Trojan:Win32/Urausy.C

This virus pops up with a dialogue box saying that your computer has been locked because you were viewing adult material that potentially breaches the Obscene Publications Act in the U.S., your computer contains images of child abuse, and so on. This virus holds your computer ransom till you send them money through MoneyPak. (When they get the money they won’t unlock it!) Here are the REAL instructions for removing this nasty virus.

Step One: Tap the F8 key on your keyboard to boot into Safe Mode with Command Prompt.

Safe mode with Command Prompt

Step Two: In command prompt type explorer .

Type Explorer

Step Three: Browse to drive C:\Users\<YourUsername>\AppData\Roaming. Once in the Roaming folder you will find a file named skype.dat and skype. These files are the viruses that start when your computer boots up. Select those two files and delete them permanently.(Make sure to remove them from your recycle bin). (Revision) 7/19/2013 You may also find a windows update and/or a defender file. Remove them also. Reboot.

Virus Spotted

Step Four: Boot into Windows normally and run a scan for viruses with Malwarebytes, Microsoft Security Essentials and SuperAntiSpyware. Run these scans till they return clean. After they return clean you will be virus-free and back in business!

Trojan:Win32/Urausy.C

Thank you for reading this post. If this helped you please leave a comment.