One of the types of ransomware viruses is a frame that requires sending an SMS to a short number or transferring money to a phone account. This virus can block access to the Internet and the launch of certain programs.
Instructions
Step 1
Do not send money to cyber fraudsters, try to deal with the problem for free. Kaspersky Lab has developed utilities that detect and destroy such viruses. Go to the Deblocker service page https://sms.kaspersky.com/. Enter the number of the contact to which you want to transfer money, and click "Get Code"
Step 2
Click on the screenshot in the "Image" field to determine which blocker has been introduced into your system. Select the desired code in the "Unlock codes" field. Enter it in the frame field and restart your computer. For reliability, you can rewrite several codes and enter them one by one until the frame disappears. Then run your antivirus program in deep scan mode.
Step 3
A similar service can be found on the DrWeb support site at https://www.drweb.com/xperf/unlocker. Enter the ransomware details in the appropriate field and click Search Codes. Follow the hyperlink under the input window and try to find a virus in the screenshot that is blocking your computer
Step 4
Free antivirus Avast can show a good result in the fight against the ransomware frame. Double click on the tray icon. On the left side of the screen, open the "Scan computer" node by clicking on it with the mouse. Check the "Scan at boot" checkbox.
Step 5
Click "Settings". In the Scan Areas window, select All Hard Drives. Expand the list "When a threat is detected …" and mark the required action. Click OK, then Schedule. After restarting your computer, Avast will start a pre-boot check. When malware is detected, the antivirus will offer a choice of options: disinfect, remove, quarantine
Step 6
If online services and antivirus software on your computer did not solve the problem, try removing the virus manually. It is a.dll file located in the C: Windowssystem32 system folder. Go to the folder and select "Properties" from the "Tools" menu. Go to the "View" tab and uncheck the boxes next to the items "Hide protected files" and "Hide extensions"
Step 7
Right-click in a free area of the folder and select "Arrange Icons" and "Type" from the drop-down menu. Hover over each.dll file. The signs of a virus are as follows: its name consists of five characters of the Latin alphabet, and no information about the file is displayed when the cursor is hovered over. It is unlikely that you can remove the virus in the usual way. Right click on it and choose Rename. Change the extension type to.txt, then the file is easily deleted.
