Quickly Remove Ransom_ENYBENY.THAABFAH Virus From PC

Technical Details About Ransom_ENYBENY.THAABFAH


Type :- Malware

Discovered :- May 9, 2018

Updated :- May 9, 2018

Category :- Trojan

Risk Involved :- Highly Risky

Infection Length :- Varies

Targeted OS :- Windows XP, 7,8, 8.1 & 10 PC

CVE References :- CVE-2018-0953


Ransom_ENYBENY.THAABFAH is a nasty Trojan horse virus that can proves to be very harmful for infected computer system. It sneaks into the targeted computer by stealth without users consent. It carries its own executable files which allows this threat to install itself automatically. Once executed, it will make your system vulnerable fatal corruption. It executes different malicious process in your system background. It corrupts users important data and mess up with system registry files. This nasty Trojan horse virus will make it very difficult for the users to perform any kind of process in infected machine. Moreover, presence of Ransom_ENYBENY.THAABFAH virus will make your system completely unusable.

How Ransom_ENYBENY.THAABFAH Virus Is Destributed

  • With Freeware third party applications.
  • Via p2p network.
  • From Torrent, pornographic and other malicious social media sites.
  • With infected media drives.
  • With spam email attachments containing corrupt or malicious documents.

Usually, Ransom_ENYBENY.THAABFAH virus modifies all important settings in compromises computer and locks even your system task manager so that users can not terminate its malicious process manually. Due to this destructive Trojan virus users will experience various critical issues while using infected PC such as slow system response, hard drive crash, browser redirection and many more. It also disables essential security measures that allows hackers to access and steal your confidential data remotely. It also infect your registry entries and corrupt dll files. Therefore, it is recommended to get rid of Ransom_ENYBENY.THAABFAH virus as soon as it detected in your PC.


How To Remove Ransom_ENYBENY.THAABFAH Virus From PC

Presence of Ransom_ENYBENY.THAABFAH is a great risk for your entire system. As discussed above, this devastating threat can completely destroy your PC, and hence immediate actions are required to protect your computer. However, it is not going to be an easy task to remove this notorious malware infection from infected system, specially if your not technically sound. Here, we provide your the best possible way to remove Ransom_ENYBENY.THAABFAH virus completely from your PC in a very safe and user friendly way.

Basically, there are two possible way to remove Ransom_ENYBENY.THAABFAH virus. The first way is using Automatic Removal Tool which enables the users to deal with all kinds of severe and catastrophic malware infection is a very easy as well as safe manner. On the other hand, manual removal is the second way to delete Ransom_ENYBENY.THAABFAH from your Windows computer. The details of both malware removal options “Automatic as well as Manual” has described below, take a look.

How to Remove Ransom_ENYBENY.THAABFAH From Your PC

Method 1 : Remove Ransom_ENYBENY.THAABFAH Automatically

Automatic removal is the most suitable and efficient way to remove all kinds of PC viruses and malware from your system. Users won’t require any specific technical skills in order to remove Ransom_ENYBENY.THAABFAH with Automatic Removal Tool.

 Download SpyHunter to Remove Ransom_ENYBENY.THAABFAH From PC

Method 2 : Remove Ransom_ENYBENY.THAABFAH Manually

Manual Removal is also very popular method to remove Ransom_ENYBENY.THAABFAH virus. Meanwhile, users must know that while using Manual Removal Method one will require to go through multiple lengthy and risky process that may ends up with serious consequences resulting in further critical issues and errors in compromised PC. Hereupon, you should better make sure that you are technically sound and have good experience before engaging your hand in manual removal method.

Method 1 : Remove Ransom_ENYBENY.THAABFAH Automatically

For Automatic removal of Ransom_ENYBENY.THAABFAH we suggest you to use SpyHunter Malware Scanner tool. It is one most powerful, quick and reliable tool that has the capability to wipe out any severe malware infection i.e, (Adware, Browser Hijackers, Trojan, Ransomware, Worm, Rootkit, Referral Spams, Scam Pop-up, Redirect Virus, Crypto-Trojan etc.) from all versions of Windows OS system. It brings a set of very smart and efficient feasters that allows the users to scam and removal all kinds of potentially harmful threat including Ransom_ENYBENY.THAABFAH from PC permanently. SpyHunter ensures complete security of your PC.

Steps To Remove Ransom_ENYBENY.THAABFAH Automatically

Step 1 :- Click on below button and Download SpyHunter in your PC.

Delete Ransom_ENYBENY.THAABFAH Virus

Step 2 :- Double click on executable file to install and run SpyHunter.

Download SpyHunter

Step 3 :- Click on Scan Computer Now button.

Scan Computer Now

Step 4 :- Here you can you list of all kinds of malware in your PC.

Step 4 :- Click on Fix Threats button to delete Ransom_ENYBENY.THAABFAH permanently.

