KillDisk-Dimens Ransomware

KillDisk-Dimens Ransomware is a rather unusual ransomware application. The main difference between file-encrypting malicious programs we usually encounter and this infection is that it does not encipher any data or ask victims to purchase decryption tools by paying a ransom. Instead, the malicious program enumerates user’s files and then not only damages them, but also makes the computer unbootable. Further, in the article, we will explain how KillDisk-Dimens Ransomware works in more detail and discuss what you could do to restore your data and fix the infected computer. At the end of the article, we will place manual deletion instructions showing how to eliminate the malware step by step too, although given the threat is dangerous it might be safer to use a reliable antimalware tool instead.

Our researchers say it is a new variant of a threat called KillDisk Ransomware and it acts a bit differently from its previous version. The earlier version of KillDisk-Dimens Ransomware was distributed via malicious Microsoft Excel documents that were sent to each victim via email. Therefore, it is entirely possible the newly created variant could also be distributed while using the same method. Provided, infected email attachments remains to be one of the most popular ways to spread threats like ransomware; we would advise you to be careful each time you receive a file from unknown senders. For safety reasons, it would be best to scan the suspicious attachment with a reliable antimalware tool first. On the other hand, if you do not think the attached data is actually important and are almost sure it might be malicious, you could just get rid of it by erasing the letter it came with.

Provided, the user launched the malicious program’s installer, KillDisk-Dimens Ransomware should settle in by creating files called dimens.exe and 0123456789 in the c:\windows directory. Afterward, the threat should start enumerating user’s data, except the one located in the following folders: WINNT, Users, Windows, Program Files, Program Files (x86), ProgramData, Recovery, $Recycle.Bin, System Volume Information, Windows.old, and PerfLogs. At first, the infection does not do anything to the data it detects. After locating targeted files, the threat is supposed to terminate particular system processes, such as csrss.exe, wininit.exe, winlogon.exe, and lsass.exe. As a consequence, the infected computer’s operating system should be forced to restart, or it might show the so-called BSOD (Blue Screen of Death) screen.

In any case, soon after the system restarts you should receive a message saying “Reboot and Select proper Boot device or insert Boot Media in selected Boot device and press a key.” At this point, the data KillDisk-Dimens Ransomware enumerated earlier gets damaged and cannot be opened. However, before realizing it, the user has to figure out how to fix the computer. Our researchers say to boot the system the user should insert a disc, a flash drive or anything else containing an operating system. This way you should be able to access the damaged files located on the computer. To fix them users could try various recovery tools. Then, you should place them on some removable hard drive or other safe places since once you eliminate the malware, you will most likely need to reinstall the operating system.

Users who seek to erase KillDisk-Dimens Ransomware have two options. The first one is to locate the data created by the malicious program and remove it manually. To help users complete this process faster, we have prepared step by step deletion instructions available at the end of this article. The second option is to install a reliable antimalware tool and scan the system with it. Then, you could get rid of all identified threats at the same time by just pressing a provided deletion button. As said in the last paragraph, to use the computer normally without Windows located on a flash drive or other storage the user may need to reinstall the operating system. Also, o keep the system clean and secure we would recommend installing a trustworthy antimalware tool as such a tool could stop KillDisk-Dimens Ransomware or threats alike from entering the system.

Eliminate KillDisk-Dimens Ransomware

1. Press Windows key+E.
2. Navigate to c:\Windows
3. Locate the following data:
   dimens.exe
   0123456789
4. Right-click these suspicious files separately and press Delete.
5. Exit File Explorer.
6. Empty Recycle bin.