windows pc been attacted by ransome virus

Hi! thanks for reaching out! I'm an Independent Advisor and a Microsoft user like you.

I know this is a really tough situation on your part. To the best of my knowledge and effort, I have compiled some steps below that you may try in order for you to log in and access your machine. Kindly perform them in sequence. My apologies for the long response. Hoping for the best results.

For the next few methods, we need to boot to Advanced Recovery Mode. Here are some ways on how to access the advanced recovery environment:

https://www.lifewire.com/how-to-access-advanced...

or you can try below:

a. Power on and off your computer three times.

b. On the third time, your computer will boot into the Advanced Recovery environment

c. You will know when you are in the Windows Recovery Environment if you see a blue Choose an Option screen or a blue Troubleshoot screen.

Now once you are in the Recovery Environment screen, proceed to the next methods.

Method 1: Enable Built-in Admin Account for Windows. It may not work if you have Windows 10 Home, but please give it a try.

1. Click Advanced Options
2. Click Troubleshoot
3. Click Advanced Options
4. Select the Command Prompt option to troubleshoot windows.
5. In command prompt type: net user administrator /active:yes
6. Press “Enter“. Restart then you will have a basic administrative account to use with no password

Method 2: If the above steps did not work, please try the steps below on how to manually create a new admin account without Logging in

1. Go Back to the Recovery Environment screen select Command Prompt
2. When you see a Command Prompt, type the following commands and press Enter after each command.

copy d:\windows\system32\sethc.exe d:\

copy /y d:\windows\system32\cmd.exe d:\windows\system32\sethc.exe

4. Once that's finished, restart the computer
5. After you see the logon screen, press the SHIFT key five times. The Command Prompt should open and you can run the following commands to create a new admin account.

Type the following commands and press Enter after each command. Make sure to replace the value of {user_name}.

net user {user_name} /add

(Ex. net user joe /add)

net localgroup administrators {user_name} /add

(Ex. net localgroup administrators joe /add)

6. Reboot and you can then log in to your Windows computer with the new admin account.

NOTE: Once you are back to your desktop, you can also create a new admin account or grant an account administrator rights if needed.

See the article below:

https://support.microsoft.com/en-us/help/402692...

Method 3: Please watch and make sure to follow the steps carefully in this video tutorial, let's see if this would work in your favor. Many users have been helped by this.

https://www.youtube.com/watch?v=NW00gdvSYoU

Kindly read through this article. Protect your PC from ransomware:

https://support.microsoft.com/en-us/windows/pro...

If you are able to successfully log in again to your machine, you may try to remove the virus, go to a working computer, aside from Windows Defender, you may also try to download and install the Microsoft Safety Scanner from the link below:

https://docs.microsoft.com/en-us/windows/securi...

Please download also the Windows Malicious Software Removal Tool if you haven't yet.

Go to the link below:

https://www.microsoft.com/en-us/download/detail...

There is also a free version of Malwarebytes.

Download the free version from this link

https://www.malwarebytes.com/

IMPORTANT: Once you have the applications installed please make a full scan of your system using the applications mentioned, you may remove this Malwarebytes if you wish once you are done using it.

You may also try to boot into Safe Mode and perform the virus scans there. See the article below for steps on starting in safe mode.

https://support.microsoft.com/en-us/help/12376/...

Additionally, you may download other 3rd party malware removal software, I would leave that option to you as I cannot guarantee if this would help or cause further issues on your computer.

If the issue still remains then as a final option, a clean install of windows is needed. Do note that this will wipe everything from your computer including all your 3rd party applications and personal files. See the articles below:

How to: Perform a Clean Install or Reinstall of Windows 10

https://answers.microsoft.com/en-us/insider/for...

Start fresh with a clean installation of Windows 10

https://www.microsoft.com/en-us/software-downlo...

If you find the suggestions to have worked for you, please mark it as helpful. Feedback definitely helps us all. Let's hope for the best. Stay safe!

______________________________________________

Standard Disclaimer: There are links to non-Microsoft websites. The pages appear to be providing accurate, safe information. Watch out for ads on the sites that may advertise products frequently classified as a PUP (Potentially Unwanted Products). Thoroughly research any product advertised on the sites before you decide to download and install it.

That's a new variant of STOP ransomware.

Please read/follow the advices:

• https://support.emsisoft.com/topic/29386-first-steps-when-dealing-with-ransomware/
• https://www.bleepingcomputer.com/forums/t/671473/stop-ransomware-stop-puma-djvu-promo-drume-help-support-topic/#entry4442422
• About the STOP/Djvu Decrypter

Also see:

• Best Defensive Strategy against ransomware (crypto malware)
• Decryption vs Recovery of Ransomware
• Should you pay the ransom? - Reporting Ransomware
• https://www.bleepingcomputer.com/forums/t/691026/can-antivirus-software-remove-ransomware-from-my-infected-system/?p=4692721