ComputerDestroyer Ransomware

ComputerDestroyer Ransomware is a threat that shows warnings that say you have been infected with corona virus. These messages might also claim that the malicious application have encrypted all files on the infected device. In exchange for a decryption code that could restore all files, hackers ask to contact them and if you do, we believe they would ask to pay ransom. However, our researchers who tested a sample of this threat say that it does not encrypt any files. Thus, users who put up with the hackers’ demands might end up being scammed. Therefore, instead of doing what the warning says, we advise deleting ComputerDestroyer Ransomware. The process might not be easy, but we can guide you through it with the instructions displayed at the end of this article.

Further in this text we explain how the malicious application works and other important details. The first thing users should know is how ComputerDestroyer Ransomware could be distributed. Our researchers say that such threats can enter a system if a user opens unreliable files obtained from the Internet or clicks on suspicious advertisements and links. For example, file carrying the malware could be encountered on unreliable file-sharing websites. Consequently, it is advisable to download files only from legitimate websites and stay away from sites that could be malicious.

Moreover, the ComputerDestroyer Ransomware could be spread via email. For instance, the messages carrying it could claim that it is an important document and you must open it immediately. Also, malicious emails could urge you to click on links that could initiate the malicious application’s launcher’s downloading process. This is why, it is vital to make sure that emails you receive come from reliable sources and do not raise suspicion. Scaring you into opening a file or a link should without a doubt seem suspicious. If you are not entirely sure that your received or downloaded file is harmless, you should scan it with a reputable antimalware tool that could warn you about malicious data.

The first thing ComputerDestroyer Ransomware should do after entering a system is log out its user and display a blue screen with a message saying: “you are infected of corona virus..” Below the message users should also see the malicious application’s creators email address and the OK button. Our researchers say that if you click the OK button, the threat should allow you to enter your password and log onto your device again. Unfortunately, soon after you do so, the malware should lock your screen by displaying a borderless black window and a pop-up window on top of it.

The text on the threat’s pop-up window should say that all your files got encrypted by corona virus. Plus, the warning ought to say that you can restore them only with the hacker’s decryption code that can be obtained if you contact them via email. Since most of malicious applications like ComputerDestroyer Ransomware are created for money extortion, we suspect that users who contact the malware’s developers would be asked to pay ransom. In which case, users who trust the hackers would get scammed because, as said earlier, the malware does not encrypt any files, which means you do not need any decryption code to restore them. Of course, the hackers’ code might help you unlock your screen faster, but we do not think it is worth paying money to them.

Our researchers say that users who want to unlock their screens should erase ComputerDestroyer Ransomware from their computers. It might sound like an impossible task if your screen is locked, but if you restart your system in Safe Mode with Networking, you should regain the control of your computer and be able to erase the malicious application. To eliminate ComputerDestroyer Ransomware we advise deleting all recently downloaded files that you believe could have infected your device with this screen locker. Afterward, we recommend scanning the system with a reliable antimalware tool to makes sure that the malware is truly gone. If you need more consistent instructions, you should follow the instructions available below.

Restart your system in Safe Mode with Networking

Windows 8/Windows 10

1. Tap Win+I for Windows 8 or open the Start menu for Windows 10.
2. Click the Power button.
3. Press and hold the Shift key and click Restart.
4. Choose Troubleshoot and pick Advanced Options.
5. Select Startup Settings and click Restart.
6. Press the F5 key and restart the PC.

Windows XP/Windows Vista/Windows 7

1. Go to Start, pick Shutdown options and click Restart.
2. Press and hold the F8 key when the computer starts restarting.
3. Select Safe Mode with Networking from Advanced Boot Options window.
4. Click Enter and log on to the computer.

Remove ComputerDestroyer Ransomware

1. Press Win+E.
2. Check these directories:
   %USERPROFILE%\Desktop
   %USERPROFILE%\Downloads
   %TEMP%
3. Search for the malware’s installer, right-click the threat’s launcher and press Delete.
4. Close File Explorer.
5. Empty Recycle Bin.
6. Do a full system scan with reliable antimalware tool.
7. Click the provided deletion button to erase all identified threats.
8. Restart your computer.