Meka ransomware is the latest variant of popular crypto-virus named STOP. It declines victim from accessing files and declaring that purchasing for decryption tool is the only way to recover infected data.
The article provides detailed instructions to remove Meka virus. It also contains information on what Meka ransomware is all about. Just keep on reading to know more concerning this computer infection.
What is Meka Virus?
Meka virus is a recent variant of popular ransomware called STOP. The effect is very evident once this bug infects the system. The victim can no longer open and use all files stored on the affected computer. Meka virus encrypts data using a strong encryption algorithm and renames each file by affixing .meka extension.
After encrypting images, videos, audio files, documents, and other personal data, it drops a ransom note on the victim’s desktop. Meka virus states that your files were encrypted. To restore it, a decryption tool is needed. Malware author obliges the victim to pay $980 in exchange for the private key and decrypt software. If you contact them within 72 hours, the ransom price will cut down to $490.
This kind of computer virus attempts to collect money from its victims. Meka ransomware declares that the only solution to restore files is by purchasing for decrypt software. Without paying the ransom, all infected data will remain unusable.
What is the best thing to do when Meka Virus attacks the computer system?
When Meka virus hits the computer, it is very important to remove the infection right away. This computer bug may cause additional damages or hold access to more files if you let it stay in your system.
We have to remind you that paying for the decryption tool is not a solution to recover your files. This is a total waste of money. The best way to restore files is through backup. In a case like this, to have a data backup is very rewarding. Thus, we highly suggest backing up all valuable files habitually. Be it through a cloud or using external hard drives with enough capacity.
How to prevent the Meka virus from installing on a computer?
Meka virus is often delivered through spam email attachments and via bundled software. Hence, to keep your system away from this online attack, you have to be more vigilant when opening an email attachment, especially from a suspicious or unknown sender. When installing freeware or shareware, see to it that you select the Advanced or Custom settings. This way, users can choose what particular program to be added to the computer and what application should be left behind.
Meka Removal Procedures
Systematic procedures to get rid of the threat are presented on this section. Make sure to scan the computer with suggested tools and scanners.
Step 1 : Reboot Windows Into Safe Mode With Networking.
First thing you should do is reboot the computer in Safe Mode with Networking to avoid Meka from loading at start-up.
NOTE: You will need to PRINT or BOOKMARK this procedure, as we have to restart the computer during the removal process.
1 Remove all media such as Memory Card, cd, dvd, and USB devices. Then, restart the computer.
2 Boot Windows computer into SafeMode with Networking.
Instructions for Windows XP, Windows Vista, and Windows 7 system
a) Before Windows begins to load, press F8 on your keyboard.
b) It will display the Advanced Boot Options menu. Select Safe Mode with Networking.
Procedures for Windows 8 and Windows 10
a) Before Windows begins to load, press Shift and F8 on your keyboard.
b) On Recovery interface, click on 'See advanced repair options'.
c) Next, click on Troubleshoot option.
d) Then, select Advanced options from the list.
e) Lastly, please choose Windows Startup Settings and click on Restart. When Windows restarts, you will be send to a familiar Advanced Boot Options screen.
f) Select Safe Mode with Networking from the selections menu.
Step 2 : Detect and Remove Meka with Anti-malware Tool
3 Once the computer boots into Safe Mode with Networking, download the Removal Tool and save it on your Desktop or any location on your PC.
4 When finished downloading, locate and double-click on the file to install the application. Windows' User Account Control will prompt at this point, please click Yes to continue installing the program.
5 Follow the prompts and install with default configuration.
6 Before the installation completes, check prompts that software will run and update on itself.
7 Click Finish. Program will run automatically and you will be prompted to update the program before doing a scan. Please download needed update.
8 When finished updating, the tool will run. Select Perform full scan on main screen to check your computer thoroughly.
9 Scanning may take a while. When done, click on Show Results.
10 Make sure that all detected threats are checked, click on Remove Selected. This will delete all files and registry entries that belongs to Meka.
11 Finally, restart your computer.
Note: If Meka prevents mbam-setup.exe from downloading. Download the software from another computer. Renaming it to something like 'anything.exe' can help elude the malware.
Step 3 : Additional Anti-virus and Anti-rootkit Scans
Ensure that no more files of Meka are left inside the computer
12 Click on the button below to download Norton Power Eraser from official web site. Save it to your desktop or any location of your choice.
13 Once the file is downloaded, navigate its location and double-click on the icon (NPE.exe) to launch the program.
14 Norton Power Eraser will run. If it prompts for End User License Agreement, please click on Accept.
15 On NPE main window, click on Advanced. We will attempt to remove Meka components without restarting the computer.
16 On next window, select System Scan and click on Scan now to perform standard scan on your computer.
17 NPE will proceed with the scan. It will search for Trojans, viruses, and malware like Meka. This may take some time, depending on the number of files currently stored on the computer.
18 When scan is complete. All detected risks are listed. Remove them and restart Windows if necessary.
Alternative Removal Procedure for Meka
Use Windows System Restore to return Windows to previous state
During an infection, Meka drops various files and registry entries. The threat intentionally hides system files by setting options in the registry. With these rigid changes, the best solution is to return Windows to previous working state is through System Restore.
To verify if System Restore is active on your computer, please follow the instructions below to access this feature.
Access System Restore on Windows XP, Windows Vista, and Windows 7
a) Go to Start Menu, then under 'Run' or 'Search Program and Files' field, type rstrui.
b) Then, press Enter on the keyboard to open System Restore Settings.
Open System Restore on Windows 8 and Windows 10
a) Hover your mouse cursor to the lower left corner of the screen and wait for the Start icon to appear.
b) Right-click on the icon and select Run from the list. This will open a Run dialog box.
c) Type rstrui on the 'Open' field and click on OK to initiate the command.
If previous restore point is saved, you may proceed with Windows System Restore. Click here to see the full procedure.