Stop Ransomware Before It Encrypts Your Data
**Testing Hitman Pro Alert Against Ransomware: A Comprehensive Walkthrough**
In this article, we will walk through a detailed testing process of **Hitman Pro Alert**, a cybersecurity tool designed to protect against ransomware and other malicious activities. The goal is to evaluate its effectiveness in intercepting and blocking ransomware attacks. The following sections detail the setup, testing process, observations, and conclusions drawn from the experiment.
---
### 1. **Introduction and Setup**
The experiment begins with an introduction to the purpose of testing Hitman Pro Alert against various ransomware samples. The objective is to determine whether this software can effectively block ransomware attacks and protect a system from encryption or data loss.
Before starting the tests, the system was prepared by disabling **Windows Defender** to prevent interference with the ransomware activities. This step ensures that all actions taken during the test are attributed solely to Hitman Pro Alert.
---
### 2. **Testing Ransomware Samples**
Several ransomware samples were tested, including:
- **Peter Red version**: A known ransomware variant.
- **CBT Locker**: Another popular ransomware strain.
- **Tesla Crypt**: A well-documented ransomware family.
- **CryptoLocker**: One of the most notorious ransomware programs.
Each ransomware sample was executed in a controlled environment to observe how Hitman Pro Alert responded. The software demonstrated varying degrees of success:
- **Peter Red version**: Blocked effectively, with a detailed alert provided about the intercepted file.
- **CBT Locker**: Initially seemed to bypass detection but eventually raised flags due to its activity on the system.
- **Tesla Crypt and CryptoLocker**: Showed mixed results, with some processes being terminated and others remaining active despite detection.
---
### 3. **Behavioral Observations**
During the testing process, several key observations were made:
1. **Process Termination**: In many cases, Hitman Pro Alert successfully terminated malicious processes before they could cause harm. For example, when attempting to execute Tesla Crypt, the software detected and blocked the ransomware, preventing it from encrypting files.
2. **File Detection and Blocking**: The tool flagged suspicious files in temporary folders, indicating its ability to identify and neutralize threats even if they managed to bypass initial detection.
3. **Performance Impact**: The software demonstrated consistent performance, with minimal impact on system resources. However, during prolonged testing, the CPU usage spiked, likely due to increased scanning activity.
4. **False Positives**: A few legitimate processes were incorrectly flagged as malicious, highlighting a potential area for improvement in the software's detection mechanisms.
---
### 4. **Scan and Cleanup Process**
After executing multiple ransomware samples, a full system scan was performed using Hitman Pro Alert. The scan revealed several suspicious files and registry entries left behind by the ransomware attempts. These were successfully quarantined and removed during the cleanup process.
The results of the scan showed that while not all threats were immediately blocked, the software effectively contained and neutralized most malicious activities. This suggests that regular scans and system cleanups are crucial for maintaining optimal protection.
---
### 5. **Conclusion and Final Thoughts**
The testing process yielded mixed results. While Hitman Pro Alert demonstrated significant success in blocking certain ransomware samples, others managed to bypass detection or remain active despite being flagged. These findings lead to the following conclusions:
- **Strengths**:
- Effective at terminating malicious processes.
- Provides detailed alerts and file analysis.
- Minimal performance impact during scans.
- **Weaknesses**:
- Struggled to completely block all ransomware variants.
-偶尔出现误报，需改进检测机制。
In conclusion, while Hitman Pro Alert is a capable tool for defending against ransomware, it may not be sufficient as the sole defense mechanism. As with any cybersecurity solution, relying on multiple layers of protection (such as regular backups and other antivirus tools) is recommended to ensure comprehensive security.
---
### 6. **Final Verdict**
The article concludes by advising readers that while Hitman Pro Alert showed promise in blocking ransomware, it should not be relied upon exclusively for protection. Users are encouraged to adopt a multi-layered approach to cybersecurity, including regular backups and the use of additional antivirus software.
Thank you for reading this comprehensive walkthrough of testing **Hitman Pro Alert** against ransomware. For more cybersecurity tips and product reviews, stay tuned to our channel!
