Ukash PCEU Virus

[Darkdinn]

Hey guys

So my desktop only just got hit by this Virus/malware today and I'm currently in the process or trying to get rid of it, however I'm finding it to be quite troublesome to find the files associated with the virus/malware. I could do a full system restore however it would be much more preferable if that wasn't the case due to the hassle of having to reinstall all my previous software.

This is the virus/malware in question (Ukash PCEU?)
http://guides.yoosecurity.com/how-d...ice-ukash-virus-pceu-that-locked-my-computer/

I'm able to access all the safe mode options but cannot boot the computer normally due to the Virus/malware.

If anyone else has had a similar experience or could help me with this issue that would be great thanks.

 

[vorticalbox]

Can you tried comodo cleaning essentials? That's pretty good at clearing stuff.

You could also post a hijackthis log to paste bin and I will have a look for you.

 

[Feronix]

See if you can create a bootable disc with Kaspersky v10 on it (look it up if you don't know what it is). You can then scan for malware items and remove them.
http://malwaretips.com/blogs/remove-police-trojan/#kaspersky

You can try a similar method with a HitmanPro Kickstart USB:
http://malwaretips.com/blogs/remove-police-trojan/#hitmanpro

If those don't work, then I guess you're going to have to do a system restore mate

 

[Snortan]

I've encountered that virus once. What I did was google for "Ukash PCEU virus removal " and followed their steps. I can't remember which tutorial was it, but this looks like a good start.

 

[Lazlo]

Try kasperksy WindowUnlocker. It's especially aimed at ransomware. A colleague of mine was able to save the family notebook with this. There are detailed instructions what to do on this page:

http://support.kaspersky.com/8005?el=88446#

Good Luck,
Lazlo

 

[KaraMurat]

If you follow these steps you should be able to remove the virus, I've removed multiple versions of this virus with this method.

1)Boot into Safe Mode with Networking
2)Download Malwarebytes Anti-Malware, RKill(Rootkit Killer) & Combo Fix
3)Run Malwarebytes Anti-Malware (quick scan) then restart and run RKill (still in safe mode w/networking), then run ComboFix (in safe mode w/networking) and restart to see if your computer is fine.

Hope this helps.

(Btw if you do have any important data, I'd suggest backing them up asap as a precautionary measure).

 

[gonzo]

This virus is one of the reincarnations of the notorious scam - Reveton Trojan.
Analysis and removal process are here.