Dorkbot ransomware worm Information:

Dorkbot ransomware worm is recently attacking lots of Facebook and Skype users. One obvious symptom of Dorkbot ransomware worm infection is that your computer is locked and you can not use it. Usually, users will see a message from their contact saying “lol is this your new profile pic?” with a link, Dorkbot ransomware worm then intrudes in the computer when the link is clicked on. Once residing in the computer, Dorkbot ransomware worm immediately connects the PC to botnet and completely locks the whole system. It tells users to pay 200 dollars to unlock the computer, or it will delete all files in the machine. In fact, it’s also known as Worm/Dorkbot.I.385. Many computer users are scared and pay the money. To fix your problem, you should completely remove Dorkbot ransomware worm, otherwise it will rip you off again and again.

Before you proceed the removal of Dorkbot ransomware worm virus, please

1. Restart your system and keep pressing F8 key into Safe Mode with Networking
2. Click Start Menu and find run
3. Type in msconfig and hit OK
4. Try to disable some suspicious processes at Startup tab.
5. Then go through the following removal steps.

Dorkbot ransomware worm Manual Removal

Note: If you are not proficient with computer, it’s advised that you backup your system before manually removing Dorkbot ransomware worm virus. And double check the files that you are going to delete, or your computer can’t work for missing some files.

Step 1: Delete the following registery files:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\”Shell” = “[random].exe”


Step 2: Delete the following files:


%Documents and Settings%\[UserName]\Application Data\[random].exe

%Documents and Settings%\[UserName]\Desktop\[random].lnk

Please, note that manual removal of Dorkbot ransomware worm virus is a procedure with high complexity and can not always guarantee a full removal of the virus, due to the fact that some objects can stay hidden or may become reanimated automatically after incomplete removal. What’s more, lack of the required skills and even the slightest deviation from the removal guides may result in irreparable system corruption. That’s the reason it’s strongly adviced automatic removal of Dorkbot ransomware worm virus, which will save your time and avoid any system corruptions and ensure the desired result.

Automatic Dorkbot ransomware worm virus Removal:

Step 2: Click & download the trusted Dorkbot ransomware worm virus Automatic Removal Utility.

Tips: In case you can’t install the removal utility, please download this correction script, unzip it and then double click to execute it. It can correct the system settings that the spyware has distorted.

Step 6: Perform a Full Scan of your system to detect Dorkbot ransomware worm virus or other malware.


Published by Cruze Albert