Rokku Virus (Ransomware Removal Instructions)

Rokku virus is ransomware that uses Salsa20 algorithm to encrypt each file on a computer it infects with a unique key. The virus then holds files for ransom and asks for a payment of .24 bitcoins, or around $100 USD. The Rokku virus is typically spread via deceptive email messages that contain malicious email attachments. The email attachments will download executable files that when launched will ignite the Rokku ransomware encryption process.

At this time there is no free way to decrypt files encrypted by the Rokku virus.

Rokku files

%StartMenu%\Programs\Startup\README_HOW_TO_UNLOCK.HTML
%StartMenu%\Programs\Startup\README_HOW_TO_UNLOCK.TXT

How to remove Rokku Virus (Ransomware Removal Instructions)

1. Scan your computer with Malwarebytes
2. Scan your computer with HitmanPro
3. Cleanup and repair settings with CCleaner

1. Scan your computer with Malwarebytes

The first step to remove Rokku ransomware and malicious traces from your computer is to download and install Malwarebytes Anti-Malware software in order to perform a full system scan for malicious files.

1. Download and Install Malwarebytes Anti-Malware software.

Download Malwarebytes

2. Open Malwarebytes and click the Scan Now button or go to the Scan tab and click the Start Scan button.

3. When the Malwarebytes scan is complete click the Remove Selected button.

4. To finish the Malwarebytes scan and remove detected threats click the Finish button and restart your computer once promoted to do so in a pop-up message from Malwarebytes.

2. Scan your computer with HitmanPro

The second step to remove Rokku ransomware and malicious traces from your computer is to download and install a second opinion scanner called HitmanPro by Surfright in order to perform a full system scan for malicious files.

1. Download and Install HitmanPro by Surfright.

Download HitmanPro

2. Open HitmanPro and click Next to start scanning your computer. *If you are using the free version you may chose to create a copy or perform a one-time scan.

3. When the HitmanPro scan is complete click the Next button.

4. To activate the free version of HitmanPro: enter your email address twice and click the Activate button.

5. Click the Reboot button.

3. Cleanup and repair settings with CCleaner

The third step to remove Rokku ransomware and malicious traces from your computer is to download and install CCleaner by Piriform in order to delete leftover junk files, tracking cookies, registry entries, unwanted start-up tasks, and more.

1. Download and Install CCleaner by Piriform.

Download CCleaner

2. Open CCleaner and go to the main Cleaner screen. Click the Analyze button. When the process is complete, click the Run Cleaner button on the bottom right of the program interface.

3. Go to Tools > Startup and search for suspicious entries in each tab starting from Windows all the way to Content Menu. If you find anything suspicious click it and click the Delete button to remove it.

4. Go to the Registry window and click the Scan for Issues button. When the scan is complete click the Fix selected issues… button and click Fix All Selected Issues.