This blog aim is to help those who have been compromised with Locky Virus Ransomware & RSA-4096 Ransomware Trojan. We at computer geeks FZCO has done lot of research on such virus types to be removed permanently and assures you our best in recovery of your infected files.
First of all we all need to understand the purpose of this locky virus ransomware & RSA 4096 Ransomware. As the word itself describes that the developer of this virus is demanding a ransom from you else he will crash your computer and data. However the point is if you pay them ransom still they are not going to fix your computer. So be aware of sending any bitcoins.
Step 1: Reboot in Safe Mode with networking
Step 2: Install Malwarebytes Anti Malware to remove malware patches
Step 3: Before you run Malwarebytes on your Computer, unhide all this files in the specific drive which is infected
Step 4: Hold the Start Key and R – copy + paste the following and click OK
Step 5: Paste this "notepad %windir%/system32/Drivers/etc/hosts" on hitting start key and R
Step 6: look for other IP address's other than localhost and write them down on a piece of paper
Step 7: Type msconfig in the search field and hit enter. A window will pop-up, then uncheck entries that have unknown manufacturers
Step 8: Press CTRL + SHIFT + ESC simultaneously. Go to the Processes Tab. Try to determine which ones are a virus. Google them or ask us in the comments
Step 9: Right click on each of the virus processes separately and select Open File Location. End the process after you open the folder, then delete the directories you were sent to
Step 10: Type Regedit in the windows search field and press Enter. Once inside, press CTRL and F together and type the virus’s Name
Step 11: Search for the ransomware in your registries and delete the entries. Be extremely careful – you can damage your system if you make a big mistake
If this still doesnt help you then you need a professional to work for you. If you require more help please feel free to write at email@example.com