Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

Question

ransomware

Jun 14, 2017 7:37PM PDT

How do I remove ransomware from my computer?

Discussion is locked

- Collapse -
Answer
Re: remove ransomware
Jun 15, 2017 12:18AM PDT

The usuals:
1. Manually. Details are different, of course, for each program, but you might be able to find removal instructions via Google if you know the name of the program.
2. With an antivirusprogram (like Norton, Kaspersky, AVG and others)
3. With antimalware programs (like MBAM)
4. By using System Restore back to before you installed it
5. By going back to an image of your system without it
6. By going back to factory conditions or doing a clean reinstall of Windows 7

- Collapse -
Answer
Ransomware
Jun 15, 2017 3:34AM PDT

After you get this off your machine ask yourself a question.

"How did I get this"

Folks got hit with the latest variant because their running unpatched systems.
Self induced problem.

- Collapse -
Answer
First have your files been
Jun 16, 2017 9:58AM PDT

encrypted? If you can get to you file then I would run malwarebytes.

- Collapse -
Answer
That Depends..
Jun 16, 2017 12:11PM PDT

Usually, the safest is to simply wipe the drive and reload your backed up system image that we all should make BEFORE such things happen.

On the other hand, although I haven't used them because I prefer using the backup method, there are a few decryptors for a few of the ransomware variants that may work for you. See the links below:

WannaCry
https://www.cnet.com/forums/post/ad4fc5ce-3b04-4aff-ac9b-62732a6ffec8/

BTCWare ransomware
https://www.cnet.com/forums/discussions/avast-has-released-a-decryptor-for-btcware-ransomware/

Hope this helps.

Grif