"WEBVTTKind: captionsLanguage: enwhat you guys got another video here for you this one is another ransomware test with some software called Hitman Pro alert now you guys have been requesting this for quite a bit on the forums and also uh on the comment section and messaging me and I thought I'd make this video for you so let's take a look at Hitman Pro alert and what it does you can see here if you want to use this software to protect yourself uh against ransomware it does come with some sort of a crypto guard on it um but it's not cheap you have to purchase this per year you can see Hitman Pro here is this price I think this is Euros um I think that uh symbol um but Hitman Pro alert one for one PC for one year is $ 29.95 and for 3 years 59.95 so I'm going to be downloading uh the 12 version uh and we're going to have a go at that now if you're running a b bu obviously it goes up a fair bit which uh obviously is quite a bit of money so let's take a look at how good it is at protecting your system now if you want to learn all about it uh you can come to this website and read about it I'm not going to spend too much time going through what it does and what it doesn't do uh but you can come over here someone's WR a massive big article on it and it gives you all the uh information here so you can see the bit that we're interested in is the crypto guide stops ransomware and you can see a picture here of a CBT locker and crypto locker and some other bits and pieces on here so you can see here uh alert has all these features on it which is crypto guard uh webcam Notifier uh process protection key stroke encryption and loads of other bits and pieces uh exploit migrations uh quite a lot of different uh features that has built into the actual software so if you're interested in that you can go over there and have a good read up let's get this installed on on the system uh this is a brand new fresh install of Windows 10 um anniversary edition so what we're going to do here is maximum protection make sure we got the maximum protection on uh perform a malware scan after the installation except their terms and install their software onto this system now we have been doing quite a few Ransom Weare ones over the last few days and I just wanted to sort of tie this down a little bit with some protection I did one yesterday and I to do some other show you some other software that you can use to protect against ransomware I will do another uh win patrols uh win anti- Ransom uh we're going to be doing another test for that with some other types of ransomware cuz they've just done a big update so I wanted to cover that as well and some other bits and pieces with other software as well but if you got any ideas or any suggestions then you can always put them in the comment section below or on the forums join the forums over there free to join and uh join the community over there that's probably going to be the best place to post your video requests cuz obviously they're going to get seen and also I don't forget about them and I also read there quite a lot so we're just going to let this do its scan its preliminary scan of the system just so we're fully protected now obviously I have got uh a password protected ransomware here with some ransomware inside we're going to put it for its paces and see what it can do now again you know my uh my philosophy on ransomware the only way to protect yourself is to back up your data on a regular basis and store it away from the computer itself so never rely on one piece of software or any software as a matter of fact and that includes Hitman Pro alert I would not put all my eggs in one basket and let software uh protect my system I would always back up as well and do some other bits and pieces so don't just rely on software to do the job for you and when it doesn't work or it fails then blame the software you know you've got yourself to blame so let's take a look uh uh this scan it's nearly completed now now I have turned off quickly show you I have turned off the uh Windows Defender here on here cuz I don't want it interfering with some of the ransomware on the system so I've turned this all off here okay now obviously you would be having this uh on your system uh running as well which will give you added protection so we putting a bit of a a workload onto uh Hitman Pro alert now also Hitman Pro alert does come with a standard user interface and also an advanced user interface for experienced users you can have a look at that by clicking the little Cog wheel here and you can see it gives you the scanning uh safe browsing uh exp um exploit migration and also risk reduction he said explicit then um but you can see here some other bits and pieces now it does come with some good features on here some uh like crypto guard and I said USB uh protection and stuff like that there's loads of others bits and pieces you can see we're running on a a trial license that is the scan now finished so we're just going to delete all this junk no threats found it's just rubbish on the system we'll just let this close off and then we'll continue with our test I'm just going to test a few R somewhere here I'm not going to go too mad um and we'll give it a test so here we go so I'm just going to drop that down there and we're going to let's open up process Explorer as well and get process Explorer on the go I also want to add in check virus total here click click yes for that okay so it's going to guard our browser got that running and I'm just going to drag virus total along over here so we can see here what's what's happening with the system I'm going to pull this down as well and also want to do the pain view here here to the DLS and we can see that there and what we're going to do is just pull this back down here so I want to keep an eye on what's going on with the