- Slow Computer
- System crashes
- Normal system programs crash immediatelly
- Connects to the internet without permission
- Installs itself without permissions
- Can't be uninstalled via Control Panel
Deos Ransomware is a recently found computer infection that can lock your computer’s screen and prevent you from using it altogether. However, the program claims to encrypt your files which is not true. Nevertheless, you have to remove it to ensure your computer’s security as it has a function for file encryption that is not active in the current iteration. This program will run each time you start up your PC, so you will not be able to use it. We have tested Deos Ransomware and found a way to get around its lock screen. Consequently, you can delete it manually or install an anti-malware program to remove it for you.
Apparently, this program can infect your computer in a number of possible ways, but more on that later. If it manages to get onto your PC, it will first executes a command "shutdown -a" so that you would not close the program. Furthermore, once executed, the malware drops a file in the Startup folder to run it each time you boot up your PC. It locks the screen by placing a window on the desktop, and you cannot minimize or close it. The text on the window says that your files have been encrypted, but the good news that this program, at least for the time being, does not do that.
We have found that this program was written in the .NET Framework 4 programming language. Our in-depth analysis has revealed that this program features the Exclusive-OE Function (XOR) that can be used to encrypt your files. However, testing has shown that the current iteration does not do that. The ransomware simply does not execute XOR, so it does not encrypt any files which is good news if your PC has been infected by Deos Ransomware. Nevertheless, this program runs a check of %TEMP%, %USERPROFILE%\Videos, %USERPROFILE%\Pictures, %USERPROFILE%\Music, %USERPROFILE%\Documents, %APPDATA%, and %USERPROFILE%\Desktop directories and enumerates all files present in their folders. We have received reports that suggest that future iterations will be able to encrypt some file formats. Apparently, this program will be able to encrypt .txt, .html, .zip, and .rar.
In closing, Deos Ransomware is one nasty computer infection that is a bit tricky to get rid of but fear not because there is a simple way you can get rid of it. While this program does not allow you to use your PC, you can bypass it by booting your PC in Safe Mode. In this mode, only the most necessary programs are launched. Hence, this ransomware will also not be launched, so you will be able to go to its locations and delete its files or get an anti-malware program such as our featured SpyHunter antimalware program to remove it for you. Please check the instructions below for more information.
Boot your PC in Safe Mode with Networking
Windows 7 and Vista
Delete Deos Ransomware manually