Hand of God Ransomware

What is Hand of God Ransomware?

Hand of God Ransomware is a type of ransomware infection we have not seen in quite a while. It seems that someone remembered the workings of the old Ukash Ransomware and now tries to apply to the new wave of ransomware infections. The way this infection functions reminds us of the screen-locking programs we dealt with several years ago, but the ransom note and the money transfer method is similar to those of the encrypting infections. You can find the removal instructions on Hand of God Ransomware right below this description, and the most important thing to notice here is that you should not panic.

Where does Hand of God Ransomware come from?

This infection shares features with at least two different types of ransomware programs. Therefore, it is highly possible that Hand of God Ransomware employs several distribution methods common to both types of programs. For example, the infection may enter target computers through a corrupted website. You may enter some gaming page or an adult content website that is full of third-party advertisements. Sometimes these advertisements are used to promote and distribute malicious infections, so clicking them could lead to a malware infection.

This program may also be distributed through spam email attachments and the outgoing links that can be embedded in the spam messages. As far as attachments are concerned, it is rather easy to avoid getting infected. However, that is only if you refrain from downloading the unfamiliar attachment and opening it on your computer. Also, do not click outgoing links just because the message urges you to do so. Think whether you really were supposed to receive this particular email. If it is sent by a specific company, consider looking up the name online. Perhaps you will find out that the company in question is used to trick users into downloading malware.

What does Hand of God Ransomware do?

The good news about this program is that it does not encrypt your files. The bad news is that it does lock you out of your computer. As mentioned, it works just like the Ukash Ransomware family infections that used to terrorize users across the globe several years ago. These programs used to display a ransom note saying that users have committed something illegal and now they have to pay for it. If they fail to pay the fine, the information about their wrongdoing would be forwarded to the law enforcement authorities.

Here is what the ransom note displayed by this infection looks like:

VOTR3 M4CH1N3 35T M41NT3N4NT INN4CE55I813

Cet Ordinateur et toutes ses données importantes ont ete verrouillé La Main de Dieu vous puni pour avoir escroque des cherceurs d'emploi en leurs promettant un emploi aun Canada pour le poste de teleoperateur...

Toutes tentatives de desactivation ulterieures a ce programme echouerons

Vos fonctions systemes on ete desactivees

Ce Programme est concu pour s'auto-detruire dans 2 hours en entrainant la Supression complete de tou vos fichiers

Aside from the outdated use of the l33t spelling, the program “speaks” to you in French. It probably means that the main target of this infection is the French-speaking users. Hand of God Ransomware says that you are being punished for cheating people who are looking for a job, and telling them that they would get a job of a telemarketer in Canada. The program says that you need to pay 555.23 CAD in Bitcoin within 2 hours. Otherwise, the program will self-destruct deleting all of your files.

Although Hand of God Ransomware blocks your Task Manager, and it might seem that the program’s threats are real, you can easily remove the infection from your system if you do not succumb to panic.

How do I remove Hand of God Ransomware?

The removal process may different depending on your operating system. Please note that you will have to restart your computer in Safe Mode with Networking to download a security application that will kill the infection. You can also remove the malicious files manually. For that, you need to delete all the recently downloaded files and remove the AngelFile.exe from the %APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup directory. However, we would like to point out that removing the malicious files automatically is a lot faster and more efficient. Not to mention that a computer security program can help you ensure your system’s safety.

Hand of God Ransomware Removal Guide

Windows 10

1. Restart your computer and wait for the sign-in screen to show up.
2. Press Shift and click Power. Go to Restart.
3. When Choose an option screen shows up, select Troubleshoot.
4. Go to Advanced options and press Startup Settings. Click Restart.
5. When the PC restarts, press F5 to select Safe Mode with Networking.
6. Go to http://www.anti-spyware-101.com/download-sph and download SpyHunter.
7. Run a full system scan.

Windows 8 & Windows 8.1

1. Move your mouse cursor to the bottom right of the screen.
2. Select Settings on the Charm bar and press the Power button.
3. Press the Shift key when you click Restart.
4. Navigate to Troubleshoot and select Advanced options.
5. Open Startup settings and select Restart.
6. Press the F5 key to load Safe Mode with Networking.
7. Open http://www.anti-spyware-101.com/download-sph
8. Scan your system with SpyHunter.

Windows 7 & Windows Vista

1. Reboot your PC and tap F8 repeatedly.
2. Select Safe Mode with Networking.
3. Press Enter and wait for the system to load.
4. Go to http://www.anti-spyware-101.com/download-sph.
5. Download SpyHunter and scan your PC.

Windows XP

1. Restart your PC and press F8 several times.
2. Select Safe Mode with Networking using the arrow keys.
3. Hit Enter and click Yes on the confirmation box.
4. Download SpyHunter and scan your PC. Download Removal Tool100% FREE spyware scan and
   tested removal of Hand of God Ransomware*