC in any way. They display a full-size window afterwards Windows starts upwardly—usually with an FBI or Section of Justice logo—saying that you lot violated the police and that you must pay a fine.

The really nasty stuff

McAfee

A ransomware program chosen Locky has quickly get 1 of the nigh common types of malware seen in spam.

Encrypting malware—such as Locky—is the worst variant, because it encrypts and locks your personal files until y'all pay upward. Just even if yous haven't backed upwardly your files, you may have a gamble to recover your data.

Removing ransomware

Before you lot can gratis your hostage PC, y'all accept to eliminate the earnest taker.

If yous have the simplest kind of ransomware, such as a fake antivirus programme or a bogus clean-upward tool, you can commonly remove it by following the steps in my previous malware removal guide. This procedure includes entering Windows' Safe Mode and running an on-demand virus scanner such equally Malwarebytes.

If the ransomware prevents you from entering Windows or running programs, equally lock-screen viruses typically exercise, you lot can try to apply Arrangement Restore to ringlet Windows back in time. Doing then doesn't affect your personal files, but it does return system files and programs to the state they were in at a certain time. The Organization Restore feature must be enabled beforehand; Windows enables information technology past default.

Eric Geier/IDG

You can usually bring up the Advanced Boot Options of Windows 7 past pressing F8 during booting.

To start the restoration process using Arrangement Restore, follow these steps depending on your Os version:

Windows vii

1. Shut downwards your PC and locate the F8 primal on your PC'south keyboard.
2. Plow the PC on, and as soon every bit you see anything on the screen, press the F8 fundamental repeatedly. This activity should bring up the Advanced Boot Options card.
3. SelectRepair Your Estimator and printing Enter.
4. You'll probable have to log on every bit a user. Select your Windows business relationship name and enter your countersign. (If you don't have a countersign fix, leave that blank.)
5. In one case logged on, clickArrangementRestore.

Windows viii, 8.1, or 10

Eric Geier/IDG

You lot can go to the recovery options of Windows 8, viii.1, and 10 by belongings shift when rebooting from the Windows login screen.

1. If your PC boots to the Windows login screen, concur the Shift key, click the power icon, and select Restart.
2. It should reboot to the recovery screens.
3. Select Troubleshoot > Advanced Options > Organization Restore.

If you can't get into the recovery screens, you can use the Windows installation media (disc or USB drive) for your particular version/edition to access the recovery tools. You'd boot upwards to that install media, but clickRepair your computer on the main bill of fare earlier proceeding with the installation. Alternatively, you lot tin can create a Windows System Repair Disc on another PC running the aforementioned Windows version, so boot to that disc on the infected PC to reach the same recovery tools. We've previously discussed this process for Windows 7, Windows 8, and Windows 10.

If System Restore doesn't help and you yet tin't get into Windows to remove the ransomware, try running a virus scanner from a bootable disc or USB drive; some people refer to this approach as an offline virus browse. My favorite bootable scanner is from Bitdefender, merely more are available: Avast, AVG, Avira, Kaspersky, Norton, and Sophos all offering antivirus boot-deejay software.

Eric Geier/IDG

Bitdefender's antivirus boot deejay in activity.

If you still accept no luck after trying Prophylactic Way and an on-demand scanner, performing a System Restore, and running an offline virus scanner, your last resort is probable to perform a full restore or make clean re-install of Windows. Most ransomware isn't that tenacious, withal.

Eric Geier/IDG

Showing hidden files in Windows 7 takes a couple of clicks.

With that out of the style, it's time to repair the damage. If you're lucky, your PC was infected past malware that didn't encrypt your data. If information technology appears y'all're missing stuff though, the malware may have merely hid your icons, shortcuts, and files. Information technology usually does this by making the files "hidden." Here'southward how to check, depending on your Bone version:

Windows 7

1. Open upComputer.
2. Press the Alt fundamental and selectTools.
3. ClickFolder Options and select the View tab.
4. SelectShow hidden files, folders, and drives, and then clickOK.

Windows eight, viii.1, and 10

1. Open a File Explorer window.
2. Select the View tab on the top pane.
3. Check Subconscious items.

Eric Geier/IDG

Showing subconscious files in Windows 8 and after is a cinch.

If your data reappears afterward you elect to prove subconscious files, that's great—it means there's an easy fix for your woes. OpenFigurer or File Explorer, navigate to C:Users, and open up the folder of your Windows account name. And so correct-click each folder that'south hidden, open upBackdrop, uncheck theHidden attribute, and clickOK.Boom! Done.

If yous still tin can't find your data, and your files really have been malware-encrypted, you lot're in trouble. Ordinarily it isn't possible to simply decrypt or unlock your hostage files, considering the decryption central is typically stored on the cybercriminal'south server. Some victimized users have reported that some pieces of malware will go along their promise, decrypting and returning your files once yous pay, but I don't recommend paying.

This is why we constantly tell you lot to back up your PC on a regular basis.

If you previously set and created backups, browse them for viruses on another PC (one that isnot infected) if at all possible. If all of your important files are backed up, y'all can proceed in removing the malware and then simply restoring your backed-up files.

If you don't take a backup system in identify, you lot might be able to recoversome files from Shadow Volume Copies—if the malware hasn't deleted them. Shadow Volume Copies is part of Windows' System Restore feature. Either right-click on thefiles or folders you want to restore and open upProperties to view the Previous Versions list, or use a program called Shadow Explorer to browse the snapshots.

But don't rely on that. Start backing up your PC today, and do it regularly.

Preventing ransomware and malware infections

Fugitive ransomware is much the same equally avoiding other types of other malware.

Always run a good antivirus utility and keep Windows and browser-related components (Java, Adobe, and the like) updated. Keep your browser make clean of junk toolbars and add together-ons to prevent adware invasions that could lead to malware infections. Always,always be wary of unexpected electronic mail attachments and spam.

And merely to beat this dead horse one more time: E'er have a good backup system in place, merely in case your PC does get infected and you can't recover your files. Yes, it's that important.

Editor's note: This article was oroginally published Jan thirteen, 2014, and updated Apr 3, 2017.

Source: https://www.pcworld.com/article/443183/how-to-rescue-your-pc-from-ransomware.html

Posted by: whiteknotans.blogspot.com

Share this post