“…We don’t know how the virus got in. The backup files as said are on external USB drive that has been also encrypted. Also the shadow copies were deleted

The files have been left in this format for example

fabio.txt

fabio.txt.id-5350645238470437-Johnmen.24@aol.com…”

If you encountered the same problem with the user above, you might have a ransowmare in your computer. Please read this post to learn how to get rid of it and get back your files.

What is Johnmen.24@aol.com?

Johnmen.24@aol.com is a crypto virus that has been included in ransomware category. This kind of ransomware can encrypt most of the files in your computer, such as:

.txt, .mp3, .flv, .kdc, .dcr, .cr2, .crw, .bay, .sr2, .srf, .arw, .3fr,
 .dng, .jpe, .jpg, .cdr, .indd, .ai, .eps, .pdf, .pdd, .psd, .dbf, .mdf,
 .wb2, .rtf, .wpd, .dxg, .xf, .dwg, .pst, .accdb, .mdb, .pptm, .pptx, .ppt,
 .xlk, .xlsb, .xlsm, .xlsx, .xls, .wps, .docm, .docx, .doc, .odb, .odc, .odm, .odp, .ods, .odt

If so, you won’t be able to access the files and your work and study will be seriously disturbed. To decrypt files, you are required to get the private key by paying the ransom. And if you don’t pay the ransom, the attackers will threat to destroy your files. However, you are not suggested to do that. Otherwise, your bank account details and other important data will be stolen. As a results, you will suffer from great financial loss..

This ransomware usually comes stealthily because it is often promoted via hacked web sites, spam emails, free software downloads, and peer to peer share files. As long as you use the computer, you will inescapably visit some compromised sites or download something. Therefore, you are recommended to install a reputable anti-malware software to secure your computer.

How to Remove Crypro Virus Johnmen.24@aol.com?

Solution 1: Manually Delete Crypro Virus Johnmen24@aol.com (or Contact Tee Support Expert)
Solution 2: Remove Crypro Virus johnmen24@aol.com by Video Reference
Solution 3: Automatically Remove Crypro Virus johnmen24@aol.com with Recommended Tool (Click to Download SpyHunter)

Solution 1: Manually Delete Crypro Virus Johnmen24@aol.com

Step 1: Restart the computer and put it in Safe mode with Networking.

Restart the computer and start hitting F8 key repeatedly when PC is booting up again; if successfully, Safe mode options will show up on the screen for you to select. Please use arrow keys to highlight Safe mode with Networking option and hit enter key. System will be loading files into this mode afterward.

safe-mode-with-networking

Step 2: Show hidden files and folders.

1. Start screen >>Search Folder Options

folder-option

2. The Folder Options box pops up >> Check Show hidden files, folders, or drives >> Apply

folder-options

Step 3: End all the harmful Processes of this tricky ransomware:

Press Ctrl+Alt+Delete or Ctrl+Shift+Esc >> Click Task Manager >> Right click all the harmful Processes >> End task

task manager processes

Note: If you want to check the background processes, please click More details. Click the processes you want to end, and click End Process.

Step 4: Search the infected PC to find out all the malicious files as below and then delete all of them:

%Temp%\Johnmen.24@aol.com.exe
%Appdata%\Johnmen.24@aol.com.reg 
%Homepath%\[Random].bat
%Allusersprofile%\[Random].ini
%Localappdata%\[Random].dll
%Windir%\SysWOW64\[Random].dll
%Systemroot%\Johnmen.24@aol.com\[Random].exe
%CommonProgramFiles%\Johnmen.24@aol.com.ini
%Homedrive%\Johnmen.24@aol.com\[Random].exe
%Windir%\System32\[Random].dll
%Systemroot%\System32\[Random].dll
%Windir%\System32\drivers\[Random].sys

Step 5: Remove vicious registry entries of the virus:

1.Press Win+R to activate the Run window >> Type “regedit” or “regedit.exe” to the search bar >> Click “Ok” if you are asked if you want to open Registry Editor

run

2.Find out all the harmful keys, right click them and Delete.

registry editor

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “.exe”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop “NoChangingWallPaper” = ‘1′
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments “SaveZoneInformation” = ‘1′
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system “DisableTaskMgr” = ‘1′
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “CheckExeSignatures” = ‘no’
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main “Use FormSuggest” = ‘yes’
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced “Hidden” =  ‘0′
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced “ShowSuperHidden” = 0′
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run: [avsdsvc] %CommonAppData%\ifdstore\security_defender.exe /min
HKEY_CURRENT_USER\Software\Microsoft\Installer\Products\random

Solution 2: Remove Crypro Virus johnmen24@aol.com by Video Reference

Follow the Similar video to remove Johnmen.24@aol.com.

(In case you cannot remove Johnmen.24@aol.com through this video, you are recommended to Download and Install Powerful Removal Tool to fix your PC.)

Solution 3: Automatically Remove Crypro Virus johnmen24@aol.com with Recommended Tool

SpyHunter is a powerful, real-time anti-spyware application that designed to assist the average computer user in protecting their PC from malicious threats like worms, Trojans, rootkits, rogues, dialers, spyware,etc. It is important to note that SpyHunter removal tool works well and should run alongside existing security programs without any conflicts.

A: At first, boot your computer into Safe Mode with Networking.

To perform this procedure, please restart your computer and keep pressing F8 key until Windows Advanced Options menu shows up, then using arrow key to select “Safe Mode with Networking” from the list and press ENTER to get into that mode.

Safe Mode with Networking

B: Follow the below guide to continue.

Step 1: Click the icon to download SpyHunter removal tool

download Spyhunter1

Step 2: After the installation, run SpyHunter and click “Malware Scan” button to have a full or quick scan on your PC.

Run

SNext

spyhunter-installed

Step 3: SpyHunter will start scanning your system automatically right after the installation has been completed successfully.

1

Step 4: Select the detect malicious files after your scanning and click “Remove” button to clean up all viruses and invaders.

remove

Additinaol Tips: Optimize the infected computer with RegCure Pro.

RegCure Pro is packed with the tools you need to boost your PC’s speed and performance. Featuring an intuitive interface and easy-to-use work flow, RegCure Pro scans common problem areas – and quickly and safely fixes them. As well, it has several tools and features to address other performance and computing issues.

Step 1. Click the icon to download RegCure Pro

Step 2. Double-click on the RegCure Pro and run its profile

Step 3 . Click Next and finish the installation process

Step 4. RegCure Pro will open automatically on your screen

RegCure Pro

Step 5. Scan your computer for errors

RegCure Pro2

Step 6. After scaning, choosse the items you wnat to clean and fix.

Note: Manually removing Johnmen.24@aol.com ranomware is a complex and tough task only suggested to advanced computer users. If you are not so professional on computer and cannot solve the problem manually, you are recommended to using SpyHunter Anti-Malware to remove malware for you easily and quickly and block the malware to protect your computer from being attacked

VN:F [1.9.18_1163]
Rating: 0.0/10 (0 votes cast)

Final Recommendation:

Still having trouble on dealing with tricky virus infections, stubborn errors, unwanted programs or any other headachy computer problems? Do not hesitate anymore! What you definitely need is a more specific, accurate and customized solution toward your specific issue in your specific computer system. Tee Support recommends to you an award-winning anti-malware tool that gives you the easiest and most effective automatic solutions.

Click Here to Download the Most Popular Anti-malware Now!