Troubleshoot How to remove Petya Ransomware notification?

[Gnoba]

Briefly explain your current issue(s)

Notification on desktop

Steps taken to resolve, but have been unsuccessful

no

Hello. I have my Netbook with Windows 7 and Firefox browser. Today I start it and a strange notification appeared on my desktop: you became a victim of the Petya Ransomware. I tried to find some information about this with my phone and it seems to be a virus according to: Petya ransomware: how to decrypt and remove virus – Nabz Software . I tried some steps to remove it but without any result. How can I delete it now? May be I need some special tool? Thank you

 

[BoraMurdar]

Hello and welcome to MT

Please read this preparation guide Preparation Guide Before Requesting Malware Removal Help an then open a new thread here Malware Removal Assistance

To be honest, don't be too optimistic about decryption of your data, malware could be deleted from the system by the way

 

[OaksLabs]

While it's not confirmed, it looks like Petya uses an XOR "encryption" in it's first stage which is the same on each PC, and thus it might be possible to decrypt the data if it is caught at this stage.

Research lab article (German) : Petya: Den Erpressungs-Trojaner stoppen, bevor er die Festplatten verschlüsselt

ArsTechnica news article (English): New ransomware installs in boot record, encrypts hard disk [Updated]