Help please - Ransom Trojan

maccaz

Hi
I'm at my friends computer, I'm on my laptop.
He is getting a message on startup saying he has to pay €100 to get a password to unlock his computer. I can't seem to get passed it.

Can someone help?

crazyguy

RussJK

Is the message before or after Windows loads?

Could you post a picture of it? Or write out the message in full?

It's possible to track down the unlock code for ransomware, although it's just as easy to make a bootable antivirus CD and fix it that way:
https://forums.moneysavingexpert.com/discussion/comment/41653210#Comment_41653210

In this case I'd recommend Panda, Dr Web, or Kaspersky.

santer_2

One option

There are a number of these, which start to work before the operating system loads

This one has details for getting and using it

http://support.kaspersky.com/viruses/rescuedisk

Others here

http://www.google.co.uk/search?q=rescue+cd&ie=utf-8&oe=utf-8&aq=t&rls=Palemoon:en-US:official&client=firefox-a

maccaz

Can get a picture but this is what it says (word for word). This comes up before windows loads.

COMPUTER IS LOCKED

Your computer is locked because of using the unlicensed software.

To unlock the computer you have to pay 100 Euro penalty.

You should buy UKASH check to pay the penalty
and send SMS with a code to phone number +1(832)532-6003.

You can get UKASH at over 50,000 UK locations having either PayPoint, PAYZONE and/or EPAY payment terminals.

As soon as UKASH check will be verified you will receive SMS with an unlock code for your computer.

If your computer was not unlocked within 24 hours all the data are deleted from it.

crazyguy

I think your mate has been doing to much of this,

RussJK

The data wiping part is false, just FYI.

Interesting, that phone number is a Houston, USA number. Usually these ransom.wares are East European. Someone else has a similar one as you:


But I don't have a code for it unfortunately. Just run an antivirus rescue disc, and you'll be sorted

RussJK

Bit unfair your friend has to pay 100 euros, and the other bloke only 50 - these fines all seem so arbitrary

spud17

RussJK wrote: »

Bit unfair your friend has to pay 100 euros, and the other bloke only 50 - these fines all seem so arbitrary

That's inflation for you. We are living in uncertain times.

JH1970

RussJK - its my PC that Maccazz was working on last night. Yes that is the screen I get when I start up the PC. It appears before startup is finished (before it even gets to my password login screen). Cant get into safe mode neither because of it

rhythmsoup

I just replied to another post similar to this. I would recommend you backup your data before attempting any repair. I made a post a while ago which might help you:

https://forums.moneysavingexpert.com/discussion/2359753

Thanks