How to stop Trojan.ransom.icepol virus from damaging data?

How to stop Trojan.ransom.icepol virus from damaging data?

If you’ve been infected by a Trojan virus called Trojan.Ransom.IcePol, you probably visited a website infected by this malware that contains malicious scripts. These scripts could exploit vulnerabilities from the browser or if not one of the installed plug-ins. The Trojan.Ransom.IcePol virus is also known as the FBI Ukash MonkeyPak Ransomware.

It is a malware that is capable of locking you out of your computer as well as your programs until you pay a “ransom” probably either $100 or $200 through MoneyPak/Ukash/PaySafeCard. Once the virus is installed on your computer, it will configure itself to start with Windows. So, when you login to Windows the virus runs immediately.

The following files are associated with Trojan.Ransom.IcePol:

• C:\Documents and Settings\\Start Menu\Programs\Startup\ctfmon.lnk
• C:\Documents and Settings\\Start Menu\Programs\Startup\.lnk
• C:\Users\\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ctfmon.lnk
• C:\Users\\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\.lnk
• C:\Users\\AppData\.exe
• C:\Documents and Settings\\Local Settings\Temp\.exe
• C:\Users\\AppData\Roaming\.exe
• C:\Program Data\lsass.exe
• C:\Program Data\.exe

Since you can’t start any program on your computer, you need to restart in Safe Mode with Networking. After that, you need to login to your infected account and then download Bitdefender Trojan.Ransom.IcePol Generic Removal Tool. Save the file on your desktop and then double-click it. If you are using Windows Vista or Windows 7, you need to run it as administrator.

Right-click on it on your desktop, point to “Run as”, and then select Administrator. Click Start Scan and then wait until it is finished. Once finished, restart your computer and boot normally. See image.