system okay so we're all preset let's extract all these files onto our desktop so I'm just going to quickly put in the password and uh I'm going to give this a test so first off let's uh try Peter do the red version here and let's say yes to the user count control to allow that to inject itself on the system and you can see here got that running and you can see Peter here and straight away the attack has been in intercepted uh by Hitman Pro alert now it's ask you to scan I'm just going to show this off here show cut that off so we can see that's been uh blocked and that was the I think that was the was that the green one or the red one I can't remember so we'll try the uh this one here I may have done this one already okay you can see that one's been blocked straight away and you get the technical details here to what that file was and where the location and some other bits of pieces so I'm going to close this off and you can see here there's nothing running on here we will do a scan at the end of it just to test what was going on and uh let's try uh CBT Locker I'm just going to quickly click on this one and we'll open up this now you can see there is some files been detected here by virus total just open it up a little bit more and you can see what it's trying to do I can see here and you can see Hitman Pro alert up the top here it's trying to do something as well on the screen you can see the uh CPU is doing something so these two are working together it's trying to block something maybe uh I'm stopping at getting on the system I would have thought uh we would have had a a sign come up at the moment saying uh process blocked but it's still running as you can see here on this system so I'll leave this running for a bit longer as you can see here that process is starting to churn away for that um Ransom where you can see now the system is still okay at the moment it's not got onto the system or done anything as of yet as you can see but it's not completely closed this process off and that's um quite dangerous having that running like this cuz that means if this ever lets up that could then suddenly drop and then do its deed drop its payload on the computer and encrypt all the data so I'm not sure why that is not closed that off as of yet and it's still running um whether if it's having trouble doing that I don't know whether this is continually restarting itself I don't know what's going on there but this is definitely uh doing something um because I can see the CPU is churning away here so let me just uh log off and lo log back on to see whether that closes this process I don't want um Windows Defender jumping back on and killing this process so I'll have to be quick to try and stop that so let me just quickly log off sign out let me just quickly sign back in I just want to make sure as that does restart itself Windows Defender and I don't want that happening okay it's not sometimes this restarts itself for no apparent reason which I don't want happening cuz it will start to delete these and cause problems so now that could have been S I don't know how long that would have sat there for but that could have been sitting there for quite some time um until I restarted so let's fire up process Explorer again now that process should be killed off now because obviously I've uh restarted or logged off and logged on there's something here running I can see as you can see here in the temp folder something's jumped into that temp area so it's managed to get in there which is that file it's still running as you can see the file was still managed to get into this area into the temp area and uh this Hitman Pro alert let's let that get to that temp area here so I'm just going to give this a bit more time now again I'm not so sure that's supposed to have got that far on the system I thought it would have been blocked before it got to the temp area here and this was CBT Locker um here so I'm just going to quickly explore this area and there it is there as you can see it's sitting there waiting to do its thing and it's trying to connect out so whether that's going to continue to do that and and manage to encrypt my data I don't know as of yet but that's not good so I'll give it a bit of time I'll pause here and come back in a sec I don't think that's going to don't think that process is going to be killed I think it's trying to stop it from doing its thing but I don't think it's going to kill this process so what we'll do is we just leave it for now and I I can't continue until this has been resolved really and see the CPU now is at 100% okay so I'm looking here now down the bottom and I can see there was a this did manage to drop down here I just missed that this file Sun got down here and it said suspended and I just missed it oh oh there we go so it could manage to stop it it just was relentless at continual probably continually pummeling Hitman Pro alert and eventually it's Let It Drop onto the system and I did see that there and just missed out on the camera it just dropped down the bottom here and it did say uh suspended Hitman Pro alert suspended it I should imagine there's no there's no encryption here so maybe it's blocked the encryption but it's let this thing go on which isn't a bad thing really cuz this is easily solved um so maybe it has done its job and maybe on first my first reactions was it's let it uh onto the system and encrypt the files but it hasn't I can see the in in the documents area here could see that's the photo and uh I can't see any extensions with uh encryptions on them so I don't think the encryptions dropped in this case and maybe uh Hitman Pro alert has blocked that so let me just get rid of this and then we'll continue so I'm going to quickly restart the system here CU this process is still running here in the temp folder um which I think