pceu trojan

[swannie]

Hi,
Despite PCTIS actively running our PC has been infected by this trojan which says it is the police and asks for €100. Does anyone know how it can be eliminated? All searching online so far has very complex solutions involving deleting Registry entries etc. Any suggestions welcome.

[haapy]

swannie,

Try this
http://www.bleepingcomputer.com/forums/topic443938.html

When done, use this little tool to keep your critical browser components updated.
https://browsercheck.qualys.com/

[swannie]

Thanks a lot, haapy - I'll give it a go tomorrow if I can get anything to download.

I haven't been around for a while - nice to see an 'old' face!

[haapy]

Ditto. However, you could have left the word "old" out.

Let me know how it goes.

[swannie]

Well, I did put it inverted commas!!! meaning young but experienced

And thanks a lot it worked like a charm. I had done the scan with MBAM but had forgotten to do the update first but reading through the post jogged my memory. So all is well.

PS My Signature is well out of date but I can't for the life of me work out how to update it - another sign of senility!

[Chomas]

Well, I did put it inverted commas!!! meaning young but experienced

And thanks a lot it worked like a charm. I had done the scan with MBAM but had forgotten to do the update first but reading through the post jogged my memory. So all is well.

PS My Signature is well out of date but I can't for the life of me work out how to update it - another sign of senility!

Hello swannie Nice to see You,
How change signature:
- Go to your setting (It is located next to the logout button.)
- My Settings-->Edit Signature. Enjoy

Best Regards

Mikołaj

[haapy]

Excellent!

One other thing about MBAM... if you get a gnarly peice of malware, try running chamelion.

http://helpdesk.malwarebytes.org/ent...fected-systems

http://helpdesk.malwarebytes.org/ent...nfected-system

Also you can set the update reminder to less than 7 days by modifying the settings.

Stay well.

[Hermit]

For manual removal, Microsoft has published an easy-to-follow procedure.

http://www.microsoft.com/security/po...#recovery_link

If you are affected by this trojan, you may need to perform the following instructions to manually remove it:

1. Press CTRL+O

2. In the dialogue box that opens, type the following as is, then press Enter:
cmd.exe

3. In the command prompt window, type the following as is, then press Enter:
cd "%USERPROFILE%\Start Menu\Programs\StartUp"

4. Still in the command prompt window, type the following as is, then press Enter:
del *.dll.lnk

5. Still in the command prompt window, type the following as is, then press Enter:
shutdown -r -t 0

[swannie]

Thanks, I knew it was simple but do you think I could find it!

[swannie]

Luckily this was the Greek version of this trojan and it was not as sophisticated as The Metropolitan Police one. It didn't block me from Safe Mode and was easily removed with MBAM. But next time I may not be so lucky - so I'll be taking note of all this advice.