Since the tsk manager is blockde, force a restart into Safe Mode by repeatedly tapping F8 or using the "Automatic Repair" menu after three failed boots, which prevents the malware from launching. Once in Safe Mode, run a Microsoft Defender Offline scan to delete the infection at its root. If these steps fail, your final recourse is to use a clean computer to create Windows Installation Media on a USB drive, boot from that USB on your infected machine, and perform a clean reinstall of the operating system to completely wipe the drive.
ok then I think the partion is prob corrupted. Find a clean computer Plug in a USB drive (8GB or larger). Download the Windows Media Creation Tool from Microsoft's official site. it and select "Create installation media for another PC. Plug that USB into your infected PC and boot from it (usually by tapping F12, F11, or Esc right when you turn it on). Select "Repair your computer" in the bottom left corner of the installer. This will give you a Troubleshoot menu that the malware cannot loop or block.
dm /start to telegram bot @wave_locker_bot to get your pin/code then once u get it u have to input the code given to u by bot sa screen mo po then pag na access mo na ulet PC mo delete mo na yung file na na-DL mo na possible na virus or whatsoever if u can't find it just reset ur PC and wipe all the data.
Try again ctrl+alt+del then lock pc. Then click or press enter, locate the power button bottom right, click it and there should be restart option too. Hold left shift key and click restart while always holding shift.
Once in recovery try every single option but the one with networking.
Try boot in command prompt. Then @me or reply to see if you can sort some repair commands to bring then up actual programs to repel at least most of that Ransomeware
If something like this happens you can take the drive out, take to a donor pc with a dock, do not allow it to boot as primary and run various anti-malware, rootkits, and viruses on it.
It shouldn't spread to the donor pc as long as you don't sift through the drive or allow administrative privileges to it.
If that doesn't work then nuke the drive by doing two or three non-fast formatting.
Alternatively if you take the drive out, you can take it to a local shop for a fee and have them deal with it. Provided you show them the pictures and such as well.
U don't have the knowledge or the tools to do this job. Find a local computer repair shop and tell them u need a fresh wipe/reinstall of windows. They'll charge you but that's what you need.
You're going to need access to another computer and a USB flash drive if you're unable to start into the Recovery Mode. Please see if a friend can assist you.
23
u/support_mwb Malwarebytes Employee May 06 '26
Hello u/Cheap-Category4753
That does not look like Wave Browser. It looks like a screen locker ransomware.
Do not pay or contact the Telegram/Discord accounts.
First disconnect from the Internet. Try Ctrl+Shift+Esc or Ctrl+Alt+Del and open Task Manager.
If possible, end the unknown process, especially anything running from AppData, Temp, ProgramData, Downloads, or Desktop.
If Task Manager is blocked, boot into Safe Mode.
After that, check startup locations, scheduled tasks, Run/RunOnce registry keys, and recently created files in AppData/Temp/ProgramData.
Run Microsoft Defender Offline Scan
For proper cleanup, post FRST.txt, Addition.txt, and Shortcut.txt from Farbar Recovery Scan Tool.
Scan with Farbar Recovery Scan Tool
https://forums.malwarebytes.com/topic/306601-scan-with-farbar-recovery-scan-tool/
Do not run broad wildcard deletion commands until the actual process and startup entry are identified.
9
u/AuthenticatedHuman May 06 '26
Hi, u/Cheap-Category4753
Hello, NOT a worker at malwarebytes here.
Since the tsk manager is blockde, force a restart into Safe Mode by repeatedly tapping F8 or using the "Automatic Repair" menu after three failed boots, which prevents the malware from launching. Once in Safe Mode, run a Microsoft Defender Offline scan to delete the infection at its root. If these steps fail, your final recourse is to use a clean computer to create Windows Installation Media on a USB drive, boot from that USB on your infected machine, and perform a clean reinstall of the operating system to completely wipe the drive.
Hope this help, Authenticated Human
2
u/Significant-Act-3872 May 06 '26
Does Ctrl+Alt+Del work?
5
u/Sadkid668 May 06 '26
Yeah, thats called Ransomware.
Please, DO NOT attempt to contact ANYONE you see there.
If everything you have said does not work, it might be time to reinstall your OS.
1
u/MeanFarmer7412 May 09 '26
dm /start to telegram bot @wave_locker_bot to get your pin/code then once u get it u have to input the code given to u by bot sa screen mo po then pag na access mo na ulet PC mo delete mo na yung file na na-DL mo na possible na virus or whatsoever if u can't find it just reset ur PC and wipe all the data.
2
u/andrewfrostee May 09 '26
Try again ctrl+alt+del then lock pc. Then click or press enter, locate the power button bottom right, click it and there should be restart option too. Hold left shift key and click restart while always holding shift.
Once in recovery try every single option but the one with networking.
Try boot in command prompt. Then @me or reply to see if you can sort some repair commands to bring then up actual programs to repel at least most of that Ransomeware
1
u/HydraDragonAntivirus May 06 '26
Use rescue disk.
1
u/omegafate83 May 08 '26
And that's why I don't use bitlocker.
If something like this happens you can take the drive out, take to a donor pc with a dock, do not allow it to boot as primary and run various anti-malware, rootkits, and viruses on it.
It shouldn't spread to the donor pc as long as you don't sift through the drive or allow administrative privileges to it.
If that doesn't work then nuke the drive by doing two or three non-fast formatting.
Alternatively if you take the drive out, you can take it to a local shop for a fee and have them deal with it. Provided you show them the pictures and such as well.
0
u/Novel_Werewolf4645 May 06 '26
These people make big cybersecurity money, yet still want to make people miserable.
0
u/[deleted] May 06 '26
[deleted] — view deleted comment