Trojan.Ransomlock - How to remove?


Trojan.Ransomlock is a nasty piece of ransomware, which can really wreck one’s nerves. This parasite infects the system by exploiting various security holes in your system. Upon infection it drops several entries in the registry, which disable Task Manager, Registry Editor and Safe Mode as a self-defense move. It will then lock the desktop and display the following message in Russian:

To unlock you need to send an SMS with the text 4113558385 to the number 3649

Enter the resulting code:

Trojan.Ransomlock also includes a message at the bottom (falsely) informing the user, that any attempt to reinstall the system will result in the destruction of all data.

The basic idea behind this parasite is that the user has to send an SMS to the given number, thus earning the scammers money for each SMS. Rebooting your system won’t help, because Trojan.Ransomlock runs every time at startup.

Symantec has created a code generator, which will generate a code needed to unlock your system, it can be found here. After neutralizing Trojan.Ransomlock you can safely remove it.


Automatic Trojan.Ransomlock removal tools


Other tools

  0   0
  0   0
    Malwarebytes Anti-Malware
  Download Reimage for Trojan.Ransomlock detectionNote: Reimage trial provides detection of parasite like Trojan.Ransomlock and assists in its removal for free. You can remove detected files, processes and registry entries yourself or purchase a full version.
  We might be affiliated with some of these programs. Full information is available in disclosure

Manual Trojan.Ransomlock removal


Important Note: Although it is possible to manually remove Trojan.Ransomlock, such activity can permanently damage your system if any mistakes are made in the process, as advanced spyware parasites are able to automatically repair themselves if not completely removed. Thus, manual spyware removal is recommended for experienced users only, such as IT specialists or highly qualified system administrators. For other users, we recommend using Reimage or other tools found on


It is impossible to list all file names and locations of modern parasites. You can identify remaining parasites, other Trojan.Ransomlock infected files and get help in Trojan.Ransomlock removal by using Reimage scanner. 


Trojan.Ransomlock screenshots

December 21st, 2016 08:58, December 21st, 2016 08:58
Fill this form to subscribe to our newsletter

One thought on “Trojan.Ransomlock

1 Comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Trojan.Ransomlock Facts