DirtyDecrypt.exe file locking ransomware virus locks files. This virus appears to locking specific files. That includes photos, pdf files, excel, and other financial data. It does not lock all files. But very specific to files that recently been used or modified. When user tries to open file or PDF file DirtyDecrypt.exe locks that files and shows it is been encrypted. It shows following message on screen:

File is encrypted
This file can be decrypted using the program DirtyDecrypt.exe
Press CTRL+ALT+D to run DirtyDecrypt.exe
If DirtyDecrypt.exe not opened сheck the paths:
C:\Program Files\Dirty\DirtyDecrypt.exe
C:\Documents and Settings\[USERNAME]\Local Settings\Application Data\Dirty\DirtyDecrypt.exe
C:\Program Files (x86)\Dirty\DirtyDecrypt.exe
C:\Users\[USERNAME]\AppData\Roaming\Dirty\DirtyDecrypt.exe
C:\Documents and Settings\[USERNAME]\Application Data\Dirty\DirtyDecrypt.exe

It asks for $100 or 100 Euro to decrypt those files and get rid of that virus. This is new type of ransomware. Previously we have seen viruses where it locks screen and user have to buy MoneyPak or Ukash. But DirtyDecrypt.exe file locking ransomware virus is newer version or improved version of threat. Most antivirus cannot detect DirtyDecrypt.exe file. This exe also encrypts files and folder. It can load Rootkit to computer browser and causes headache for computer users. Most likely DirtyDecrypt.exe file locking ransomware virus removes all restored point and known good configuration. Some command file shows up on screen asking you to run. But do not run this program. To remove DirtyDecrypt.exe file locking ransomware virus please follow this guide. For some reason if you cannot decrypt your files please get in touch with our tech experts.

How to remove DirtyDecrypt.exe file locking ransomware virus (Steps):

Need Quick solution to get rid DirtyDecrypt.exe file locking ransomware virus? Click here for solution for DirtyDecrypt.exe file locking ransomware virus

Step 1:Print out these instructions as you will need to shut down the computer in next step. Need help call us at: 800-518-8533

Step 2:Now power down the DirtyDecrypt.exe file locking ransomware virus infected computer and wait for 30 Seconds before you turn on.

Step 3:Now please turn ON the computer and immediately keep hitting F8 until you see WINDOWS ADVANCED OPTIONS MENU as shown below.
Windows F8 Key

Step 4:In the WINDOWS ADVANCED OPTIONS MENU, go down to the SAFE MODE WITH NETWORKING using the arrow keys on the board. Then press ENTER on the keyboard. This will take your computer to Safe mode. Safe Mode will cause the display and desktop icons to appear changed. This is normal. No need to Panic as it is due to DirtyDecrypt.exe file locking ransomware virus.
Safe mode Option

Step 5:This, DirtyDecrypt.exe file locking ransomware virus, infection may change computer windows settings to use a proxy server that will not allow you to browse any pages on the Internet with Internet Explorer. We will first need to fix this as we will need to download malware removal utilities. They are safe and very reputed in Computer Industry. Now hold down the WINDOWS key and then press the R key.
DirtyDecrypt.exe file locking ransomware virus- Run command Prompt

Step 6:The RUN dialog box will appear. Type iexplore.exe In the RUN dialog and click OK button.
Run command Prompt

Step 7:You will see Internet Explorer. On the top navigation click TOOLS then under the sub-menu of TOOLS choose INTERNET OPTIONS as shown below.
IE Option

Step 8: Now find the CONNECTIONS tab within the INTERNET OPTIONS dialog box and click on it. Then click the LAN SETTINGS button.
DirtyDecrypt.exe file locking ransomware virus- LAN settings

Step 9:If there is a check-mark in the box named “Use a proxy server for your LAN”, under the PROXY SERVER section, then unchecked the box. If there is not a check mark located in the box then you can skip this step and move on to next step.
proxy

Step 10:Now hit the OK button to close the LOCAL AREA NETWORK dialog box. Then press the OK button to close the INTERNET OPTIONS dialog box.

Need help for removing with DirtyDecrypt.exe file locking ransomware virus infection then call us at 800-518-8533 or chat with our experts.

Step 11Now we must end all the processes that belong to DirtyDecrypt.exe file locking ransomware virus so that it does not interfere with your ability clear your computer. Inspector-[rnd char].exe and Protector-[rnd char].exe are the processed that needs to be stopped. To do this we need to download Rkill, developed by Bleepingcomputer to help stop the computer process of DirtyDecrypt.exe file locking ransomware virus. Now please hold down the WINDOWS key and the R key simultaneously to open RUN dialog box.
Run command Prompt

Step 12Now type “iexplore.exe http://www.fixpcyourself.com/rkill.com” and hit the OK button.
Rkill

Step 13:Save the Rkill.exe on your desktop. Double-click the Rkill icon and run Rkill.exe. You will see a black MS DOS dialog box. Now it will kill all the processes of DirtyDecrypt.exe file locking ransomware virus. It will take several minute before a Notepad file containing log information on what Rkill found will open. You may review it and close notepad file.

