Date: Thu, 27 Sep 2012 05:13:32 -0700 (PDT) From: calcrea To: 091labs-public@googlegroups.com Message-Id: In-Reply-To: References: Subject: Re: ransomware in Irish MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----=_Part_268_24951130.1348748012939" ------=_Part_268_24951130.1348748012939 Content-Type: multipart/alternative; boundary="----=_Part_269_23916693.1348748012939" ------=_Part_269_23916693.1348748012939 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Thanks guys, I'll be bringing it with me to the labs. Gotta go meet katie= =20 there now actually lol. On Thursday, September 27, 2012 12:55:37 PM UTC+1, calcrea wrote: > > Hey guys, got phoned this morning by the old man, his laptop has been=20 > taken over by a virus that just displays an official looking Irish langua= ge=20 > page. basically it demands =E2=82=AC100 to unlock the comp. Tried to remo= ve it but=20 > cmd prompts and safe mode won't start so Im stumped. Anyone been hit by= =20 > this or know how to remove it? Thanks :-) ------=_Part_269_23916693.1348748012939 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable Thanks guys, I'll be bringing it with me to the labs. Gotta go meet katie t= here now actually lol.

On Thursday, September 27, 2012 12:55:37 PM U= TC+1, calcrea wrote:
Hey guys, = got phoned this morning by the old man, his laptop has been taken over by a= virus that just displays an official looking Irish language page. basicall= y it demands =E2=82=AC100 to unlock the comp. Tried to remove it but cmd pr= ompts and safe mode won't start so Im stumped. Anyone been hit by this or k= now how to remove it? Thanks :-)
------=_Part_269_23916693.1348748012939-- ------=_Part_268_24951130.1348748012939--