UniversalVirus Sniffer program - how to fight the Winlock banner virus

Likely antivirus software They simply cannot keep track of all the modifications of these viruses. All the same, this is a lot of money and the extortionists, before each launch of their viruses on the network, clearly tried to hide them from the watchful eyes of anti-virus programs.
Today I will tell you how to fight the winlock banner virus.

So. If suddenly you have contracted the Winlock virus, do not panic and send money or SMS to the extortionists. Still won't help! Just turn off or restart your computer and follow our instructions:
There are several methods to combat ransomware.
It all depends on the type of modification and therefore the methods may also be different.

The first and simplest method:

1. Restart your computer and press F8 until “selecting windows boot mode” appears.

2. There, use the arrows to select “safe mode with command line support” and press enter.

3. Windows will start with the command prompt window already open.

4. In this window, enter mmc and press enter.

5. A console window will open.

6. In this window, click ctrl+o.

7. Another window will open.

8. At the bottom of this window there is an inscription “control console files”. When you click on it, another inscription “all files” will appear below, click on it.

So. Now we see all the files on this computer and can remove the virus.
I don’t know where exactly this virus is located, it all depends on the modification. Next, you will have to look for it yourself or use the universal virus sniffer program. Start the program (start icon), select to start the program under the current user.
The program window will open. After a short scan, a list of suspicious programs will appear.

If you don’t know which one is a virus, remove everything you doubt, no problem.

Right-click on the suspicious program and select the bottom line “delete all links along with the file.” Then, after it opens with a message that the file has been deleted, click OK. And after that press the combination alt+del. All temporary files with links will be deleted. After this, you can restart your computer and make sure everything works well. If the task manager or registry editor or something else does not work, then in the universal virus sniffer program, when you press the combination alt+t A tweaks window will open where you can unlock these functions. I hope everything is very clear. 

Method two:

If the virus still starts in safe mode with the command line, then we need lifecd or lifeusb. Launch Windows and also use the universal virus sniffer program. But there is a small nuance. When starting the program we will need to select windows directory (3rd button on top).
And the rest is the same as in point 1.
Method Three:
This virus is the most arrogant, as it attacks the boot sector of the hard drive and asks for money even before Windows starts. You will need the same thing as in method 2, only you still need to treat the boot sector. At the top of the universal virus sniffer window there is a “rootkits” tab. This tab has a button to replace the bootloader. Select your hard drive and click Burn. Next, we perform the same actions as described above in the universal virus sniffer, of course, selecting the windows directory and rejoice.

Download the Universal virus sniffer program for free http://dsrt.dyndns.org:8888/uvs.htm