Step 14:Now you are ready to removal all the infection related to DirtyDecrypt.exe file locking ransomware virus. For that you need to use Malwarebytes software. It is a very popular malware and spyware removal application. Now please hold down the WINDOWS key and the R key simultaneously to open RUN dialog box. Type “iexplore.exe http://www.fixpcyourself.com/mbam.exe” and hit the OK button.
Malwarebytes

Need help for removing with DirtyDecrypt.exe file locking ransomware virus infection then call us at 800-518-8533 or chat with our experts.

Step 15:Save the mbam.exe on your desktop. Double click the Malwarebytes icon and run mbam.exe. Now the SELECT SETUP LANGUAGE dialog box will appear. Select your preferred language and hit press OK button.
Malwarebytes Language

Step 16:The Malwarebytes SETUP WIZARD will show blow screen Hit the NEXT button to continue.
Malwarebytes Wizard

Step 17:Now the LICENSE AGREEMENT screen will appear as shown. Accept the agreement and hit NEXT button.
Malwarebytes License Agreement

Step 18:Now the Information screen will appear. Click on next button and continue following the steps.
DirtyDecrypt.exe file locking ransomware virus- Malwarebytes Information

Step 19:SELECT DESTINATION LOCATION screen will appear now. You can choose the location where Malwarebytes can be installed. We recommend choosing the default location as shown then click NEXT button.
DirtyDecrypt.exe file locking ransomware virus - Malwarebytes Install path

Step 20:Now the SELECT START MENU FOLDER screen will appear. Let the default as it is and click NEXT button.
removal guide for DirtyDecrypt.exe file locking ransomware virus- Malwarebytes Folder

Step 21:Now the SELECT ADDITIONAL TASKS screen will appear. If you want a Desktop Icon or Quick Launch icon then check appropriate boxes.
shortcut

Step 22:READY TO INSTALL screen will come next. Hit the INSTALL button to install Malwarebytes.
DirtyDecrypt.exe file locking ransomware virus - Ready to Install

Step 23:In this step let the UPDATE and LAUNCH checked as it is to update the application with latest malware definition to capture all the malwares then click FINISH button.
Updates

Step 24:Once update is done then Scanner screen will launch. Make sure to select PERFORM FULL SCAN is selected to clean up DirtyDecrypt.exe file locking ransomware virus infection. Click on SCAN button to start the scan.
full scan

Step 25:Now choose the local drives that you want to scan from the dialog box and click SCAN button.
DirtyDecrypt.exe file locking ransomware virus - drive

Step 26:Be patient as the scan will take several minutes before it cleans up DirtyDecrypt.exe file locking ransomware virus infection. Once the scan is finished, a message box saying the scan is complete will appear. Click OK button to close the box then click SHOW RESULTS button.
drive selection

Step 27:From results dialog box choose REMOVE SELECTED button to remove all the infections found. Malwarebytes will also delete all of the files and registry keys affected by DirtyDecrypt.exe file locking ransomware virus and add them to the quarantine.
DirtyDecrypt.exe file locking ransomware virus- quarantine

Step 28:Malwarebytes may require you to reboot the PC to complete the DirtyDecrypt.exe file locking ransomware virus (Removal Steps). After completions reboot your computer Malwarebytes will be launched, please follow the instructions on the screen and continue the removal process. Once everything is clean out a log will be open created by Malwarebytes. Please reviewed it and closed it. Now your computer should be free of DirtyDecrypt.exe file locking ransomware virus. Enjoy.
DirtyDecrypt.exe file locking ransomware virus- Complete

Need Quick solution to get rid DirtyDecrypt.exe file locking ransomware virus? Click here for solution for DirtyDecrypt.exe file locking ransomware virus Or Call our experts toll-free at 800-518-8533

Technical Details of DirtyDecrypt.exe file locking ransomware virus files :
You may need to delete following DirtyDecrypt.exe file locking ransomware virus files :

