Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Removing lock-screen type ransomware using Safe Mode on Android device

    • Updated:
    • 15 Jun 2016
    • Product/Version:
    • Mobile Security for Enterprise 8.0
    • Mobile Security for Enterprise 9.0
    • Mobile Security for Enterprise 9.1
    • Mobile Security for Enterprise 9.2
    • Mobile Security for Enterprise 9.3
    • Mobile Security for Enterprise 9.5
    • Mobile Security for Enterprise 9.6
    • Platform:
    • Android 2.3 Gingerbread
    • Android 3.x Honeycomb
    • Android 4.0 Ice Cream Sandwich
    • Android 4.1 Jellybean
    • Android 4.2 Jellybean
    • Android 4.3 Jellybean
    • Windows Phone 8.0
Summary

A lock-screen-type Ransomware blocks your home screen, making your phone inaccessible until you pay up the "ransom".

This article shows you how to remove lock-screen type Ransomware using Safe Mode on your Android device.

Details
Public

To enter Safe Mode, click on the Android device that you have:

 
Safe Mode is available to devices with Android 4.1 (Jellybean) and above. When in Safe Mode, the Android OS does not load any third-party apps, and you can uninstall stubborn applications causing these problems.

To remove the ransomware, follow the steps for your device below:

HTC Devices with physical buttons

  1. Turn the mobile phone OFF..
  2. Press and hold the Home button.
  3. Turn on the phone while stille pressing the Home button until you see the lock screen. The phone is now started in Safe Mode.
  4. Open the Settings app, then go to Applications > Manage Applications.
  5. Uninstall the Ransomware app found on your phone.
  6. Restart your phone to go back into Normal Mode.

HTC Devices without physical buttons

Sample Devices: HTC Desire HD, HTC Thunderbolt, HTC EVO

  1. Turn the mobile phone OFF.
  2. Turn the phone ON, then press and hold the Volume Down button once the HTC logo appears until the Home Screen loads. The phone will vibrate before entering in Safe Mode.
  3. Open the Settings app, then go to Applications > Manage Applications.
  4. Uninstall the ransomware app found on the mobile phone.
  5. Restart the mobile phone to go back into Normal Mode.

To remove the ransomware, do the following:

  1. Turn the mobile phone OFF, then swipe open the keyboard.
  2. Press the Power + Home buttons simultaneously. This turn the device ON.
  3. Press and hold the Home button until the Droid Eye appears on your screen. The phone will vibrate before entering in Safe Mode.
  4. Open the Settings app, then go to Applications > Manage Applications.
  5. Uninstall the ransomware app found on the mobile phone.
  6. Restart the mobile phone to go back into Normal Mode.

To remove the ransomware, follow the steps for your device below:

Nexus One

  1. Turn the mobile phone OFF..
  2. Turn on the phone, then press and hold the Home button as soon as the Nexus logo is seen. "Safe Mode" will appear on the bottom corner of the phone.
  3. Open the Settings app, then go to Applications > Manage Applications.
  4. Uninstall the Ransomware app found on your phone.
  5. Restart your phone to go back into Normal Mode.

Nexus 5 and 7

  1. Press and hold the power button until the power options menu appears.
  2. Tap and hold the Power Off option. Tap OK when asked if you want to reboot to Safe Mode. .
  3. Open the Settings app, then go to Applications > Manage Applications.
  4. Uninstall the Ransomware app found on your phone.
  5. Restart your phone to go back into Normal Mode.

To remove the ransomware, follow the steps below:

  1. Turn the mobile phone OFF.
  2. Turn the phone ON, then press and hold the Home button once the phone vibrates. "Safe Mode" will appear on the bottom corner of the phone.
  3. Open the Settings app, then go to Applications > Manage Applications.
  4. Uninstall the ransomware app found on the mobile phone.
  5. Restart the mobile phone to go back into Normal Mode.

To remove the ransomware, follow the steps for your device below:

Samsung Galaxy Devices with KitKat or earlier OS

  1. Turn the mobile phone OFF.
  2. Turn the phone ON, then press and hold the Home button until the phone turns ON. "Safe Mode" will appear on the bottom corner of the phone.
  3. Open the Settings app, then go to Applications > Manage Applications.
  4. Uninstall the ransomware app found on the mobile phone.
  5. Restart the mobile phone to go back into Normal Mode.

Samsung Galaxy Devices with Lollipop or Marshmallow OS

  1. Turn the mobile phone OFF.
  2. Turn the phone ON, then press and hold the Volume Down button as soon as the Samsung logo appears. "Safe Mode" will appear on the bottom corner of the phone.
  3. Open the Settings app, then go to Applications > Manage Applications.
  4. Uninstall the ransomware app found on the mobile phone.
  5. Restart the mobile phone to go back into Normal Mode.
 
If your device is not listed here, refer to the support documentation on the device manufacturer's website or contact your device manufacturer's support.
Premium
Internal
Rating:
Category:
Remove a Malware / Virus; SPEC
Solution Id:
1114371
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support


To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.


Need More Help?

Create a technical support case if you need further support.