How to get rid of System Fix it virus Ransomeware

[geraldnewton84]

This is ransomware. It bypassed my Trendmicro antivirus and
firewall. It really raises hell and asks you to pay about $75 to get
rid of it. I got it while my laptop was on and idle on 12/23/2011.
MY os is Vista Home edition.

So restart using the start menu and before the Windows label appears
press and hold F8
This will take you to the safe mode.
toggle down using your down arrow key
open in safe mode with the command prompt.
At the command prompt trype rstrui.exe
This will allow you to restore to an earlier version.
If you do not have a restore point I don't know what you do!

 

[geraldnewton84]

This is ransomware.  It bypassed my Trendmicro antivirus and
firewall.  It really raises hell and asks you to pay about $75 to get
rid of it.  I got it while my laptop was on and idle on 12/23/2011.
MY os is Vista Home edition.

So restart  using the start menu and before the Windows label appears
press and hold F8
This will take you to the safe mode.
toggle down using your down arrow key
open in safe mode with the command prompt.
At the command prompt trype rstrui.exe
This will allow you to restore to an earlier version.
If you do not have a restore point I don't know what you do!

Research indicates this malware is loaded after downloading a fake
Adobe Flash player update.

 

[David H. Lipman]

Research indicates this malware is loaded after downloading a fake
Adobe Flash player update.

Thank you for the suggestion to use System Restore in Safe Mode it is one way to deal with
this rogue utility. Hust as easily you can find the loading point of this malware, stop
it from loading and reboot into Normal Mode, run Unhide (if needed) and then run
Malwarebytes' to remove and any other associated trojans.

A fake Adobe Flash update is just one of many ways this Trojan can get installed. All
will tend to use Social Engineering.

However, it is not a virus as you claimed in the subject of this post.

 

[Virus Guy]

Thank you for the suggestion to use System Restore in Safe Mode it
is one way to deal with this rogue utility. Hust as easily you
can find the loading point of this malware, stop it from loading
and reboot into Normal Mode, run Unhide (if needed) and then run
Malwarebytes' to remove and any other associated trojans.

I would tell the OP to remove the drive and slave it to a known/good
machine to retrieve user files and other data and then either attempt a
malware cleaning on the slaved drive or otherwise re-install the OS on
that drive or on a new replacement.

However, it is not a virus as you claimed in the subject of this post.

As I've said many times, it is really not useful to point out that a
particular form of malware is not exactly a virus. Pointing out fine
details like this serves no purpose.

I don't have a problem seeing the average person say they have a virus
messing up their system when technically it's a trojan or what-ever. In
this day and age it's not relavent to pay any attention.

You should just realize that people use the words "virus" and "malware"
interchangably, and the difference means nothing to them. Indeed, from
a practical or technical pov, there is really no actionable difference.

 

[Virus Guy]

You don't have a problem becuase you don't know better.

And that flippant remark of yours serves no purpose as far as being a
credible or even intelligent counter argument.

I expect better from you Dave.

 

[Dustin]

I would tell the OP to remove the drive and slave it to a known/good
machine to retrieve user files and other data and then either attempt a
malware cleaning on the slaved drive or otherwise re-install the OS on
that drive or on a new replacement.

A bit drastic for the issue here.

As I've said many times, it is really not useful to point out that a
particular form of malware is not exactly a virus. Pointing out fine
details like this serves no purpose.

Actually, that's incorrect. viruses are different than trojans. A trojan
can be deleted and it's gone; you simply don't do that with a virus.

I don't have a problem seeing the average person say they have a virus
messing up their system when technically it's a trojan or what-ever. In
this day and age it's not relavent to pay any attention.

Well, being as you detect and remove them with different technologies, I'd
say it's still an important distinction.

You should just realize that people use the words "virus" and "malware"
interchangably, and the difference means nothing to them. Indeed, from
a practical or technical pov, there is really no actionable difference.

I'd have to disagree. From a technical standpoint, there is a very BIG
difference.

 

[FromTheRafters]

I would tell the OP to remove the drive and slave it to a known/good
machine to retrieve user files and other data and then either attempt a
malware cleaning on the slaved drive or otherwise re-install the OS on
that drive or on a new replacement.

Overkill, but it wouldn't hurt if done correctly.

[...]

 

[Buffalo]

C'mon Dustin, Virus Guy is just a lonely 'wanna-be'.
Buffalo