Remove Trojan.Ransomlock.B. Description and removal instructions

Title: Trojan.Ransomlock.B
Type: Trojans	Severity scale: (20 / 100)

Trojan.Ransomlock.B is a Trojan virus that locks the desktop and displays a gray background with the following text:

"Windows Blocked
For unlocking you need to
Send Text:#win1 t5680
To the number: 6008
The cost of communications is about 60 EUR.
In reply message you get a registration code, which should be put in the box.
To activate your copy of Microsoft Windows you have 3 hours from the time of the lock
Otherwise, the system with your computer will automatically be deleted, and all
data on it destroyed. Attempting to reinstall the system can lead to data loss."

Once installed, this trojan copies itself to %System%\usrinit.exe. When active, it will prompt the user to send a text message to unlock your computer, otherwise you will lose all your data. If you find that your computer is infected, then please use the removal guide below to remove Trojan.Ransomlock.B from your computer.

FORUM:
Discuss Trojan.Ransomlock.B in
spyware removal forum

Related files: usrinit.exe

Trojan.Ransomlock.B properties:
• Shows commercial adverts
• Hides from the user
• Stays resident in background

Automatic Trojan.Ransomlock.B removal:

remover for Trojan.Ransomlock.B

Trojan.Ransomlock.B manual removal:

Kill processes:
usrinit.exe

HELP:
how to kill malicious processes

Delete registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\"Userinit" = "%System%\userinit.exe, %System%\usrinit.exe"

HELP:
how to remove registry entries

Delete files:
usrinit.exe

HELP:
how to remove harmful files

Other programs to remove Trojan.Ransomlock.B:

• Malwarebytes Anti Malware - Review - Download
• Malwarebytes Anti Malware - Review - Download
• Windows Defender - Review - Download

Information added: 03/08/09
Information updated: 03/08/09

Additional resources related to Trojan.Ransomlock.B:

Attention: If you know or you have a website or page about Trojan.Ransomlock.B removal, feel free to add a link to this list: add url

more resources

Post Comment:

Attention: Use this form only if you have additional information about Trojan.Ransomlock.B parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.