Ransomware

[Mikey]

Not really a request for help but a head up for everyone out there.

 

This morning I was browsing for torrents when my PC automatically locked itself and a screen appeared 'Pc-eu crime unit' Ofcourse I have had this once before and had to remove it from my mothers laptop only last month. It's a real pain in the ass and not the simplest thing to get rid of if you are not so good with computers (imo).

 

It looks like this:

 

 

Or sometimes this, aswell as other forms:

 

 

It's called 'Ransomware' for those who may not know. It locks your computer rendering it useless as task manager wont even start, and then says something like 'Pay £X to unlock this computer' as you can imagine a lot people probably do pay it only to be stung with the fact it's a scam and wont unlock after paying.

 

How to get rid of this?

 

• Remove all floppy disks, CDs, and DVDs from your computer, and then restart your computer.
• Press and hold the F8 key as your computer restarts.Please keep in mind that you need to press the F8 key before the Windows start-up logo appears.
  Note: With some computers, if you press and hold a key as the computer is booting you will get a stuck key message. If this occurs, instead of pressing and holding the “F8 key”, tap the “F8 key” continuously until you get the Advanced Boot Options screen.
• On the Advanced Boot Options screen, use the arrow keys to highlight Safe Mode with Networking , and then press ENTER.
  
• If your computer has started in Safe Mode with Networking, you’ll need to perform a system scan (as seen on STEP 2) with Malwarebytes Anti-Malware and HitmanPro to remove the malicious files from your machine

 

 

Method #2

 

• Restart your computer, and then press and hold F8 during the initial startup to start your computer in safe mode with a Command prompt.
  Note: With some computers, if you press and hold a key as the computer is booting you will get a stuck key message. If this occurs, instead of pressing and holding the “F8 key”, tap the “F8 key” continuously until you get the Advanced Boot Options screen.
• Use the arrow keys to select the Safe mode with a Command prompt option.
  
• At the command prompt, if you are using Windows Vista, 7 or 8 type C:windowssystem32rstrui.exe , and then press ENTER.
  If you are using Windows XP, you will need to type C:windowssystem32restorerstrui.exe, and then press ENTER.
  
• The System Restore utility will start, and you’ll need to select a restore point previous to this infection.
  
• After System Restore has completed its task, you should be able to boot in Windows normal mode, and perform a system scan (as seen on STEP 2) with Malwarebytes Anti-Malware and HitmanPro to remove the malicious files from your machine.

Failing that, Method #3

 

Method 3: Remove PCeU lock screen with msconfig utility

When your computer was infected with the PCeU virus, this trojan has set a its malicious files to start whenever your computer is booting. IF you didn’t have a restore point, we can use msconfig to remove it’s malicious start-up entry.

• While your computer is in Safe Mode with Command Prompt, type msconfig to start the Windows System Configuration utility.
  
• Click on the Startup tab, then search for any suspicious or unknonw entries (random numbers or letters, ctfmon.exe, and other suspicious or unknown entries), and unckech them from startup, then click on OK.
  This will stop the PCeU virus from starting with Windows, however it won’t remove the malicous files from your computer.
  
• Type shutdown /r in the command prompt to restart your computer, then  perform a scan with Malwarebytes Anti-Malware and HitmanPro as seen on STEP

 

 

The reason I'm posting this is because it seems to be becoming very common as a few of my friends know about it it too fortunately they knew how to remove it.

 

- Mikey

 

 

[mademan]

Pornography?Serious?You were caught Mikey...LMFAO

[BiLLaBoNg]

o.O Those pics though... LOL

[BillieJoe67]

Burn it Mikey, burn it with fire

[f1r3st0rm]

ahaha that's owned, sucks living in UK for now

[Mikey]

Those aren't screenshots from me they were ones i got from google, i'm not sure if its just in the UK it happens but haven't heard of any others up to now

[ChriS]

?

[Cronus]

It happened to one of my co-workers sisters. We were eating dinner after being out of town for awhile. His sister called panicking saying her laptop is locked and the screen said she had to pay X amount of $$ because she had been pirating music. We had a big laugh over it lmao

[Feda]

Well done.

[WNxM45T3R]

Well done mikey, i was only talking about this the other nite, and reading up how to remove it incase it happens to someone in our community.

 

BTW WNxDestroyer had it happen to him about 6 weeks ago, the FBI said they found animal pr0n and stuff I think.

[BillieJoe67]

Three cheers for Mikey

[Mikey]

Well done mikey, i was only talking about this the other nite, and reading up how to remove it incase it happens to someone in our community.

 

BTW WNxDestroyer had it happen to him about 6 weeks ago, the FBI said they found animal pr0n and stuff I think.

 

It's ridiculous some of the things they put on there, the one on my mums laptop said she was sending terrorism messages its nuts!

 

Aslong as it can be removed all is well i guess

[Volcom]

Well done mikey, i was only talking about this the other nite, and reading up how to remove it incase it happens to someone in our community.

 

BTW WNxDestroyer had it happen to him about 6 weeks ago, the FBI said they found animal pr0n and stuff I think.

They weren't lying. He is into some weird shit.