%appdata%\[random]\[random].exe
C:\windows\System32\drivers\[*****Rand*****].sys
C:\Program Files\Dirty\DirtyDecrypt.exe
C:\Program Files (x86)\Dirty\DirtyDecrypt.exe
C:\Users\[USERNAME]\AppData\Roaming\Dirty\DirtyDecrypt.exe
C:\Documents and Settings\[USERNAME]\Application Data\Dirty\DirtyDecrypt.exe
C:\Documents and Settings\[USERNAME]\Local Settings\Application Data\Dirty\DirtyDecrypt.exe
%ProgramFilesX86%\DirtyDecrypt.exe file locking ransomware virus
%appdata %\Local\[*****Rand*****]
%appdata %\Roaming\Microsoft\Windows\Templates\[*****Rand*****]
%appdata%\[random].exe
%Programdata%\[*****Rand*****]
%AppData%\Microsoft\Internet Explorer\Quick Launch\DirtyDecrypt.exe.lnk
%Desktopdir%\DirtyDecrypt.exe.lnk
%CommonAppData%\[rnd_0].exe
%Temp%\[*****Rand*****]. bat
%LocalAppData%\DirtyDecrypt.exe file locking ransomware virus\uninstall\DirtyDecrypt.exe file locking ransomware virus.lnk

Also please check following registry file infected by DirtyDecrypt.exe file locking ransomware virus:

HKCU\Software\AppDataLow\Software\[*****Rand*****]
HKCU\Software\[*****Rand*****]
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\[random].exe” /START “%Program Files%\Mozilla Firefox\firefox.exe” -safe-mode’
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\[random].exe” /START “%Program Files%\[*****Rand*****]
HKCU\Software\AppDataLow\Software\DirtyDecrypt.exe file locking ransomware virus\
HKEY_CLASSES_ROOT\exefile\shell\open\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\[random].exe” /START “%1? %*’
HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\shell = “explorer.exe,%AppData%\[*****Rand*****].dat”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run HKEY_CURRENT_USER\Software\Microsoft\[Random]
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegedit” = 0
HKEY_CLASSES_ROOT\.exe\shell\open\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\[random].exe” /START “%1? %*’

How to remove DirtyDecrypt.exe file locking ransomware virus (how to remove it using YouTube Video):

Cannot How to remove DirtyDecrypt.exe file locking ransomware virus and need help? Please call our team toll-free at 800-518-8533.

Try McAfee to remove DirtyDecrypt.exe file locking ransomware virus removal tool.
Antivirus Protection to How to remove DirtyDecrypt.exe file locking ransomware virus (Unlock PC)

How to remove DirtyDecrypt.exe file locking ransomware virus and Safety Tips:

1. Run the malwarebytes using these steps.
2. Make sure your computer is up to date with windows updates.
3. Make sure Windows Firewall is enable.
4. Install reputable and commercial virus removal tool .
5. Keep the Antivirus active and current
6. Call tech support help line: 1-800-518-8533 if you are unable remove this infection or have any question or concern.

DirtyDecrypt.exe file locking ransomware virus Symptoms:

DirtyDecrypt.exe locks almost all files and folders
It downloads without user’s permission
To decrypted files DirtyDecrypt.exe file locking ransomware virus asks for $100 or 100 Euro

6 Thoughts on “How to remove DirtyDecrypt.exe file locking ransomware virus

  1. Steve Evans on August 11, 2013 at 7:23 pm said:

    It’s not a perfect solution, but I’ve managed to limit the amount of lost data by right clicking on an affected file or folder and then clicking “restore previous versions”. You can then copy the last version your computer saved and then paste and overwrite the corrupt file.

    As I say, not perfect but if available on your system (mine is Windows 7) it should, hopefully, help you restore an awful lot of data.

  2. Frank on July 15, 2013 at 8:09 pm said:

    My computer was infected with the Dirtydecrypt virus/ransomware. Numerous files are locked. While I have found significant amounts of information on how to remove the virus, I have found nothing about how to unlock the files. I have removed the virus, in other words there are no files or registry entries that reflect the virus anymore, but the files are still locked. Does anyone know how to unlock the encrypted files? I have run every type of cleaner, malware, antivirus, etc. that is available and have done so in safe mode. All say system is clean, but files are still locked. Any help would be greatly appreciated.

    • David Paul on July 17, 2013 at 3:13 am said:

      I am in the same boat. Removed the virus but almost all my files are still locked. If you find a solution please email me.

  3. bob Krysa on July 5, 2013 at 10:35 am said:

    The above procedure to remove DirtyDecrypt.exe did work. The Malware bytes did find all problems after full scan

  4. Michael on May 27, 2013 at 10:11 pm said:

    Dirtydecrypt virus locked all my excel files. All these file contains very important data. I was much worried about fixing this issue. But after google this issue many a times, atlast i found this article which helped my to get rid of this trouble. i got accurate result.

Leave a Reply

Your email address will not be published. Required fields are marked *

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>

Current ye@r *

Post Navigation

  • Facebook
  • Google+