PCeU your computer has been locked

Old_Git

my mate was watching westham on his laptop .I dont know what site but it was new to him .
he got a message on screen from PCeU saying "your computer has been locked "
and he has to pay £100 to unlock .It even gives an ip address (poss his ) .This comes up everytime he logs on .
How do we fix this .The webcam has come on to make it look like he is being watched

closed

http://www.filehippo.com/download_malwarebytes_anti_malware/

https://support.kaspersky.com/viruses/rescuedisk

gb12345

He hasn't got a message from PCeU, he has a virus (probably from going to dodgy sites to watch the footie).

Download and run the programs closed has linked to.

Willing2Learn

Old_Git wrote: »

my mate was watching westham on his laptop .I dont know what site but it was new to him .
he got a message on screen from PCeU saying "your computer has been locked "
and he has to pay £100 to unlock .It even gives an ip address (poss his ) .This comes up everytime he logs on .
How do we fix this .The webcam has come on to make it look like he is being watched

PEeU is ransomware. The program wants you to pay a recipient money to regain access to the system. Once payment is received it allows access again but will return at another date to extort more money.

• Get your friends to follow the links given by close
• If that doesn't work then follow the PCeU removal guide here.
• If that doesn't work then your friend should start a thread on Bleeping Computers and one of their Malware Response Team will provide support and instructions for removal. Here is an example of the type of support given (don't follow that thread instructions as the instruction are specific to the users configuration/software.)

It is likely that your friend has not been keeping their system secure. Advise them to ensure their Operating System always has the latest updates and that they have firewall/antivirus/spyware software installed with the latest definitions. I don't believe Microsoft Security Essentials will provide satisfactory security imho.

waddler_8

Willing2Learn wrote: »

• If that doesn't work then your friend should start a thread on Bleeping Computers and one of their Malware Response Team will provide support and instructions for removal.

Whilst there's nothing wrong with Bleeping Computer's excellent support, should the OP not wish to register at another forum we can offer the same help right here.

One example: https://forums.moneysavingexpert.com/discussion/comment/58182899#Comment_58182899 Post #20 onwards.

gaby13

The reason of the PCeU virus is a notorious Reveton Trojan. It has different "faces" for every single country: USA (FBI Moneypak), Germany (BundesPolizei) etc. To remove it use System Restore or (if you don't have restore point or can't enter into the system with a Safe Mode) - use bootable CD/USB drive with reliable antimalware.