should have been killed off by now but what I'm going to do is I'm going to give this a quick reboot and uh see if this is still running on once we've done that and that shouldn't in my opinion be still running here that should have been killed off so we'll quickly reboot and uh we'll go from there so on restart we've now got uh the Microsoft Windows malicious software removal tool we say yes to that and I want to make sure that we've got that turned off it's on so we'll turn that back off okay so let's uh carry on I'm just going to quickly open up process Explorer here and I think that's now removed that process I think uh the Microsoft tool has removed that process let me just quickly check that location okay so let's go into I think it was in the temp area I think that file was that file's now gone as you can see so maybe uh that program Hitman Pro alert uses that to to remove it I don't know maybe you'll be able to see this video and let us know but what we're going to do here is continue uh I'm going to test it with something else here so we're going to try uh a new one so let's just see what else we can try here going to try this here let's try that that's blocked access denied let's try this one and I've got to look here and I can see here already that this is doing its thing here it's been suspended you can see suspended here uh by probably Hitman Pro alert has actually suspended that file this is popped up on the screen not sure what that is but we'll take a look in a sec and you can see it suspended this uh process from doing its deed we still got this process running here as you can see you can see it's malicious and that is on the desktop so we're just going to let this uh run for a bit you can see Hitman Pro alert is doing its I think it's churning away there a little bit it's not going too mad but it's probably doing its job we'll give this a bit of time and see what happens here I'll just quickly uh shut this back bit off here so we're not getting those uh messages across theen screen here for every ransomware we're not getting that coming up from Hitman Pro alert and we want to wait a little bit of time to see whether what happens to this process here so I'm trying to give it as much time as possible to see what happens that seems to be going like the clappers that tire worker. EXE oh then we can see here now that's now been blocked that process has been terminated to prevent execution of M malicious code so that was trying to do some bits there so what we're going to do here is close that off I don't think it uh it didn't delete those it did drop something in here but it didn't didn't delete or encrypt them or anything like that so it's trying to stop something now it's it's still going down the bottom here I'm not sure what's going on here it's still it's not completely killed off it's still running here so I'm not sure how this works so we're going to leave that running for now uh I'm going to log off and log back on and see what happens what I can't understand is it said that process was killed but it was obviously still running there just make sure this doesn't restart itself that's fine so yeah we got the message saying that the process was killed but yet um process explorer was saying it was still running which was very strange okay that's now gone but that's only because I logged off and logged back on again but if you was PC was running 24 hours a day was a strong possibility that that could still be running and still cause a problem I suppose um but what we'll do is we'll move on um not sure if we've done this one but we'll give it a go that's closed lock that okay so we'll do the good old Tesla Crypt we'll give that a quick wiiz as you can see volume Shadow Copy Service I'm going to say yes and you can see that's now been blocked we're going to say yes again details so anyway as you can see there we'll just try one more here crypto Locker say yes here okay so I think we've done enough here I'm going to quickly run a a test on the system I'm going to get rid of all this me just quickly um see what's running here first on the system if there's anything running and then we'll run a quick scan with Hitman Pro so let me just try and get rid of all this here okay so let me just quickly log off and log back on and then I'll run a scan there we go okay so let's empty this out so we're going to scan the computer and as you can see here there has been some uh Trojan dropped on the system now if we had have run the scan after we got hit with those these would have probably been deleted straight away by Hitman Pro but you can see here um we've got these in the documents area and in the windows area so when it says run scan once it detects something that's what you need to do you obviously need to run a scan at that stage I never and I ignored that cuz I was trying to get the content out um but basically these would have probably been detected and removed anyway which is probably the correct uh way of doing it so we'll just leave this uh to do it scan and finish off and then we'll check uh the images here you can see everything's all fine it did block all of those it didn't allow to encrypt my data there was some bits and pieces happening on the system like a few files that it dropped down maybe it just changed the wallpaper that's about it but it blocked everything else um from encrypting my files and of course if we did a quick clean up the temp files and all that sort of stuff we'd be pretty good to go so I'm going to reboot here and then I'm going to run another scan with something else just to make sure so I'm going to quickly reboot let's just get a quick scan going here and thenal smart scan deep scan we're going to do a deep scan here see if there's anything left on the system I'll just run this and let this go so we're just letting this