How to get rid of ‘WannaCry Ransomware’ if you are attacked.

Published by: 0

If your system is hit by ‘ransomware – wannacry’, then your system will have a unneeded file by the name of TASKSCHE.EXE.

Here is How to Remove Remove TASKSCHE.EXE Ransomware virus if u install accidently

STEP 1: Check all shortcuts of your browsers on your desktop, taskbar and in the Start menu. Right click on your shortcut and change it’s properties.

You can see TASKSCHE.EXE at the end of shortcut target (command line). Remove it and save changes.

In addition, check this command line for fake browser’s trick.
For example, if a shortcut points to Google Chrome, it must have the path:
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe.
Fake browser may be: …\Appdata\Roaming\HPReyos\ReyosStarter3.exe.
Also the file name may be: “chromium.exe” instead of chrome.exe.

STEP 2: Investigate the list of installed programs and uninstall all unknown recently installed programs.
STEP 3: Open Task Manager and close all processes, related to TASKSCHE.EXE in their description. Discover the directories where such processes start. Search for random or strange file names.
STEP 4: Inspect the Windows services. Press Win+R, type in: services.msc and press OK.
Disable the services with random names or contains TASKSCHE.EXE in it’s name or description.

 

STEP 5: After that press Win+R, type in: taskschd.msc and press OK to open Windows Task Scheduler.
Remove TASKSCHE.EXE from scheduled task list.
Delete any task related to TASKSCHE.EXE. Disable unknown tasks with random names.

 

STEP 6: Clear the Windows registry from TASKSCHE.EXE virus.
Press Win+R, type in: regedit.exe and press OK.
Find and delete all keys/values contains TASKSCHE.EXE.

 

STEP 7: Remove TASKSCHE.EXE from Google Chrome.
STEP 8: Remove TASKSCHE.EXE from Internet Explorer.
STEP 9: Remove TASKSCHE.EXE from Mozilla Firefox.
STEP 10: And at the end, clear your basket, temporal files, browser’s cache.

 

But if you miss any of these steps and only one part of virus remains – it will come back again immediately or after reboot.

Do get back to us for best security solutions for your company.

Leave a Reply

Your email address will not be published. Required fields are marked *