- Open Task Manager. There are a number of ways you can do this:
- Right-click on an empty space on the taskbar and click Task Manager or Start Task Manager.
- Press Ctrl+Shift+Esc.
- Press Ctrl+Alt+Delete.
- In the list of Applications or Processes, click on the name of your web browser.
- Click End Task. If you are asked if you want to wait for the program to respond, click Close the program.
- In some workplaces, access to Task Manager may be restricted by your network administrator. Contact your IT department for help.
When you open your web browser again, you may be asked to restore your session. Do not restore your session or you may end up loading the ransomware again. See the question “How do I protect myself from ransomware” above for tips on preventing browser-based ransomware from running on your PC.
Remove Ransomware If your PC is locked
- In Windows 10
- In Windows 8.1
- In Windows 7
- In Windows Vista
- In Windows XP
When you’re in safe mode, try to run the Microsoft Safety Scanner.
- Download Windows Defender Offline
- See our advanced troubleshooting page for more help.
Steps you can take after your PC has been cleaned
Make sure your PC is protected with antimalware software. Microsoft has free security software that you can use:
- If you have Windows 10 or Windows 8.1, your PC comes with antimalware software: Windows Defender.
- If you’re using Windows 7 or Windows Vista, you should install antimalware software, such as Microsoft Security Essentials.
- You can update Microsoft security software on our updates page.
If you don’t want to use Windows Defender or Microsoft Security Essentials, you can download other security software from another company. Just make sure it is turned on all the time, fully updated, and provides real-time protection.