Fix Threats

Recover Your Data Automatically

Well, we all know that some certain malware such as Trojans, Ransomware etc. compromises users personal files and can result in serious data loss issue. In case, if your important files are encrypted or delete by Ransom_ENYBENY.THAABFAH then you will need to take the help of a powerful data recovery tool in order to restore your files. Data Recovery Pro is one very reliable and powerful utility that can easily recover all kinds of important data. It is capable to restore locked, encrypted, deleted or inaccessible files from all versions of Windows OS PC.

Steps To Recover Your Data

Step 1 :- Download the Data Recovery Pro software on your computer.

Data Recovery Pro

Step 2 :- Click on Start Scan button to run a full scan of your computer.

Data Recovery Pro

Step 3 :- Now select all your important files and click on Recover button to get back your data.

Data Recovery Pro

Method 2 : Remove Ransom_ENYBENY.THAABFAH Manually

If you are a computer geek then you shouldn’t have any kind of problem while removing Ransom_ENYBENY.THAABFAH virus from your system. You will need to go through a certain set complex process manually in order to remove this virus from your computer. However, it is seen that manual methods sometimes fails to remove certain malware completely and users continue to experience same issues even after following all manual removal steps multiple times. So, if you have any kinds of doubts regarding manual removal then you should better look for Automatic Malware Scanner Tool to remove Ransom_ENYBENY.THAABFAH virus permanently from your computer.

Part 1 : Boot Your Computer In Safe Mode

  • Close all running program properly and Restart your PC.


  • Keep tapping F8 button on your keyboard to open Windows Advanced Option.


  • Use Arrow keys to navigate and select Safe Mode with Networking option.

Safe Mode with Networking

Part 2 : Remove Ransom_ENYBENY.THAABFAH From Browsers

Remove Malicious Extension

  • Open browser and click on (⋮) icon from the top right corner of your browser.
  • From the drop-down list of browser menu select More Tools option.
  • Now click on Extension.
  • Here you can see the list of all extension, Select Ransom_ENYBENY.THAABFAH and click on Trash icon.

Remove Malicious Extension

Reset Browser Settings

  • Open browser menu by clicking gear (⋮) icon from the top right corner of your browser.
  • Open Settings and the click on Show Advanced Settings option.
  • Click on Reset Setting option and Restore your browser settings to default.

Reset Browser Settings

Remove Ransom_ENYBENY.THAABFAH From Browser Homepage (Optional)

Since, Ransom_ENYBENY.THAABFAH alters your browser default home page as well as search engine hence it would be sensible to undo all the changes that has been made by Ransom_ENYBENY.THAABFAH virus. However, this step is optional for users.

  • Click (⋮) icon to open  browser menu >>> Navigate to the “Settings” >>> click on “Appearance”  >>> check “Show Home Button” box.
  • A “New Tab page” option will appear >>> Select “Change” to set your desired home page.

Browser Homepage

Remove Malicious Search Engine

  • Open Google Chrome >>> click on menu (⋮) icon >>> select “Settings” option.
  • Find out the “Search” option >>> click on drop-down menu >>> select your default Search Engine to replace malicious search provider set by Ransom_ENYBENY.THAABFAH.

search engine

Remove Malicious Extension Created By Ransom_ENYBENY.THAABFAH

  • Open Mozilla Firefox and click on Browser Menu by clicking (☰) icon.
  • Select Add-ons option from drop-down list of browser menu.
  • From the left panel of your browser click on extension.
  • Now select and remove Ransom_ENYBENY.THAABFAH and other unwanted extensions from your browser.

Refresh Browser Settings

  • Open Mozilla Firefox and click (☰) icon.
  • Select Help option from drop-down list of browser menu.
  • Now Click on “Troubleshooting Information” option.
  • Click on Refresh Firefox to restore your browser settings.

Remove Malicious Homepage Infected By Ransom_ENYBENY.THAABFAH

  • Open Mozilla Firefox browser >>> click on menu (☰) icon >>> Navigate to “Options” >>> Select “General”.
  • Under “When Firefox start” option >>> Click on “Show my home page” >>> enter you desired URL address for homepage to replace malicious homepage created by Ransom_ENYBENY.THAABFAH.

Reset Default Search Engine

Open Mozilla Firefox browser >>> click on magnifying glass located in the “Search bar” on your toolbar >>> click on “Change Search Settings” option.

Choose your Default Search Engine from “Search Preferences” window.

Well, Edge does not include extensions hence users will have to clear your browsing history and undo all changes made by Ransom_ENYBENY.THAABFAH virus in your web browser.

Clear Browsing Histrory

  • Open Edge browser and click on More (…) icon to open Browser Menu.
  • The drop-down menu will appear, click on Settings.
  • Click on Choose What To Clear option.
  • Make the selection and click on Clear button.

