Trojan.Ransirac.C

Trojan.Ransirac.C is a type of computer threat that can be classified as ransomware, because it can lock up your computer and hold it “hostage” until you pay a particular sum of money to the hacker who has created the infection. Trojan.Ransirac.C makes it sounds as if the only way to get your computer back is to actually pay the fine for a crime you haven’t committed.

Upon the installation Trojan.Ransirac.C installs a ransomware called “Gema”. It is directly related to and works very similar to FBI MoneyPak – a piece of ransomware that has been all the rage recently. To make it more clear, Trojan.Ransirac.C does not exactly cause the fake warning message to be displayed on your screen, it INSTALLS the unwanted application, but if you want to get rid of that message, you need to remove Trojan.Ransirac.C as well, otherwise the ransomware will just keep on coming back.

When the Trojan gets into the system it contacts to such sites as eletropedi.com, gunestekstilemlak.com and fazlaoluyoruz.com. Then it generates the Gema ransomware and you see a message that says you have been locked out of your computer, because you have been downloading music illegally. Then you are asked to pay 100 euro fine or else face up to 3 years in prison. That is an obvious lie, but it is hard to shake off, especially as Trojan.Ransirac.C terminates taskmgr.exe and procexp.exe, blocking you from your system tools as well.

The most efficient way to erase Trojan.Ransirac.C is to load your system in Safe Mode with Networking (press F8 during the reboot) and then download a security program of choice that will help you to deal with the infection. The Trojan is not too dangerous, but it is very annoying and has to be dealt with immediately. Do not allow Trojan.Ransirac.C to take over. Terminate it at once.