scan finish off here now and as you can see Hitman Pro alert has done an outstanding job at blocking uh all those ransomware from encrypting your data that is the key part here it stopped ransomware from encrypting all your data now would I rely on one piece of software to stop that no I would always follow some other protocol like backing up your data you know running some other software on there as well protection you know and using common sense don't clicking on stuff and and stuff like that you should keep safe really so there's your test I I was trying to make I know the video has been a bit long but I didn't want to sort of cut and wipe stuff out I wanted to show you the whole process and what's been happening uh when I tried to inject those on the system very strange how though uh actual message said the processes been stopped and stopped it in Crypton dat and yet in the process Explorer it was still sitting there for quite some time obviously doing stuff um I'm not so sure about what's going on there uh but maybe the creator of the program will be able to answer that better but um as you can see it's done an outstanding job at blocking all those rware and stopping it from encrypting my data which has been a very good success so right I'll leave the uh decision up to you whether you think it's worthy of the money uh and and all that sort of good stuff and I hope you found this uh video helpful we'll just let this scan finish off and I'll wrap the video up and uh edit it all and get it uploaded for you guys so there's the scan actually now completed congratulations the PC is clean which is great news so I'm going to wrap this video up so I hope this one's been helpful to you guys I hope it's been useful in showing you how strong soft where some software is blocking ransomware and uh give it a go I mean if you fancy buying a piece of software there's loads of variations out there that you can use uh I'll try and test some other ones so you can see them in action and you can make your choice whether you want to use them or not or whether you want to run the risk of not using them or whether you just are happy backing up data not using that type of software all together it's entirely up you anyway I'm going to wrap this one up it's been a long one and uh I shall see you again in the next video my name is B from BC Compu .co.uk if you enjoy these videos guys then hit the like button also hit the Subscribe button if you want to keep up to date when I do upload new videos and also if you've got any problems with your computers or any video requests or anything like that then head over to the forums and join up over there it's free to join and also if you haven't got uh if you hav enjoy my Facebook fan page you can pop over there and give us a little like up over there maybe write a review over there or something like that i' show you appreciation anyway thanks again have a great weekend bye for nowwhat you guys got another video here for you this one is another ransomware test with some software called Hitman Pro alert now you guys have been requesting this for quite a bit on the forums and also uh on the comment section and messaging me and I thought I'd make this video for you so let's take a look at Hitman Pro alert and what it does you can see here if you want to use this software to protect yourself uh against ransomware it does come with some sort of a crypto guard on it um but it's not cheap you have to purchase this per year you can see Hitman Pro here is this price I think this is Euros um I think that uh symbol um but Hitman Pro alert one for one PC for one year is $ 29.95 and for 3 years 59.95 so I'm going to be downloading uh the 12 version uh and we're going to have a go at that now if you're running a b bu obviously it goes up a fair bit which uh obviously is quite a bit of money so let's take a look at how good it is at protecting your system now if you want to learn all about it uh you can come to this website and read about it I'm not going to spend too much time going through what it does and what it doesn't do uh but you can come over here someone's WR a massive big article on it and it gives you all the uh information here so you can see the bit that we're interested in is the crypto guide stops ransomware and you can see a picture here of a CBT locker and crypto locker and some other bits and pieces on here so you can see here uh alert has all these features on it which is crypto guard uh webcam Notifier uh process protection key stroke encryption and loads of other bits and pieces uh exploit migrations uh quite a lot of different uh features that has built into the actual software so if you're interested in that you can go over there and have a good read up let's get this installed on on the system uh this is a brand new fresh install of Windows 10 um anniversary edition so what we're going to do here is maximum protection make sure we got the maximum protection on uh perform a malware scan after the installation except their terms and install their software onto this system now we have been doing quite a few Ransom Weare ones over the last few days and I just wanted to sort of tie this down a little bit with some protection I did one yesterday and I to do some other show you some other software that you can use to protect against ransomware I will do another uh win patrols uh win anti- Ransom uh we're going to be doing another test for that with some other types of ransomware cuz they've just done a big update so I wanted to cover that as well and some other bits and pieces with other software as well but if you got any ideas or any suggestions then you can always put them in the comment section below or on the forums join the forums over there free to join and uh join the community over there that's probably going to be the best place to