Comments on: System Locking SMS Ransomware Trojan.Ransomlock Can Be Removed Manually

By: Anil Kumar

Anil Kumar — Sat, 07 Nov 2009 16:52:55 +0000

Dear Sir,

My computer has been infected with trojan virus and when i checked my pc there was a message on my desktop saying that semi appologies and your files has been encrypted with 512 kb encryption and contact us on some email.on fear i shut down the system and run malwarebytes which removed some files.then i installed avg.9 and done full scan.no viruses detected .now the files jpg,pdf,xls files i am not able to open as these are encrypted.can you help me in unlocking thses files.
Thank you
Anil Kumar

By: Duffy

Duffy — Mon, 12 Oct 2009 23:49:58 +0000

Chris on October 7th, can you confirm that CyberInsecure’s response does in fact fix your problem. I have a friend that showed me this exact problem. Funny enough, you could easily boot into safemode or from there choose diagnostic mode through msconfig to bypass this screen. From there I knew something was wrong and illegitimate. Upon searching the web, I found this page to confirm my suspicion.

Anyway, this gentleman also is receiving a 6 digit code to be used to unlock to the same text number that Chris has spoken about before.

Cheer and thanks in advance,

-duff

By: CyberInsecure

CyberInsecure — Wed, 07 Oct 2009 16:45:39 +0000

You probably got the new version, it cant be removed without proper tool from anti-virus company. Try Kaspersky and Dr.Web. If their scanners didn’t fix the infection, download Rescue CDs (http://cyberinsecure.com/links), one of them might help.

By: Chris

Chris — Wed, 07 Oct 2009 14:48:47 +0000

hi i have got something likje this but it seems the code that has to be smsed to 3649 is actually a 6 digit code. it has never been more than 6 digits or in the format of 41xxx….. or k2xxxx….

i really need help. tried symantec did not find it.
thanks. desperately waiting for the right reply.
thank you

By: CyberInsecure

CyberInsecure — Mon, 27 Apr 2009 15:56:47 +0000

It might mean this is a different or updated version. They pop up as older version get detected.

Try looking for a tool at Symantec, Kaspersky or PanadaSecurity websites as they might already have a solution. If not, report it to them as soon as possible.

By: Ron Blizzard

Ron Blizzard — Mon, 27 Apr 2009 11:58:42 +0000

I take it I have a different strain as the screen and words are the same but mine doesn’t start 411xxxxxxx, it is K2780621004, same text number.

Can you help as your unlock tool will not decode?