Wednesday, September 25, 2013

How to remove United States Courts Ransomware

United States Courts Ransomware is an ransomware that locks the  compromised computer and ask you to pay for the fine if you want to unlock your computer. Typical ransomware like FBI Department of Defense, mentroplolitan police or other notorious ransomware, United States Courts Ransomware will first sneak into your computer and scan the the weakness of your computer. Then at a certain time, United States Courts Ransomware is triggered and then begins to lock your computer.

The first image that comes to your sight is a big warning at the top of the webpage,reading “YOUR COMPUTER HAS BEEN LOCKED”. To make it more real it also offers the criminal case number. The it tells you why your computer is locked, something like distribution of viruses or downloading something illegal and you have to pay a fine of $300. If you refuse to pay, you files will be encrypted and might lose.


People with little knowledge would know that this is a ransomware and would not pay  the money. But some people still were taken in and suffer financial loss. Apart from financial loss, more serious thing would come along with United States Courts Ransomware if you don’t get rid of it once being infected with United States Courts Ransomware. First as a ransomware, it will scare you to pay for
the ransom by locking your computer giving bogus warning. If you pay the money, your money will go in vain and virus is still there and your computer is still locked. Second, it changes your computer so much that would totally mess your computer. It changes system’s default setting and registry values, adding values to the startup items, that’s my some infected computers just directly jump into the locked page after restarting. Third ,when computer is being locked,  some bad guys can transfer your private information or doing something  else in your computer while you  can see nothing  being done. So when your computer is locked or infected with United States Courts Ransomware, rewmoving it as soon as possible. If you have any problem during the removal process, please come to here to get professional online tech support.

Manual removal Instruction

Case 1: you can enter the Safe Mode with Networking

Step 1: Enter the Safe Mode with Networking.
Keep tapping F8 when your computer restarts and then choose Safe Mode with Networking with arrow key.


Step 2:  End the process of United States Courts Ransomware.
Press Ctrl+Shift+Esc to launch the Task Manager, find Random.exe and then end it.
Step 3: Go to the Control Panel to remove it.
Click Start >>Control Panel>> Program >> Uninstall a program.

Find United States Courts Ransomware and then right click it and then uninstall it.

Step 4: Go to the registry editor and then delete useless startup values and delete associate files.
Hit Win+R and then type regedit in the dialogue box and hit Enter.


Find the following registry values and then delete them all:
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\random
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\run\random

Find the following files and then delete them all:
%AllUsersProfile%\{random.exe\
C:\WINDOWS\system32\giner.exe

Case 2: You cannot enter the safe mode with networking.

Restart your computer. -> As your computer restarts but before Windows launches, tap "F8" key constantly. -> Use the arrow keys to highlight the “Safe Mode with Command Prompt" option and then press ENTER -> See cmd.exe interface with C:\Windows\system32 -> In the cursor, please type NET USER Allen /ADD and hit Enter-> type NET LOCALGROUP ADMINISTRATORS Allen /ADD and press Enter
It should prompt that "The command completed successfully.
Then restart the computer and enter the account Allen and do from the step 2 above.

Attention here: Removal process would involve risk as we have to deal with registry or process and need to go the system to delete files. One of those steps wrong will cause great damage to your computer. If you have any problem during the removal process, please feel free to click here to get help.

No comments:

Post a Comment