Smash Ransomware

When we talk about ransomware infections, we usually imagine something dangerous and irreversible, but Smash Ransomware is not like that. Some computer security specialists say that this program is a joke because it does not do anything one would expect from a genuine ransomware infection. Normally, a crypto ransomware infection would encrypt your files and demand that you pay a ransom, but this program here does not do that. In a sense, the only thing complicated about this program is its removal, but you can easily terminate Smash Ransomware with a licensed antispyware application once you load your system in Safe Mode with Networking.

As far as the infection symptoms are concerned, it is easy to know you are infected with this ransomware because the program has an interface that pops up into your screen right after the infiltration. As per usual, Smash Ransomware connects to the Internet without your permission to communicate with its command and control center. However, our researchers think that the program should not be able to establish a decent connection with its C&C since it does not function properly on the infected computer, too. Of course, you also cannot uninstall it via Control Panel, but that is a given when we deal with ransomware infections.

Perhaps you may not understand that this program is a malicious intruder at first because Smash Ransomware displays an image of the Super Mushroom from the Super Mario Bros game. Of course, in the image, the character is holding a knife so that does not bode well. However, we are rather lucky because the program seems to be underdeveloped. It might say that “if you don’t pay us for a key within the progressbar is 100% we will delete ALL of your files forever,” but it is very unlikely that the program will live up to its promises.

Security experts maintain that this ransomware is more of a screenlocker infection that blocks you from accessing particular system utilities. So it cannot encrypt your files, and it surely does not delete anything. What’s more, when we take a closer look at its code, we can see that Smash Ransomware cannot perform most of the functions it is supposed to carry out because the malicious code is written poorly. For instance, the program expects you to enter a 7-digit code into its interface. You should be able to acquire this code once you contact the people behind this infection, but this program is so underdeveloped that it does not even give you any information how to contact the hackers.

The most annoying thing about this infection, however, is that Smash Ransomware does something undesirable. It blocks Registry Editor, Task Manager and the Command prompt, so you technically cannot kill the program’s processes manually. Each time you try to run a blocked utility, the ransomware will display a message that says “No TaskManager for you.” or “No Registery Editor for you.” Aside from the fact that these messages are rather funny due to spelling errors, they can definitely ruin your day.

Luckily, there is no need to launch your system in the Safe Mode with Networking to bypass these restrictions. Most of the time, ransomware programs contain a configuration that allows them to start automatically whenever you turn on your computer. Smash Ransomware does not have such configuration. It means that if you restart your computer, the program will not launch again, and you will only have to remove it.

If you are not sure how this infection entered your system, it may not be a good idea to try and delete it manually. It would be for the best to acquire a licensed antispyware tool that would terminate Smash Ransomware for you automatically.

While you are at it, you should also get rid of other potential threats that might have entered your PC together with this ransomware application.

You have to understand that investing in a legitimate application may not be enough to secure your system. It is also important that you change your web browsing habits, by staying away from unfamiliar sites and deleting spam email immediately.

Should you need any help with malware removal, please do not hesitate to contact us. We are always open to your feedback.

How to Remove Smash Ransomware

1. Restart your computer.
2. Wait for the system to load.
3. Access http://www.pcthreat.com/download-sph
4. Download SpyHunter and run a full system scan.