Comparison of programs for removing ransomware banners (blockers)
Programs for removing computer ransomware blockers are usually intended for an inexperienced user who does not need to use tools such as regedit.exe or uVS in everyday life, and when a “blocker comes unexpectedly,” the user wants to find a panacea that quickly and easily heal his computer. Of course, it is not possible to find a panacea, but it turns out to find some program that will try to cure the computer. And if this program helps an inexperienced user, then he extols this program as a remedy for all software ransomware, and if it doesn’t help, he expresses his “fu” when other users mention its name. I propose to make a small comparison of these programs.
Define the general points:
We pass directly to this free software.
The utility was developed in the dungeons of the most famous Russian antivirus. This utility is recorded in a special version of LiveCD Kaspersky Rescue Disk. By the way, I observed a misunderstanding of users regarding this policy - why create a special version of LiveCD, isn’t it easier to place all the "chips" on one disk? One user advises another to download Kaspersky WindowsUnlocker, and he downloads the usual Kaspersky Rescue Disk - as a result, he does not see the necessary utility ...
Let's move on to the pluses:
restores the Winlogon folder in the registry to its initial state;
something else is being restored in the registry, perhaps it eliminates the ransomware pranks (blocking of the “Registry Editor” and other little things), but the official manual on the Kaspersky website does not report this, you just have to guess;
the presence of Kaspersky Rescue Disk allows you to check your computer for known malware, which may allow you to identify ransomware "in person", including those that infect the boot sector;
availability of a utility for easily creating a LiveCD on a flash drive.
Let's move on to the minuses:
to launch the utility, you need to call the “Terminal” and work with the command line - for an inexperienced user this can cause difficulties when using;
processing very small ransomware startup options; very few ransomware launches through Winlogon;
Kaspersky Rescue Disk detects only a certain number of malware. Since they appear “with a new face” every day, such a search is often ineffective.
This is the very first known attempt to create a universal tool for removing ransomware. Contains "Automatic mode" and "Manual". For the inexperienced user, “Auto mode” is more suitable, but in “Manual” it is unlikely that he will be able to do something useful for his computer - it is intended for advanced users.
Let's move on to the pros:
Automatic removal of ransomware;
The ability to delete boot ransomware by replacing the boot sector with the standard one.
Let's move on to the downsides:
Automatic removal of ransomware does not help in every case of infection;
Overwriting the boot sector to standard in some cases can cause a reinstallation of the system;
Manual deletion is unlikely to be useful in the hands of an inexperienced user, and they are the main victims of ransomware.
This utility appeared recently and has not yet gained such popularity as the two above. But the utility has several advantages. AntiSMS is an attempt to create an absolutely universal tool to combat ransomware. Treatment is carried out in one click with the mouse.
Let's move on to the pluses:
an absolutely automatic cure that does not require special knowledge from the user, and this is the main plus, and all the pluses below are inside this plus;
Intelligent processing of many options for autorun malware, which allows you to effectively remove ransomware;
recovery of infected (damaged) system files;
signature treatment of boot ransomware, which allows for complete correct cure;
cure blockers that spoil the partition table;
restores registry settings that spoil ransomware;
LiveCD takes about 30 megabytes, which does not compare with the LiveCD utilities discussed above;
There is a utility for simple recording LiveCD on a flash drive.
Let's move on to the minuses:
during the testing process, I did not find any minuses in this program as part of the problem of combating ransomware and similar trojans.
As a result of my brief review: I advise you to use the name AntiSMS, as This utility removes ransomware more effectively, even in the hands of an inexperienced user. But after returning the system to working condition, you should check your computer with a free anti-virus scanner, for example, Dr.Web CureIt! ..
Links:
Kaspersky WindowsUnlocker
AntiWinLocker LiveCD
AntiSMS LiveCD
Define the general points:
- All these utilities work only with LiveCD. This is logical, because the blocker actively resists its removal;
- All these utilities try to use a universal ransomware removal method that is suitable for existing malware and those that will appear in the future; and a method of detecting already known malware “in person” - it is less effective, but it’s not possible to create a universal cure against some ransomware, so developers of this software have to “spin” to make life easier for inexperienced users.
We pass directly to this free software.
Kaspersky WindowsUnlocker
The utility was developed in the dungeons of the most famous Russian antivirus. This utility is recorded in a special version of LiveCD Kaspersky Rescue Disk. By the way, I observed a misunderstanding of users regarding this policy - why create a special version of LiveCD, isn’t it easier to place all the "chips" on one disk? One user advises another to download Kaspersky WindowsUnlocker, and he downloads the usual Kaspersky Rescue Disk - as a result, he does not see the necessary utility ...
Let's move on to the pluses:
restores the Winlogon folder in the registry to its initial state;
something else is being restored in the registry, perhaps it eliminates the ransomware pranks (blocking of the “Registry Editor” and other little things), but the official manual on the Kaspersky website does not report this, you just have to guess;
the presence of Kaspersky Rescue Disk allows you to check your computer for known malware, which may allow you to identify ransomware "in person", including those that infect the boot sector;
availability of a utility for easily creating a LiveCD on a flash drive.
Let's move on to the minuses:
to launch the utility, you need to call the “Terminal” and work with the command line - for an inexperienced user this can cause difficulties when using;
processing very small ransomware startup options; very few ransomware launches through Winlogon;
Kaspersky Rescue Disk detects only a certain number of malware. Since they appear “with a new face” every day, such a search is often ineffective.
AntiWinLocker LiveCD
This is the very first known attempt to create a universal tool for removing ransomware. Contains "Automatic mode" and "Manual". For the inexperienced user, “Auto mode” is more suitable, but in “Manual” it is unlikely that he will be able to do something useful for his computer - it is intended for advanced users.
Let's move on to the pros:
Automatic removal of ransomware;
The ability to delete boot ransomware by replacing the boot sector with the standard one.
Let's move on to the downsides:
Automatic removal of ransomware does not help in every case of infection;
Overwriting the boot sector to standard in some cases can cause a reinstallation of the system;
Manual deletion is unlikely to be useful in the hands of an inexperienced user, and they are the main victims of ransomware.
AntiSMS Utility
This utility appeared recently and has not yet gained such popularity as the two above. But the utility has several advantages. AntiSMS is an attempt to create an absolutely universal tool to combat ransomware. Treatment is carried out in one click with the mouse.
Let's move on to the pluses:
an absolutely automatic cure that does not require special knowledge from the user, and this is the main plus, and all the pluses below are inside this plus;
Intelligent processing of many options for autorun malware, which allows you to effectively remove ransomware;
recovery of infected (damaged) system files;
signature treatment of boot ransomware, which allows for complete correct cure;
cure blockers that spoil the partition table;
restores registry settings that spoil ransomware;
LiveCD takes about 30 megabytes, which does not compare with the LiveCD utilities discussed above;
There is a utility for simple recording LiveCD on a flash drive.
Let's move on to the minuses:
during the testing process, I did not find any minuses in this program as part of the problem of combating ransomware and similar trojans.
As a result of my brief review: I advise you to use the name AntiSMS, as This utility removes ransomware more effectively, even in the hands of an inexperienced user. But after returning the system to working condition, you should check your computer with a free anti-virus scanner, for example, Dr.Web CureIt! ..
Links:
Kaspersky WindowsUnlocker
AntiWinLocker LiveCD
AntiSMS LiveCD