Trojan.Ransom/Screenlock Removal

Ransomware Trojans are viruses that seem like legitimate programs, but when installed they lock your screen up and give you fake information about crimes linked to your computer. The virus will impersonate an official Police organization and tell you there is a fee to be paid, or you could face jail time. This is obviously false, but because they lock the screen up these infections can be tough to remove. Hitman Pro has a handy tool that can be installed on a USB drive and used to remove the virus before it locks your screen. It will require access to a separate computer that is not infected with this virus.

Installing the tool:

Step 1: Download Hitman Pro from http://www.bleepingcomputer.com/download/hitmanpro/dl/175/ (32-Bit) or http://www.bleepingcomputer.com/download/hitmanpro/dl/176/ (64-Bit)
Step 2: Run “Hitman_Pro.exe” and allow it to update if needed.
Step 3: Insert a USB flash drive into your computer (back-up any important info on the drive as it will be erased by Hitman Pro)
Step 4: Click the Kickstart icon next to the “Settings” button and select the USB drive you want to use and click “Install Kickstart”
Step 5: Accept the prompts and allow it to install. Close Hitman Pro and insert the flash drive into the infected computer.

Removing the infection with Hitman Pro Kickstart:

Step 1: You need to ensure your computer is set to boot from the USB drive. Do this by entering the BIOS on startup (you can search for the BIOS key based on your brand of computer) and changing the boot order. Some computers have a one-time boot key as well that can be used.
Step 2: Boot your computer and wait for the Kickstart window to pop up, click “Next” and select “No, I only want to perform a one-time scan on this computer” and click “Scan”
Step 3: Wait for Kickstart to scan your computer then activate the free 30-day license and click “Remove” to clean the infections.
Step 4: Reboot your computer and remove the USB drive.

Finally, run a scan with Malwarebytes to ensure the infection is removed:

Step 1: Download Malwarebytes Anti-Malware from https://www.malwarebytes.org/mwb-download/
Step 2: Run the setup file and install Malwarebytes.
*When installing Malwarebytes you will have the option to enable a free 30 day trial of their premium service, this is not required.
Step 3: Click the “Scan Now” button in green, if an update is available then click the “Update Now” button in the bottom right. The scan will begin once the update is finished.
Step 4: The scan may take some time, depending on your computer and the number of infections, but once it is finished click the “Apply Actions” button in green.
Step 5: Malwarebytes may or may not request that you reboot your computer after it has removed the infections, if it does you may proceed to reboot.