Severity scale:  
  (99/100)

Salam virus. How to remove? (Uninstall guide)

removal by Jake Doevan - - | Type: Ransomware
12

Salam virus – a new ransomware type computer threat

Salam! ransomware is a hazardous computer infection, which destroys user’s personal files by encrypting them, and then demands ransom. It spreads around the web disguised as a safe file, so it enters the computer system as a trojan horse. You should be very careful and take precautions to prevent such computer virus from entering your PC, otherwise, the consequences will be tragic. We would like to describe how this virus works:

When Salam malware sneaks inside the victim’s PC, it runs processes that scan the computer system and locate user’s personal files. No matter how important the data is, Salam virus ciphers, or, in other words, encrypts it. That means the encrypted files become inaccessible – user no longer can access them, open them, or use them. Apparently, this might seem to be a huge disaster; even the idea of losing all your photos, videos, documents, music, and other important records is frightening. Cyber criminals related to this virus seek to scare the user and force him/her to do everything that they command him/her to do. That is why they place a short note in all affected file folders in the computer system. This ransom note is titled WHATHAPPENEDTOYOURFILES.txt, and, as the title states, it explains what happened to your data and why you cannot open them anymore. You can see a screenshot of this ransom note below:

Salam malware demands money
In the note, Salam! virus provides a victim’s ID number, and a short message, which states that files were encrypted, but the criminal has the key that can be used for file decryption. However, it commands that the sooner the victim pays up, the better. It states that the price of the decryption key increases every day, starting from 1 bitcoin. It even commands to hurry up and provides an email address to contact the criminal directly.

Some computer users think that paying up will help. That is NOT true. When it comes to dealing with cyber criminals, only one thing is clear – you CANNOT trust what they say or what they promise you. You should not rely on their promises to decrypt your files after you pay the money they demand. Remember that they can forget about you the minute they get the payment; therefore, we do not advise you to handle the money, because by doing so, you take the risk losing your files AND your money. Unfortunately, no decryption tool was found yet that could fix the retrieve the files that Salam virus has encrypted; you can only recover your files if you used to create data backups regularly and store them on external devices. Before trying to import data from an external device, make sure Salam virus is eliminated from your PC. For that, we recommend using Reimage or another reliable anti-malware software.

How does Salam virus spread?

The Internet is full of dangers. Experienced cyber-criminals and hackers are capable of placing malicious codes even in legitimate and reliable websites; in addition, it is really hard to realize which websites are reliable and which are not. For this reason, we recommend keeping a reputable anti-malware program on your PC.

Now, let’s talk about Salam prevention methods. There are some things you can do in order to lower the risk of infecting your PC with this or another ransomware-type virus. It was noticed that these viruses commonly spread via malicious emails, so you should be very careful about opening emails that come from unknown senders. Please, if you have even the slightest suspicion about the reliability of the sender, do not open such letters, do not click on links placed in the message, and most importantly, DO NOT open the attachments. Ransomware executive files usually come disguised as safe documents or archives.

Do not click suspicious ads while browsing the web. Especially avoid pop-up ads or intrusive and flashy banners that are marked as “Powered by …” or “ads by…” These ads are usually supplemented with deceptive links that redirect the user to predetermined questionable web sources.

How to remove Salam virus?

If you have become a victim of this hazardous virus, do not waste your money; you can never know whether the criminal that has deceived you and encrypted your personal files (so that they would become useless) is trustworthy. You should not support such frauds by paying them. In the future, make sure you create data backups so you can recover your records in case a ransomware virus enters your PC.

We recommend removing Salam virus without a hesitation. As we have mentioned, you can do that with the anti-malware software, or manually. The manual Salam removal tutorial can be found below:

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use. By Downloading any provided Anti-spyware software to remove Salam virus you agree to our privacy policy and agreement of use.
do it now!
Download
Reimage (remover) Happiness
Guarantee
Download
Reimage (remover) Happiness
Guarantee
Compatible with Microsoft Windows Compatible with OS X
What to do if failed?
If you failed to remove infection using Reimage, submit a question to our support team and provide as much details as possible.
Reimage is recommended to uninstall Salam virus. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

More information about this program can be found in Reimage review.

