Remove Ransom
Removal instructions

Severity scale:  
Ransom | Type: Ransomware
Ransom is a trojan that threatens to delete important files until the user pays the ransom. Once executed, the parasite installs itself to the system, displays some pornographic images and shows a message threatening to delete one file related to installed software or containing user sensitive information every 30 minutes, until the ransom ($10.99) is fully paid. The trojan explains what it does and demands to transfer the money to the hacker's account. After the user transfers the money, he or she receives a specific number, which allows to uninstall the parasite. Ransom is able to prevent its removal. It launches multiple processes and displays messages when the user tries to terminate the trojan. Ransom runs on every Windows startup. Ransom properties:
• Stays resident in background

Automatic Ransom removal:

It might be that we are affiliated with any of our recommended products. Full disclosure can be found in our Agreement of Use.
By downloading any of provided Anti-spyware software to remove Ransom you agree with our Privacy Policy and Agreement of Use.
Do it now!
remover for Ransom Happiness
Compatible with Microsoft
SpyHunter is recommended remover to uninstall Ransom. You should confirm using free trial that it detects current version of parasite.
more than 40.000.000 downloads!
What to do if you failed to remove the infection?
If you failed to remove Ransom using SpyHunter, read here how to submit a support ticket or submit a question to our support team and provide as much details as possible.

Alternate Software

We are testing STOPzilla's efficiency at removing Ransom (2006-05-07 09:22:31)
We are testing SpyHunter's efficiency at removing Ransom (2006-05-07 09:22:31)
Malwarebytes Anti Malware
We are testing Malwarebytes Anti Malware's efficiency at removing Ransom (2006-05-07 09:22:31)
XoftSpySE Anti Spyware
We are testing XoftSpySE Anti Spyware's efficiency at removing Ransom (2006-05-07 09:22:31)
Virus Removal Phone Support
Help Line to remove Ransom

Ransom manual removal

Kill processes:
corpstats.exe, data2.exe, data3.exe, data4.exe, svchost.exe, winstart.exe, 002.exe, 004.exe, 006.exe, 007.exe, 008.exe, 009.exe
Delete registry values:
Delete files:
corpstats.exe, data2.exe, data3.exe, data4.exe, svchost.exe, winstart.exe, 002.exe, 004.exe, 006.exe, 007.exe, 008.exe, 009.exe, dat1.bat
Exact file location:
corpstats.exe - C:\Windows\System\oobe\Setup, C:\Windows\System32\oobe\Setup or C:\Winnt\System32\oobe\Setup
data2.exe, data3.exe, data4.exe, svchost.exe, winstart.exe, 002.exe, 004.exe, 006.exe, 007.exe, 008.exe, 009.exe, dat1.bat - C:\Windows or C:\Winnt

Geolocation of Ransom

This map reveals the prevalence of Ransom. Countries and regions that have been affected the most are: United States, Philippines, United Kingdom, Australia and New Zealand.

QR code for Ransom removal instructions

Ransom qrcode QR is short for Quick Response. They can be read quickly by the mobile phones. QR codes can store more data than standard barcodes, including url links, geo coordinates, and text.
The reason we add QR code to the website is that parasites like Ransom are really hard to remove on infected computer. you can quicly scan the QR code with your mobile device and have manual removal instructions to uninstall Ransom right in your pocket.
Simply use the QR scanner and read removal instructions from mobile device.

Information added: 2006-04-30 04:13
Information updated: 2006-05-07 06:45

Additional resources

Attention: If you know know a reputable website reated to security threats, please add a link here: add url

Users comments about Ransom:

Post Comment

Attention: Use this form only if you have additional information about Ransom parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.

Home page Name


(All fields are required)
Like us on Facebook
Ask us
What's your antispyware?
I failed to remove Ransom using SpyHunter.


add text box
rss feed
help other
Spreading the knowledge: It is very hard to fight against computer parasites on the Internet alone. If you have a website, we would be more than happy if you would like to cooperate and help us spread the information about latest threats. Remember, knowledge is the most powerful weapon. Help your visitors protect their computers!