

The most common include Crowti, FakeBsod, Reveton and Tescrpt, while Petya is one of the worst.

There are at least a couple of dozen to choose from. You need to know which bit of malware has infected your laptop so that you can search for removal instructions.

There are many different types of ransomware, and they work in different ways. Kaspersky also explains How to record Kaspersky Rescue Disk 10 to a USB device and boot a computer from it. These include utilities that can run from a USB device. Many people use a “rescue disk” such as the ones from Comodo and Kaspersky. I keep a USB thumbdrive with a selection of repair utilities in case I need them for this sort of purpose. Apparently this works with some early types of ransomware, but I suspect that’s not what you did.Īlternatively, you may be able to run a program such as MalwareBytes Anti-Malware from a CD/DVD or a USB thumb drive, possibly after using Process Explorer to kill the browser or other malware process. You can do that by starting your PC in Safe Mode, choosing “Safe Mode with Command Prompt” from the Advanced Boot Options menu, typing rstrui.exe and pressing Enter. This is different from the “system restore” function in earlier versions of Windows, which tries to take the PC back to an earlier state. Try typing “reinstall” in the Windows search box, then click on “Remove everything and reinstall Windows”. If your laptop is running Windows 8, 8.1 or 10, then I would expect the “Restore factory settings” option to solve the problem, if you can get to it. In principle, it should be possible to defeat all ransomware by immediately disconnecting your PC from the internet, reformatting the hard drive, and reinstalling everything from a backup. If you have doubts, upload the file to Virus Total and have it checked by more than 50 anti-virus programs.

Of course, anti-virus programs should scan those files as well. Unfortunately, users can install ransomware themselves, either by downloading infected files or by running files that arrive in phishing emails. Nowadays, most anti-virus software is familiar with all the common variants of ransomware, and if not, should include heuristics that recognise potentially dangerous activities, such as encrypting files. Ransomware shouldn’t even get through if a PC is running a fully updated copy of Windows, Microsoft’s SmartScreen or Google Safe Browsing, and up-to-date anti-virus software.