More information about this program can be found in Reimage review.

Manual Salam virus Removal Guide:

Remove Salam using Safe Mode with Networking

Reimage is a tool to detect malware.
You need to purchase Full version to remove infections.
More information about Reimage.

  • Step 1: Reboot your computer to Safe Mode with Networking

    Windows 7 / Vista / XP
    1. Click Start Shutdown Restart OK.
    2. When your computer becomes active, start pressing F8 multiple times until you see the Advanced Boot Options window.
    3. Select Safe Mode with Networking from the list Select 'Safe Mode with Networking'

    Windows 10 / Windows 8
    1. Press the Power button at the Windows login screen. Now press and hold Shift, which is on your keyboard, and click Restart..
    2. Now select Troubleshoot Advanced options Startup Settings and finally press Restart.
    3. Once your computer becomes active, select Enable Safe Mode with Networking in Startup Settings window. Select 'Enable Safe Mode with Networking'
  • Step 2: Remove Salam

    Log in to your infected account and start the browser. Download Reimage or other legitimate anti-spyware program. Update it before a full system scan and remove malicious files that belong to your ransomware and complete Salam removal.

If your ransomware is blocking Safe Mode with Networking, try further method.

Remove Salam using System Restore

Reimage is a tool to detect malware.
You need to purchase Full version to remove infections.
More information about Reimage.

  • Step 1: Reboot your computer to Safe Mode with Command Prompt

    Windows 7 / Vista / XP
    1. Click Start Shutdown Restart OK.
    2. When your computer becomes active, start pressing F8 multiple times until you see the Advanced Boot Options window.
    3. Select Command Prompt from the list Select 'Safe Mode with Command Prompt'

    Windows 10 / Windows 8
    1. Press the Power button at the Windows login screen. Now press and hold Shift, which is on your keyboard, and click Restart..
    2. Now select Troubleshoot Advanced options Startup Settings and finally press Restart.
    3. Once your computer becomes active, select Enable Safe Mode with Command Prompt in Startup Settings window. Select 'Enable Safe Mode with Command Prompt'
  • Step 2: Restore your system files and settings
    1. Once the Command Prompt window shows up, enter cd restore and click Enter. Enter 'cd restore' without quotes and press 'Enter'
    2. Now type rstrui.exe and press Enter again.. Enter 'rstrui.exe' without quotes and press 'Enter'
    3. When a new window shows up, click Next and select your restore point that is prior the infiltration of Salam. After doing that, click Next. When 'System Restore' window shows up, select 'Next' Select your restore point and click 'Next'
    4. Now click Yes to start system restore. Click 'Yes' and start system restore
    Once you restore your system to a previous date, download and scan your computer with Reimage and make sure that Salam removal is performed successfully.

Finally, you should always think about the protection of crypto-ransomwares. In order to protect your computer from Salam and other ransomwares, use a reputable anti-spyware, such as Reimage, Plumbytes Anti-MalwareWebroot SecureAnywhere AntiVirus or Malwarebytes Anti Malware

About the author

Jake Doevan
Jake Doevan - Computer technology expert

If this free removal guide helped you and you are satisfied with our service, please consider making a donation to keep this service alive. Even a smallest amount will be appreciated.

Contact Jake Doevan
About the company Esolutions


  • allaina

    no way to decrypt the files? so that means my family moments, videos, and my study work is gone for good?????? ARE YOU SERIOUS?
    There must be a way to decrypt the files! please help!

    • Joshua

      This virus seems scary. Ill definitely use the tips to secure my PC.

      • killah17

        yeah thats a good idea… I just need to get a drive with a LOOOT of GBs 😀

  • Magdz27

    It is frustrating. Why people who know how to create programs use their computing and programming skills for such bad purposes? Its really disappointed. The world changes and evolves, so does the deception techniques that criminals use!

  • bob

    encrypting is hopeless, but im not going to pay. screw the criminals! lesson learned. I will get a good security software instead of paying them!!