post your video requests cuz obviously they're going to get seen and also I don't forget about them and I also read there quite a lot so we're just going to let this do its scan its preliminary scan of the system just so we're fully protected now obviously I have got uh a password protected ransomware here with some ransomware inside we're going to put it for its paces and see what it can do now again you know my uh my philosophy on ransomware the only way to protect yourself is to back up your data on a regular basis and store it away from the computer itself so never rely on one piece of software or any software as a matter of fact and that includes Hitman Pro alert I would not put all my eggs in one basket and let software uh protect my system I would always back up as well and do some other bits and pieces so don't just rely on software to do the job for you and when it doesn't work or it fails then blame the software you know you've got yourself to blame so let's take a look uh uh this scan it's nearly completed now now I have turned off quickly show you I have turned off the uh Windows Defender here on here cuz I don't want it interfering with some of the ransomware on the system so I've turned this all off here okay now obviously you would be having this uh on your system uh running as well which will give you added protection so we putting a bit of a a workload onto uh Hitman Pro alert now also Hitman Pro alert does come with a standard user interface and also an advanced user interface for experienced users you can have a look at that by clicking the little Cog wheel here and you can see it gives you the scanning uh safe browsing uh exp um exploit migration and also risk reduction he said explicit then um but you can see here some other bits and pieces now it does come with some good features on here some uh like crypto guard and I said USB uh protection and stuff like that there's loads of others bits and pieces you can see we're running on a a trial license that is the scan now finished so we're just going to delete all this junk no threats found it's just rubbish on the system we'll just let this close off and then we'll continue with our test I'm just going to test a few R somewhere here I'm not going to go too mad um and we'll give it a test so here we go so I'm just going to drop that down there and we're going to let's open up process Explorer as well and get process Explorer on the go I also want to add in check virus total here click click yes for that okay so it's going to guard our browser got that running and I'm just going to drag virus total along over here so we can see here what's what's happening with the system I'm going to pull this down as well and also want to do the pain view here here to the DLS and we can see that there and what we're going to do is just pull this back down here so I want to keep an eye on what's going on with the system okay so we're all preset let's extract all these files onto our desktop so I'm just going to quickly put in the password and uh I'm going to give this a test so first off let's uh try Peter do the red version here and let's say yes to the user count control to allow that to inject itself on the system and you can see here got that running and you can see Peter here and straight away the attack has been in intercepted uh by Hitman Pro alert now it's ask you to scan I'm just going to show this off here show cut that off so we can see that's been uh blocked and that was the I think that was the was that the green one or the red one I can't remember so we'll try the uh this one here I may have done this one already okay you can see that one's been blocked straight away and you get the technical details here to what that file was and where the location and some other bits of pieces so I'm going to close this off and you can see here there's nothing running on here we will do a scan at the end of it just to test what was going on and uh let's try uh CBT Locker I'm just going to quickly click on this one and we'll open up this now you can see there is some files been detected here by virus total just open it up a little bit more and you can see what it's trying to do I can see here and you can see Hitman Pro alert up the top here it's trying to do something as well on the screen you can see the uh CPU is doing something so these two are working together it's trying to block something maybe uh I'm stopping at getting on the system I would have thought uh we would have had a a sign come up at the moment saying uh process blocked but it's still running as you can see here on this system so I'll leave this running for a bit longer as you can see here that process is starting to churn away for that um Ransom where you can see now the system is still okay at the moment it's not got onto the system or done anything as of yet as you can see but it's not completely closed this process off and that's um quite dangerous having that running like this cuz that means if this ever lets up that could then suddenly drop and then do its deed drop its payload on the computer and encrypt all the data so I'm not sure why that is not closed that off as of yet and it's still running um whether if it's having trouble doing that I don't know whether this is continually restarting itself I don't know what's going on there but this is definitely uh doing something um because I can see the CPU is churning away here so let me just uh log off and lo log back on to see whether that closes this process I don't want um Windows Defender jumping back on and killing this process so I'll have to be quick to try and stop that so let me just quickly log off sign out let me just quickly sign back in I just want to make sure as that does restart itself Windows Defender and I don't want that happening okay it's not sometimes this restarts