Reset Search Engine

  • Open Edge browser then click on More (…) icon and select Settings.

  • Click on View Advance Settings option.

  • Click on <Add New> option to reset default search provider.

  • Now enter your desired search engine and hit Add as Default button.

Remove Malicious Extension

  • Open browser >>> click Tools menu >>> select Manage Add-ons option from drop down list.
  • Go to Toolbar and Extensions from left panel.
  • Now select Ransom_ENYBENY.THAABFAH and click disable tab.

Reset Internet Explorer Setting

  • Open Internet Explorer >>> Click on “Tools” menu >>> “Internet option”.
  • Choose “Advanced tab” and hit “Reset” button.
  • Click on “Delete personal settings” check box and hit on “Reset” button.

Reset Malicious Home Page

  • Open Internet Explorer >>> click on Tools icon >>> navigate to “Internet Options” from the menu.
  • Click on General >>> Under “Home page” section >>> enter the URL of your desired homepage >>> click on “Apply” button and tap “OK” to save your changes.

Set Desired Homepage In Internet Explorer

  • Open Internet Explorer >>> hit the Tools icon to open browser menu >>> Click on “Manage Add-ons” option from drop down list.
  • Click on “Search Providers” select your default search provider >>> click on the “Set as default” button.


Part 3 :- Kill Ransom_ENYBENY.THAABFAH Related Process Via Windows Task Manger

  • Press Ctrl+Alt+Del buttons simultaneously to open Windows Task Manager.


  • Select Process tab to see all running process in your PC.


  • Select all malicious process related with Ransom_ENYBENY.THAABFAH and click End Process option.

End Process

Part 4 :- Uninstall Ransom_ENYBENY.THAABFAH From Control Panel

  • Click on Start button and select Control Panel from Start Menu.

Windows XP

  • Click on Uninstall a program option.

  • From the list of all program select and remove Ransom_ENYBENY.THAABFAH.

  • Click on Windows icon and select Control Panel option.

Windows 7 & Vista

  • Go to Programs section and choose Uninstall a program option.

  • Now select Ransom_ENYBENY.THAABFAH from all programs list and click Uninstall tab.

  • Turn the cursor to lower-left corner of your system screen and click Start button.

Windows 8 & 8.1

  • Now search for Control Panel in the search box and then click Control Panel.

  • From the list of all programs select Ransom_ENYBENY.THAABFAH and hit Uninstall tab.

  • Go to Start and click on Setting icon.

Windows 10

  • Under Setting page click on System option.

  • Here click on Apps & Features option.

  • From the list of all programs choose Ransom_ENYBENY.THAABFAH and hit Uninstall tab. Confirm the action if asked.

Part 5 :- Remove Ransom_ENYBENY.THAABFAH From Registry Editor

  • Press “Windows + R” button together on your keyboard.

  • Type “regedit” and click on OK button to open Registry Editor.

  • Find and delete all malicious registry entries created by Ransom_ENYBENY.THAABFAH virus.

Uninstall Ransom_ENYBENY.THAABFAH From PC

Malicious Registry Keys Created by Ransom_ENYBENY.THAABFAH

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msmpeng.exe “Debugger” = ‘svchost.exe’

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msseces.exe “Debugger” = ‘svchost.exe’



HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnOnHTTPSToHTTPRedirect” = ’0′

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings “WarnOnHTTPSToHTTPRedirect” = ’0′

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore “DisableSR ” = ’1′

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ekrn.exe “Debugger” = ‘svchost.exe’

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msascui.exe “Debugger” = ‘svchost.exe’

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “3948550101?

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “xas”


Prevention Tips To Avoid Ransom_ENYBENY.THAABFAH In Future

After using the above methods careful you should not have any problem while removing Ransom_ENYBENY.THAABFAH virus from your PC. However, it is important to know for the users of these kind of attacks are very common nowadays. It is very much possible that your system may get infected again with some other malware and hence you need to be very careful. Well, we all know prevention is always better than cure. Hereby, it would be quite sensible for users to follow essential prevention steps in order to keep your PC safe and healthy for a long run.

  • Avoid downloading freeware application or updates from any unauthorized websites.
  • Users must not click on any misleading and fake advertisement.
  • Try to avoid visiting malicious or pornographic websites.
  • Keep your system and all important program updated.
  • Download updates from authentic and official websites.
  • Always keep and updated and powerful anti-malware tool in your PC.
  • Scan your PC for hidden threats, malware and viruses on regular intervals.
  • Do not use any external USB drives in your PC without scanning.
  • Select custom installation process to install any software in your PC and avoid bundled malware and PUP.
  • Avoid any spam emails from unknown sender as it often carry any malicous attachments.
  • Avoid using any open or public wife network.

Ransom_ENYBENY.THAABFAH Removal Guide

Leave a Comment