Now a virus that solicits the sending of SMS is widespread on the network. It is "registered" on your computer in the startup and registries, and when you turn on the computer, the message "Your computer is locked" or a porn banner is displayed.
Necessary
a computer connected to the internet
Instructions
Step 1
Boot your computer in Safe Mode by restarting it and pressing the F8 key on your keyboard when the startup screen appears. Next, select from the boot options Safe mode. Log in with the username "Administrator" to unlock your computer.
Step 2
Press the key combination Win + R. In the window that appears, enter the Msconfig command, click OK. In the dialog box that appears, go to the "Startup" tab. Find the suspicious file in the list, disable it, to do this, uncheck the box next to its name. This will remove the virus blocking the system from startup.
Step 3
Click the "Start" button, then select the "Run" command. Enter the Regedit command. In the Registry Editor that opens, go to HKEY_LOCAL_MACHINE, then SOFTWARE - Microsoft Windows - Current Version and select Run. Find the disabled file and delete it. Reboot your computer.
Step 4
Use another computer with Internet access to get rid of the virus. Go to it on the link https://sms.kaspersky.com/, in the window that opens, enter in the field the account number, phone number to which you want to send SMS, click on the "Get code" button. The next window will display the unlock codes. Enter the received codes one by one until you get rid of the banner.
Step 5
Press the key combination Ctrl + Shift + Esc until the Task Manager appears. Without releasing the keys, click on the manager "End task". Then select "New task", in the window that appears, enter Regedit.
Step 6
In Registry Editor, go to MicrosoftWindows NT / CurrentVersion / Winlogon. In the right part of the window, check the value of the Shell parameter, it must contain Explorer.exe, and the Userinit parameter must contain the value C: /WINDOWS/system32/userinit.exe.
