Windows Problems Help Center

Sunday, December 28, 2014

Remove - Completely Get Rid of

Recently, many computer users have complained that their computer has been infected with

Hi, I have a ransomware which says, "The page at says: ATTENTION! Your computer (or mobile device) has been blocked up for safety reasons. AUDIO AND VIDEO RECORDING IN PROGRESS. Amount of fine is £100. You can pay a fine Ukash or PaySafeCard vouchers. TYPE YOUR CODE (£100 Ukash or PaySafeCard). AND PRESS OK."

I was trying to log-in to my account at the Nationwide when it appeared. Please can anyone help?

I was surfing the web and all of the sudden it pops up and it says something about child pornography (what?) and I'm scared it's a real FBI thing.

Description of is the malicious browser extension which can be classified as a ransom site. This ransom site is created by the cyber criminals to make profits by scaring the computer users to pay for the ransom. It pretends to come from the FBI department to display warning message about user's online activities. Once the computer is infected with, it is capable to change the browser setting and replace the default homepage and new tab. When you surf the Internet via browsers like Mozilla Firefox, Google Chrome, or Internet Explorer, will pop up on your screen automatically without your permission. will state that your computer has been blocked up for safety reasons.  You need to pay a fine Ukash or PaySafeCard vouchers to unlock. However, you should not believe in the false message. This ransom site can be caused by the malware on your computer. And  it is highly recommended to scan your computer with a powerful anti-virus like Spyhunter to find out other threats and remove them.  You can follow the guide below to remove from the computer as soon as possible.

Solutions to remove   

Solution 1: Manually remove 

Step 1: Press Ctrl+Alt+Del keys together to pull up Window Task Manager and end suspicious processes:

Step 2: Disable any suspicious startup items

Windows Vista or Windows7: click start menu→type msconfig in the search bar → open System Configuration →Disable all possible startup items generated.

Step 3: Reset your browser setting

Click Tools on the up right corner and select Internet Options.
Click on Advanced tab, press Reset button to reset IE to its default settings.

In the drop-down list of Firefox, go to Help and click on Troubleshooting Information.
Click on the Reset Firefox button to reset it.

Google Chrome: 
Click on the Chrome menu on the right of toolbar and then select Settings.
Scroll down to the bottom to click Show advanced settings.
Go down to the bottom and click Reset browser settings to reset Google Chrome to its default setting.

Step 3:  Remove files of like the pictures showed:

Step 4: Go to the Registry Editor and remove all the infection registry entries listed here:

(Steps: Hit Win+R keys and then type regedit in Run box to search)

HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Safari.exe\shell\open\command "(Default)" = ""C:\Program Files\Safari\Safari.exe" http://www.<random>.com/?type=sc&ts=<timestamp>&from=tugs&uid=<hard drive id>"
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\SEAMONKEY.EXE\shell\open\command "(Default)" = "C:\Program Files\SeaMonkey\seamonkey.exe http://www.<random>.com/?type=sc&ts=<timestamp>&from=tugs&uid=<hard drive id>"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main "Default_Page_URL" = "http://www.<random>.com/?type=hp&ts=<timestamp>&from=tugs&uid=<hard drive id>"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main "Default_Search_URL" = "http://www.<random>.com/web/?type=ds&ts=<timestamp>&from=tugs&uid=<hard drive id>&q={searchTerms}"

Method  2: Automatic Removal with SpyHunter

SpyHunter is a world-famous real-time malware protection and removal tool, which is designed to detect , remove and protect your PC from the latest malware attacks, such as Trojans, worms, rootkits, rogue viruses, browser hijacker, ransomware, adware, key-loggers, and so forth. To keep SpyHunter Anti-malware on your computer is an important way to protect your computer in a good condition. Please find the instruction as follow. 

Step 1: Press the following button to download SpyHunter.

Step 2: Save the file onto your computer and click on the Run button to install it.

Step 3: After finishing the installation processes,  scan your computer to find out potential threats.

Step 4: Tick Select all and then Remove to delete all threats.

Guide to download RegCure Pro to optimize PC 

If you are still worried about the left over of and want to clean all the unwanted registry entries,  it is recommended to use RegCure Pro.

Step 1. Install and launch RegCure Pro on your PC.

Step 2.  Select "Yes" to download and install RegCure Pro.


Step 3. Click "Next" to continue.

Step 4. RegCure Pro will open automatically on your screen.

RegCure Pro

 Step 5. RegCure Pro is scanning your PC for error.

 RegCure Pro2

Step 6. After scanning, choose the issues you want to fix. 


Note: Manual removal is a huge process and a risky method to cause irreversible man-made damage to your computer. If you don’t have sufficient expertise in dealing with the manual removal. You can download and Install Spyhunter to detect and remove viruses. You can also Download RegCure Pro to help you clean up unwanted registry entries and files to optimize the computer.

No comments:

Post a Comment