Remove CryptoHitman virus - so you get rid of the Trojan
If you have caught the CryptoHitman virus, you should immediately remove the Trojan from your computer. We'll show you how to do it step by step.
CryptoHitman virus: what does the trojan do?
- In most cases, the trojan gets to your computer via mail attachments and suddenly takes over your system.
- Your personal data is encrypted and given the file extension .porno. In addition, your desktop background is adorned with pornographic images and the video game character Hitman.
- The virus puts you in an uncomfortable situation, especially at work. The virus wants to get you to buy yourself free. You should pay BitCoins worth around $ 150 and get the key to decrypt your files.
- So that you don't think for a long time and pay the ransom, the blackmailers also play for time. One file is deleted every hour. Fortunately, the virus is not as persistent as the well-known Locky virus and is relatively easy to remove. So don't pay under any circumstances.
Remove CryptoHitman virus from Windows
Even though the CryptoHitman virus works similarly to Locky, it is more of a copycat. The virus is programmed much worse and is therefore easier to solve by the system.
- To do this, first open the Task Manager and look for the suerdf.exe and mogfh.exe processes. Select the processes individually with the right mouse button and select the option "End task".
- Now the virus can be removed relatively easily. All you need is a reliable virus scanner. We advise you to get Malwarebytes Anti-Malware for free. Other software like Dr. Web CureIt should also find the virus.
- If this does not work, or important data has already been deleted, you should carry out a system restore. To ensure that it runs smoothly, perform the restore in safe mode.
Delete CryptoHitman virus: decrypt files
Only after the CryptoHitman virus has been removed from your computer should you start decrypting your files. The Jigsaw Decryptor helps here.
- Download the tool and start it. If your anti-virus software blocks the Jigsaw Decryptor, switch it off briefly.
- Click on the "Select Directory" button above and select the desired file path. If you want to decrypt all files, simply select your drives.
- The "Decrypt My Files" button cancels the encryption of your data.