itself for no apparent reason which I don't want happening cuz it will start to delete these and cause problems so now that could have been S I don't know how long that would have sat there for but that could have been sitting there for quite some time um until I restarted so let's fire up process Explorer again now that process should be killed off now because obviously I've uh restarted or logged off and logged on there's something here running I can see as you can see here in the temp folder something's jumped into that temp area so it's managed to get in there which is that file it's still running as you can see the file was still managed to get into this area into the temp area and uh this Hitman Pro alert let's let that get to that temp area here so I'm just going to give this a bit more time now again I'm not so sure that's supposed to have got that far on the system I thought it would have been blocked before it got to the temp area here and this was CBT Locker um here so I'm just going to quickly explore this area and there it is there as you can see it's sitting there waiting to do its thing and it's trying to connect out so whether that's going to continue to do that and and manage to encrypt my data I don't know as of yet but that's not good so I'll give it a bit of time I'll pause here and come back in a sec I don't think that's going to don't think that process is going to be killed I think it's trying to stop it from doing its thing but I don't think it's going to kill this process so what we'll do is we just leave it for now and I I can't continue until this has been resolved really and see the CPU now is at 100% okay so I'm looking here now down the bottom and I can see there was a this did manage to drop down here I just missed that this file Sun got down here and it said suspended and I just missed it oh oh there we go so it could manage to stop it it just was relentless at continual probably continually pummeling Hitman Pro alert and eventually it's Let It Drop onto the system and I did see that there and just missed out on the camera it just dropped down the bottom here and it did say uh suspended Hitman Pro alert suspended it I should imagine there's no there's no encryption here so maybe it's blocked the encryption but it's let this thing go on which isn't a bad thing really cuz this is easily solved um so maybe it has done its job and maybe on first my first reactions was it's let it uh onto the system and encrypt the files but it hasn't I can see the in in the documents area here could see that's the photo and uh I can't see any extensions with uh encryptions on them so I don't think the encryptions dropped in this case and maybe uh Hitman Pro alert has blocked that so let me just get rid of this and then we'll continue so I'm going to quickly restart the system here CU this process is still running here in the temp folder um which I think should have been killed off by now but what I'm going to do is I'm going to give this a quick reboot and uh see if this is still running on once we've done that and that shouldn't in my opinion be still running here that should have been killed off so we'll quickly reboot and uh we'll go from there so on restart we've now got uh the Microsoft Windows malicious software removal tool we say yes to that and I want to make sure that we've got that turned off it's on so we'll turn that back off okay so let's uh carry on I'm just going to quickly open up process Explorer here and I think that's now removed that process I think uh the Microsoft tool has removed that process let me just quickly check that location okay so let's go into I think it was in the temp area I think that file was that file's now gone as you can see so maybe uh that program Hitman Pro alert uses that to to remove it I don't know maybe you'll be able to see this video and let us know but what we're going to do here is continue uh I'm going to test it with something else here so we're going to try uh a new one so let's just see what else we can try here going to try this here let's try that that's blocked access denied let's try this one and I've got to look here and I can see here already that this is doing its thing here it's been suspended you can see suspended here uh by probably Hitman Pro alert has actually suspended that file this is popped up on the screen not sure what that is but we'll take a look in a sec and you can see it suspended this uh process from doing its deed we still got this process running here as you can see you can see it's malicious and that is on the desktop so we're just going to let this uh run for a bit you can see Hitman Pro alert is doing its I think it's churning away there a little bit it's not going too mad but it's probably doing its job we'll give this a bit of time and see what happens here I'll just quickly uh shut this back bit off here so we're not getting those uh messages across theen screen here for every ransomware we're not getting that coming up from Hitman Pro alert and we want to wait a little bit of time to see whether what happens to this process here so I'm trying to give it as much time as possible to see what happens that seems to be going like the clappers that tire worker. EXE oh then we can see here now that's now been blocked that process has been terminated to prevent execution of M malicious code so that was trying to do some bits there so what we're going to do here is close that off I don't think it uh it didn't delete those it did drop something in here but it didn't didn't delete or encrypt them or anything like that so it's trying to stop something now it's it's still going down the bottom here I'm not sure what's going on here it's still it's not completely killed off it's still running here so I'm not sure how this works so we're going to leave that running for now uh