This worked this morning on a client’s computer to remove “hostage ware” that masquerades as anti virus and wants your money to “fix” the problem though it is the problem. Be sure to run the FixExe.reg first – it shuts the program down temporarily so you can install Malwarebytes. The virus is so nasty it will not let you on the internet to download the very tools you need to remove it. Bring the software to the computer on a thumbdrive or cd – but beware! The virus will offer to “scan” the thumbdrive for viruses. CLICK NO! Then follow the instructions from the above link. I had to do it all twice (a common occurence) to remove it. If this doesn’t work you can try ComboFix – or call me! $35 flat fee to fix any computer.