Google

Sunday, July 14, 2013

Dirty Decrypt.exe Virus Removal Guide - All Your Files Are Encrypted Scam


All files are encrypted by Dirty Decrypt.exe Virus? How to fix?


Dirty Decrypt.exe virus is a another horrible ransomware that recently attacks PC owners all around the world. The malware firstly blocks the screen and appears itself from Dirty Alert. It states that all your files including image, Video, MS office, PDF files encrypted. The notification is quite scary and computer users need to realize that the trouble is caused by Dirty Decrypt.exe virus. As a new brand of ransom scam, Dirty Decrypt.exe is installed when you using computer improperly and seriously it does have the ability to encrypt your files. You are asked to pay a fine of 100 GBP via PaySafeCard vouch to unlock the screen. There is one thing we would like to declare: Dirty Decrypt is a scam and it is useless to pay the fee.

Dirty Decrypt.exe virus generates from FBI or Ukash ramsom like FBI MoneyPak, Department of Justice, ICE Cyber Crime Center and Homeland Security virus that keeps you from using your computer. It is a hazardous one that appears immediately when starting desktop. Fortunately if you still get online while infected, you will come across the other situation, you will get a image stating that it is encrypted and the only way to decrypt that would need to run a program named decrypt.exe as long as you open a picture, file or document. To be more obvious, the encrypted files come with HTML extension or are zipped. Be clear that the severe condition needs to be removed from Dirty Decrypt.exe so that computer can free from more additional scams.

Dirty Decrypt.exe virus is a nasty one and it may steal your information for cyber criminal. Besides, it is bounded with hackers who use the loophole to exploit compromised system. The infected PC may stop working even be messed up in a heartbeat. Moreover, no security tool can remove so a manual approach is completely required. In the rear condition that your computer has been blocked by Dirty Decrypt.exe, you are welcome to continue reading and terminate the scam virus now.





Step 1 : Reboot your computer and enter into Safe Mode with Networking by into by continually tapping F8 key before Windows is launched> Select Safe Mode with Networking> Press Enter button to approach

Step 2: When see the desktop >Press Win+R key to open Run box, then type in “Msconfig” to open System Configuration Utility>Switch to Startup tab> click “ Disable All” > Choose “Apply”

Step 3 : Search and delete these files.
%Appdata%\UserName\Local\random.exe
%Appdata%\UserName\Roaming\random.exe
%AppData%[trojan name]toolbarguid.dat
%AppData%[trojan name]toolbarlog.txt

Step 4:  Remove the registries that have been created by Dirty Decrypt.exe
HKLM\SOFTWARE\Classes\TypeLib\{095BFD3C-4602-4FE1-96F1-AEFAFBFD067D}
HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440344344426}
HKLM\SOFTWARE\Classes\TypeLib\{48C9C8B0-A546-46C1-A81F-47A31E623E9D}
HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
HKLM\SOFTWARE\Classes\TypeLib\{CFE8AAFD-A0F3-4329-84E9-6B679EC93EC2}
HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
HKLM\SOFTWARE\Classes\TypeLib\{EFDF368C-8DD9-4E05-87CD-16AA5CB03CB8}
HKLM\SOFTWARE\Classes\wajam.WajamBHO.1
HKLM\SOFTWARE\Classes\wajam.WajamDownloader

Step 5: Restart your computer and log in normal mode to check the effectiveness.


No comments:

Post a Comment