I'm going to log off and log back on and see what happens what I can't understand is it said that process was killed but it was obviously still running there just make sure this doesn't restart itself that's fine so yeah we got the message saying that the process was killed but yet um process explorer was saying it was still running which was very strange okay that's now gone but that's only because I logged off and logged back on again but if you was PC was running 24 hours a day was a strong possibility that that could still be running and still cause a problem I suppose um but what we'll do is we'll move on um not sure if we've done this one but we'll give it a go that's closed lock that okay so we'll do the good old Tesla Crypt we'll give that a quick wiiz as you can see volume Shadow Copy Service I'm going to say yes and you can see that's now been blocked we're going to say yes again details so anyway as you can see there we'll just try one more here crypto Locker say yes here okay so I think we've done enough here I'm going to quickly run a a test on the system I'm going to get rid of all this me just quickly um see what's running here first on the system if there's anything running and then we'll run a quick scan with Hitman Pro so let me just try and get rid of all this here okay so let me just quickly log off and log back on and then I'll run a scan there we go okay so let's empty this out so we're going to scan the computer and as you can see here there has been some uh Trojan dropped on the system now if we had have run the scan after we got hit with those these would have probably been deleted straight away by Hitman Pro but you can see here um we've got these in the documents area and in the windows area so when it says run scan once it detects something that's what you need to do you obviously need to run a scan at that stage I never and I ignored that cuz I was trying to get the content out um but basically these would have probably been detected and removed anyway which is probably the correct uh way of doing it so we'll just leave this uh to do it scan and finish off and then we'll check uh the images here you can see everything's all fine it did block all of those it didn't allow to encrypt my data there was some bits and pieces happening on the system like a few files that it dropped down maybe it just changed the wallpaper that's about it but it blocked everything else um from encrypting my files and of course if we did a quick clean up the temp files and all that sort of stuff we'd be pretty good to go so I'm going to reboot here and then I'm going to run another scan with something else just to make sure so I'm going to quickly reboot let's just get a quick scan going here and thenal smart scan deep scan we're going to do a deep scan here see if there's anything left on the system I'll just run this and let this go so we're just letting this scan finish off here now and as you can see Hitman Pro alert has done an outstanding job at blocking uh all those ransomware from encrypting your data that is the key part here it stopped ransomware from encrypting all your data now would I rely on one piece of software to stop that no I would always follow some other protocol like backing up your data you know running some other software on there as well protection you know and using common sense don't clicking on stuff and and stuff like that you should keep safe really so there's your test I I was trying to make I know the video has been a bit long but I didn't want to sort of cut and wipe stuff out I wanted to show you the whole process and what's been happening uh when I tried to inject those on the system very strange how though uh actual message said the processes been stopped and stopped it in Crypton dat and yet in the process Explorer it was still sitting there for quite some time obviously doing stuff um I'm not so sure about what's going on there uh but maybe the creator of the program will be able to answer that better but um as you can see it's done an outstanding job at blocking all those rware and stopping it from encrypting my data which has been a very good success so right I'll leave the uh decision up to you whether you think it's worthy of the money uh and and all that sort of good stuff and I hope you found this uh video helpful we'll just let this scan finish off and I'll wrap the video up and uh edit it all and get it uploaded for you guys so there's the scan actually now completed congratulations the PC is clean which is great news so I'm going to wrap this video up so I hope this one's been helpful to you guys I hope it's been useful in showing you how strong soft where some software is blocking ransomware and uh give it a go I mean if you fancy buying a piece of software there's loads of variations out there that you can use uh I'll try and test some other ones so you can see them in action and you can make your choice whether you want to use them or not or whether you want to run the risk of not using them or whether you just are happy backing up data not using that type of software all together it's entirely up you anyway I'm going to wrap this one up it's been a long one and uh I shall see you again in the next video my name is B from BC Compu .co.uk if you enjoy these videos guys then hit the like button also hit the Subscribe button if you want to keep up to date when I do upload new videos and also if you've got any problems with your computers or any video requests or anything like that then head over to the forums and join up over there it's free to join and also if you haven't got uh if you hav enjoy my Facebook fan page you can pop over there and give us a little like up over there maybe write a review over there or something like that i' show you appreciation anyway thanks again have a great weekend bye for now\n"