Trojan. Winlock, a program that locks the desktop and prevents the use of the operating system by placing a pop-up window on it, in which cybercriminals demand to send SMS or transfer money to an electronic wallet, in exchange for unblocking operating system. You can get rid of this virus without unnecessary difficulties.
Instructions
Step 1
Take advantage of special online services to combat viruses - Dr. Web, Eset Nod32, and others. The ERD Commander system administration tool is also effective. You will need a bootable disk with this program to edit the system registry and remove the virus from the system.
Step 2
Boot from the bootable disk by inserting it into the floppy drive and changing the boot options in the BIOS. After downloading, you will see a local network connection window; click the "Skip" button. Then a window will appear in which you need to select the operating system for further work.
Step 3
Select your Windows operating system and press Enter. Deal with the removal of temporary OS files and Internet browser. Click on the "My Computer" shortcut and clear the following directories:
C: / Windows / Temp
C: / Documents and Settings / login / Local Settings / Temporary Internet Files
Step 4
Open Application Data and, selecting the folder of your browser (Opera, Mozilla), delete the cache (cache).
Now click on the Start button and launch Registry Editor (Run> regedit command).
Step 5
Under [HKEY_LOCAL_MACHINE / SOFTWARE / Microsoft / Windows NT / CurrentVersion / Winlogon], change the Userinit (REG_SZ) parameter to the following value: C: / WINDOWS / system32 / userinit.exe. Change the Shell parameter (REG_SZ) to Explorer.exe.
Step 6
Restart your computer and check the system for viruses.
