I got a crazy virus that locked up my computer and I cannot use my laptop anymore. That is really freaking me out and I got it from a malicious ad on a website that I accidentally clicked on. The ad brought me to a porno page and then this virus popped up saying: Your Internet Service Provider Is Blocked. PCEU asked me to pay £100 to unblock computer with Ukash. I searched Internet and found it was a scam. But I still have no idea on how to get rid of this Ransomware. I did try Ctrl+Alt+Delete command and still have the PCEU virus appear. What should I do now? Any help will be appreciated.
‘Your Internet Service Provider Is Blocked’ is a fake alert associated with the notorious PCEU Virus which is mainly used to attacks computer users located in United Kingdom. If you have this fake message taken over on your computer screen, don’t be panic because this alert has nothing to do with the real police or any government authorities. It is a virus designed by the greedy hackers who are attempting to get users to send them money and then get their personal information. Now this type of Ransomware is widely distributed by malicious websites, free programs, and spam emails. It is prone to attack computers systems like Windows 7, Vista, XP, and even for Windows 8.
Being as another member from Win-locker family, it takes over your screen as soon as it is downloaded. It blocks your access to desktop, task manager and then displays many fake and exaggerated information instead to mislead users. It claims ” The work of your computer has been suspended on the grounds of unauthorized cyberactivity.” and then shows your IP address logs of your Internet provider. Furthermore, it falsely accuses the computer owner has been used the computer for doing something illegal so that PCEU detect it from the IP address of that PC. Everything is pretended as if it is a letter from the UK Police to blame those unruly users and then ask them to pay a fine for punishment. Although this message seems to be legitimate because careful users may notice that at the last signature it says it is sent by Press Service of PCEU, www.met.police.uk. You have to remember all the information showing on the Your Internet Service Provider Is Blocked virus page are not real. It is a big scam and paying £100 will not help to remove this computer lock.
As we can see, this type of virus attacks computer by showing fake notification which claims that the target computer is involved in the viewing pornography or violating Copyright and Related rights Law and then it takes advantage of users’ panic to further ask payment. The clearest sign that you are infected with this virus is system’s lock down and a full-screen alert claiming ‘Your Internet Service Provider Is Blocked!’. Just ignore this fake alert and take immediate measure to get rid of the PCEU Ransomware as quickly as you can to ensure the computer security now.
It will take control of your computer rapidly once it is downloaded.
It will pretend itself as a legit warning and then ask for a ransom.
It can disable your task manager and even pop up in safe mode.
It can connect to a remote IRC server and forward the data to cyber criminals without a computer user’s awareness.
It can’t be simply uninstalled or removed in control panel.
Since ‘Your Internet Service Provider Is Blocked’ message has completely locked up your computer making you difficult to gain access, you will need to manually remove it instead of using antivirus programs to do so. Also, antivirus programs cannot completely catch this virus. Otherwise, it would have caught it at the beginning when this malware tries to sneak inside. Below are some basic steps on how to get rid of this virus manually. However, due to the changeable characters of this virus, you may not find the exact same files or entries to delete. That’s also why the manual removal requires expertise to do it. You will need to go through files and entries under different locations to define and delete. Any mistake could lead to unpredictable problems during the process. Thus, a backup of important files and programs is suggested before ‘Your Internet Service Provider Is Blocked’ virus removal. A flash drive or external hard drive will be needed.
1. Since you cannot gain access to the infected computer under regular mode because of the PCEU virus lock screen, please restart the computer and put it in Safe mode with Networking first. Here’s the guide: Restart the computer upon the locking screen and start hitting F8 key repeatedly when PC is booting up again; if successfully, Safe mode options will show up on the screen for you to select. Please use arrow keys to highlight Safe mode with Networking option and hit enter key. System will be loading files into this mode afterward.
2. Open Control Panel from Start menu and search for Folder Options. Go to Folder Options window, under View tab, tick Show hidden files and folders and non-tick Hide protected operating system files (Recommended) and then click OK.
3. Under Safe mode with Networking, please hit Ctrl+Shift+Esc (Ctrl+Alt+Delete) keys together to pull up Windows Task Manager; go to Processes tab on top and scroll down the list to find processes associated with PCEU scam and click End process.
4. Open Registry Editor by pressing Windows+R keys and pull up Run box and searching for regedit.
5. Find out and delete files and registry entries as below:
C:\Documents and Settings\<Current User>
6. Restart computer back to Regular mode and check out if the warning page still shows up again.
Your Internet Service Provider Is Blocked is a fake alert generated by the Police Central e-crime Unit virus. This virus starts to ruin your computer by displaying a huge alert that claims your computer has been locked because there has been illegal activity detected from the IP address of the PC. Be aware that the information showing on the PCEU virus page are not real, instead it belongs to Ransomware which is always designed by cyber criminals to swindle users’ money and convince the inexperienced users they have violated various laws of United Kingdom. Usually it asks users to pay a fine of 100 GBP by using Ukash so that users are not able to trace their money and get the refund until they realize it is a scam soon. Victims should keep in mind that governmental organizations have never been blocking computers with such warnings in order to collect their fines. One thing you have to pay attention on is that ‘Your Internet Service Provider Is Blocked’ message or any other message claiming from PCEU is fake. If you see this warning pops up on your screen, that means your computer is dangerously infected and you must remove the PCEU Ransomware from your computer without any hesitation.
Note: Manual removal is a skillful and risky job, if any mistakes are made in the process, you may damage your computer immediately. If you are not sure how to do, please contact YooCare PC experts 24/7 online for help right now.
Published by Sarah Poehler, last updated on November 6, 2013 4:41 am | How to Guides