Your computer has been attacked by Trojan:AutoIt/Ransom.F? Feeling worried about the continuous warning pop-ups from anti-virus all the time? Can’t bear the performance of your computer that has become lower and lower? If these are really bothering you, please look the solution below to have this nerve-wracking issue solved.

What is Trojan:AutoIt/Ransom.F?

Trojan:AutoIt/Ransom.F is a destructive virus that classified to the most tricky virus family: Trojan virus. This kind of virus can bring fatal damages to your system once it gets resided there. Your computer may get this virus when you are visiting illegal websites such as pornographic or violent sites. Sometimes it may also sneak into your computer when you click malicious links from unknown website, open curious attachment from spam emails. All these actions can create the chance for Trojan:AutoIt/Ransom.F to slip into your computer silently and wreak chaos there. This nasty virus can exhibit a number of malicious behaviors and the symptoms of the infection depend on what the hacker wants. It can lock your computer down to death, lock your screen letting you can do nothing on your computer, steal your confidential banking data and private photos and videos. This virus may also connects to a remote website over the Internet in order to download additional malware or virus onto your system and then creak chaos there.

Since it can bring so many damages to your system, Trojan:AutoIt/Ransom.F should be removed completely without any hesitation from your computer as soon as possible before it can bring further damages. But this virus is very stubborn and pretty difficult to remove because no anti-virus programs are able to kill it successfully up to now. As the most effective solution, manual removal needs expert skills so it’s only feasible for advanced users. If you think you are skilled and experienced enough on computer and software issue, you can try to follow the following guide to remove this virus by yourself.

If you need any help, Live Chat with YooSecurity Expert Now , or you can follow our step-by-step virus removal instruction below to clean the virus yourself. (For advanced computer users)

Best Way to Remove Trojan:AutoIt/Ransom.F Step by Step:

Firstly, please restart your computer and get in Safe Mode with Networking:

Please follow these steps to get rid of Trojan:AutoIt/Ransom.F manually:
Step 1: Press CTRL+ALT+DEL or CTRL+SHIFT+ESC. Open the Windows Task Manager.
If that didn’t work, try another way. Press the Start button and click on the Run option. This will start the Run tool. Type in task-mgr and press OK. This should start the Windows Task Manager.

Step 2: Within the Windows Task Manager click on the Processes tab. Find the process by name. random.exe related to Trojan:AutoIt/Ransom.F. Then scroll the list to find required process. Select it with your mouse or keyboard and click on the End Process button. This will kill the process.

Video Show You on How to Modify or Change Windows Registry:

Step3: Remove malicious files of Trojan:AutoIt/Ransom.F.

C:\windows\system32\services.exe
C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\services.exe
C:\Windows\Installer\{bbee3ba2-89af-930c-bb78-1fb4e17db3cc}

Step4: Delete malicious registry entries of Trojan:AutoIt/Ransom.F.

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\Random.exe
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Random.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer
“EnableShellExecuteHooks”= 1 (0x1)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\run\Random.exe

Note: This article just offer an reference of possible solution to clean the Trojan:AutoIt/Ransom.F for advanced and experienced computer users. Because the hackers create and update the virus from time to time, also the tricky virus may changes all the time and disguises itself, therefore it may happens that you can’t find and kill it completely according our step-by-step instructions. Meanwhile, the manual removal of virus needs expert skills. If you haven’t sufficient expertise in dealing with PC issues, especially in dealing with program files, processes, .dll files and registry entries, it is not recommended to try it yourself, because any mistake may lead to fatal damage to your system.

If you can’t clean the virus successfully with the instruction above, you’re welcome to consult YooSecurity certified agents to fix the problem.

Published by Michael Myn & last updated on November 27, 2012 6:58 am

Leave a Reply