Comparison of programs to remove banners ransomware (blockers)
Programs for removing computer blockers, extortionists, as a rule, are intended for an inexperienced user who does not need to use tools such as regedit.exe or uVS in everyday life, and when “unexpectedly” comes a blocker, the user wants to find a panacea that quickly and easily heal his computer. Of course, the panacea cannot be found, but it turns out to find some program that will try to cure the computer. And if this program helps an inexperienced user, then he extols this program as a means of all program extortionists, and if it does not help, he expresses his “foo” at the mention of its name by other users. I propose to conduct a small comparison of these programs.
Define common points:
Go directly to this free software.
The utility is developed in the dungeons of the most famous Russian antivirus. This utility is recorded in a special version of the LiveCD Kaspersky Rescue Disk. By the way, I observed a lack of understanding of users regarding this policy - why create a special version of the LiveCD, is it not easier to put all the "fishes" on one disc? One user advises another to download Kaspersky WindowsUnlocker, and he downloads the usual Kaspersky Rescue Disk - as a result, he does not see the necessary utility ...
Proceed to the pluses:
restores the Winlogon folder in the registry to the initial state;
something else restores in the registry, perhaps, eliminates extortioners' pranks (blocking Registry Editor and other trifles), but the official manual on the Kaspersky website does not report this, we can only guess;
the presence of Kaspersky Rescue Disk allows you to check your computer for known malware, which may allow you to detect extortionists "in person", including those that infect the boot sector;
the presence of a utility to easily create a LiveCD on a flash drive.
Let's go to the minuses:
to launch the utility, you must call the Terminal and work with the command line - for an inexperienced user this can cause difficulties when using;
processing of very small options for autorun of the extortionist, through Winlogon at the moment starts a very small part of the extortionists;
Kaspersky Rescue Disk detects only a certain number of malware, and since they appear “with a new face” every day, then such a search is often ineffective.
')
This is the very first known attempt to create a universal means to remove ransomware. Contains “Automatic Mode” and “Manual”. For the inexperienced user, “Auto mode” is more suitable, and in “Manual” it is unlikely that he will be able to do something useful for his computer - it is intended for advanced users.
Proceed to the pluses:
Automatic removal of ransomware;
Ability to remove boot ransomware by replacing the boot sector with a standard one.
Let's go to the minuses:
Automatic removal of ransomware does not help in every case of infection;
Overwriting the boot sector to the standard one in some cases can cause the system to be reinstalled;
Manual removal mode is unlikely to be useful in the hands of an inexperienced user, and they are the main victims of extortionists.
This utility appeared quite recently and has not yet gained such popularity as the two above. But the utility has several advantages. AntiSMS is an attempt to create an absolutely universal means to fight extortionists. The treatment is carried out in one click with the mouse.
Proceed to the pluses:
Absolutely automatic cure, which does not require special knowledge from the user, and this is the main plus, and all the advantages below are inside this plus;
intellectual processing of so many variants of the startup of the malware, which allows you to effectively remove ransomware;
recovery of infected (damaged) system files;
signature treatment of boot extortionists, which allows for a complete and correct cure;
cure blockers that spoil the partition table;
restores registry settings that spoil extortionists;
LiveCD takes about 30 megabytes, which is not comparable to the LiveCD utilities discussed above;
there is a utility for simple recording LiveCD on a flash drive.
Let's go to the minuses:
in the process of testing, I did not find any minuses in this program as part of the problem of fighting extortionists and similar Trojans.
As a result of my brief review: I advise you to use personal AntiSMS, since This utility removes extortionists more effectively, even in the hands of an inexperienced user. But after the system returns to a working state, you should check your computer with a free anti-virus scanner, for example, Dr.Web CureIt! ..
References:
Kaspersky WindowsUnlocker
AntiWinLocker LiveCD
AntiSMS LiveCD
Define common points:
- All of these tools work only with the LiveCD. This is logical, because the blocker actively opposes its removal;
- All these utilities are trying to use a universal way to remove the extortionist, which is suitable for existing malware and those that appear in the future; and the method of detecting already known malicious "in person" - it is less effective, but it is not possible to create a universal remedy against some ransomware, therefore developers of this software have to "spin" in order to make life easier for an inexperienced user.
Go directly to this free software.
Kaspersky WindowsUnlocker
The utility is developed in the dungeons of the most famous Russian antivirus. This utility is recorded in a special version of the LiveCD Kaspersky Rescue Disk. By the way, I observed a lack of understanding of users regarding this policy - why create a special version of the LiveCD, is it not easier to put all the "fishes" on one disc? One user advises another to download Kaspersky WindowsUnlocker, and he downloads the usual Kaspersky Rescue Disk - as a result, he does not see the necessary utility ...
Proceed to the pluses:
restores the Winlogon folder in the registry to the initial state;
something else restores in the registry, perhaps, eliminates extortioners' pranks (blocking Registry Editor and other trifles), but the official manual on the Kaspersky website does not report this, we can only guess;
the presence of Kaspersky Rescue Disk allows you to check your computer for known malware, which may allow you to detect extortionists "in person", including those that infect the boot sector;
the presence of a utility to easily create a LiveCD on a flash drive.
Let's go to the minuses:
to launch the utility, you must call the Terminal and work with the command line - for an inexperienced user this can cause difficulties when using;
processing of very small options for autorun of the extortionist, through Winlogon at the moment starts a very small part of the extortionists;
Kaspersky Rescue Disk detects only a certain number of malware, and since they appear “with a new face” every day, then such a search is often ineffective.
')
AntiWinLocker LiveCD
This is the very first known attempt to create a universal means to remove ransomware. Contains “Automatic Mode” and “Manual”. For the inexperienced user, “Auto mode” is more suitable, and in “Manual” it is unlikely that he will be able to do something useful for his computer - it is intended for advanced users.
Proceed to the pluses:
Automatic removal of ransomware;
Ability to remove boot ransomware by replacing the boot sector with a standard one.
Let's go to the minuses:
Automatic removal of ransomware does not help in every case of infection;
Overwriting the boot sector to the standard one in some cases can cause the system to be reinstalled;
Manual removal mode is unlikely to be useful in the hands of an inexperienced user, and they are the main victims of extortionists.
AntiSMS utility
This utility appeared quite recently and has not yet gained such popularity as the two above. But the utility has several advantages. AntiSMS is an attempt to create an absolutely universal means to fight extortionists. The treatment is carried out in one click with the mouse.
Proceed to the pluses:
Absolutely automatic cure, which does not require special knowledge from the user, and this is the main plus, and all the advantages below are inside this plus;
intellectual processing of so many variants of the startup of the malware, which allows you to effectively remove ransomware;
recovery of infected (damaged) system files;
signature treatment of boot extortionists, which allows for a complete and correct cure;
cure blockers that spoil the partition table;
restores registry settings that spoil extortionists;
LiveCD takes about 30 megabytes, which is not comparable to the LiveCD utilities discussed above;
there is a utility for simple recording LiveCD on a flash drive.
Let's go to the minuses:
in the process of testing, I did not find any minuses in this program as part of the problem of fighting extortionists and similar Trojans.
As a result of my brief review: I advise you to use personal AntiSMS, since This utility removes extortionists more effectively, even in the hands of an inexperienced user. But after the system returns to a working state, you should check your computer with a free anti-virus scanner, for example, Dr.Web CureIt! ..
References:
Kaspersky WindowsUnlocker
AntiWinLocker LiveCD
AntiSMS LiveCD
Source: https://habr.com/ru/post/145765/
All Articles