Home & Home Office Support

Downloading and using Trend Micro™ Anti-Ransomware Tool

Ransomware is a type of malware that prevents or limits users from accessing their system. This type of malware forces its victims to pay the ransom through certain methods in order to grant access to their systems, or to get their data back. There are two (2) types of Ransomware: Lock Screen which limits the users from accessing the computer and Crypto (File Encryption) which encrypts files to limit users from access their files. Anti-Ransomware tool is designed to eliminate Lock Screen ransomware from your infected PC in two different scenarios:
  • Scenario 1: Lock Screen ransomware is blocking “normal mode”, but “safe mode” with networking is still accessible.
  • Scenario 2: Lock Screen ransomware is blocking both “normal mode” and “safe mode” with networking.
[ Expand All ]


Download the Trend Micro™ Anti-Ransomware Tool (scenario 1)

Scenario 1: Lock Screen Ransomware is blocking normal mode but Safe Mode with networking is still accessible
  1. Go to Safe mode with Networking.
  2. Download the AntiRansomware Tool and save it to your desktop.
  3. Double-click AR20_build14.exe to run it.
    Note: This tool can be installed on Safe Mode with Networking. Also through USB on Regular Safe Mode and Safe Mode with Command Prompt.
  4. Click Install to start extracting the AntiRansomware tool.
    Note: For Windows XP users, make sure to uncheck Protect my computer and data from unauthorized program activity before running the tool. 
    Uncheck "Protect my computer and data from unauthorized program activity"
  5. Once AntiRansomware has been installed, restart your computer and go to normal mode where the screen is locked by the ransomware.
  6. Trigger the AntiRansomeware Tool by pressing the following keys: Left CTRL + ALT + T + I.
    Note: The key press should be done on the client’s keyboard and not from support side (Remote Control/LMI). In some cases, the key press may need to be done more than once.
  7. The screen lock should terminate and the AntiRansomware screen should appear.
    AntiRansomware Tool
  8. Click Scan to scan the computer for any ransomware files.
  9. Review and select the threats that you have verified to be malicious then press Clean.
  10. Click Reboot to restart the computer.


Download the Trend Micro™ Anti-Ransomware Tool (scenario 2)

Scenario 2: Lock Screen Ransomware is blocking both normal mode and safe mode with networking
  1. On a working or non-infected computer, download Anti-Ransomware Tool (USB) and save it to your desktop.
  2. Extract the contents of AR4USB_build11.rar.
  3. Insert a USB drive.
  4. Double-click ARUSBMaker.exe to install the package.
  5. Click Yes when the User Account Control window appears.
  6. Select the USB drive then click Create.
    Important: This will erase all the contents of the USB drive.
    Select removable device
  7. Insert the USB drive on the infected computer.
  8. Boot the infected computer from the USB drive.
    If the USB drive is detected, you will see this text on your screen while the computer is restarting:
    USB is detected
    If the USB drive is not detected, do any the following:
    • Insert the USB to another USB port and restart the computer.
    • Make sure that the USB is properly inserted.
    • Try using another USB.
  9. Login to the infected computer and wait for the AntiRansomware Tool to suspend the lock screen and open the console.
    Note: The tool will automatically initiate by itself. There is no key trigger implemented to call out the tool.
  10. Continue using the tool for troubleshooting.
    AntiRansomware Tool
  11. Click Scan.
  12. The scan results will be displayed. Click Fix Now.


Ransomware Protection banner
Video Tutorial

Applies To: Antivirus+ Security - 2015;Antivirus+ Security - 2016;Internet Security - 2015;Internet Security - 2016;Maximum Security - 2015;Maximum Security - 2016;Premium Security - 2015;Premium Security - 2016;Titanium AntiVirus + - All;Titanium Internet Security - All;Titanium Internet Security for Dell - All;Titanium Maximum Security - All;Titanium Premium Security - All;Titanium Smart Surfing for PC - All;

Last Updated: Jun. 20, 2016 12:37 AM (PST)
Solution ID: 1105975