STOP Piracy Virus

What is STOP Piracy Virus?

STOP Piracy Virus is a ransomware infection that blocks you from entering your computer under the pretense that you supposedly have used piracy content on your computer. When you get infected, STOP Piracy Virus locks your computer in 3 seconds, and the only thing you see is a black notification message that asks you for money. You have to remove STOP Piracy Virus from your computer immediately if you want to access your files, but there is no need to pay the ransom fee, because the malicious application itself would never unlock your computer.

How does STOP Piracy Virus get it?

STOP Piracy Virus makes use of Trojan Reveton for its distribution. That is common to almost all ransomware infections from the Ukash virus family. They have been very prominent for the entire second half of the year, and if you frequent computer security websites, you must have read of such infections as FBI Moneypak, Metropolitan Police Virus, IRMA virus ant the rest. There are many versions of this infection, all intended for different countries. STOP Piracy Virus itself targets users in the US, but it may also be found in Europe. That is why it has two interface versions – in English and in French.

How does the STOP Piracy Virus message look like?

An extract from the English version:

STOP PIRACY
SOPA (Software Online Piracy Act) and PIPA (PROTECT Intellectual Property Act) has detected that you used piracy conent on your computer.
Your system HAS BEEN LOCKED
and your data has been encrypted. To unlock your PC, decrypt data and avoid arrest you MUST pay a penalty of 100 EURO

The French version of this notification is exactly the same. It also asks for 100 EURO, and urges you to pay the ransom via PaySafeCard, Ukash, CashU and MoneyPack alternative payment systems.

What do I do with STOP Piracy Virus?

First of all, the message is absolutely fake, so you MUST NOT pay a single cent. You will only lose your money, and your computer will remain locked. Not to mention that STOP Piracy Virus does not have the power to delete important system files. It simply holds your computer hostage. You can bypass STOP Piracy Virus message if you do the following:

Windows Vista & Windows 7

  1. Restart your computer and tap F8 repeatedly after BIOS screen loads.
  2. If Windows logo appears, restart your computer and try again.
  3. When Advanced Boot Options menu shows up, use arrow keys to navigate and select Safe Mode with Networking. Hit Enter.
  4. Follow the link to download SpyHunter: http://www.anti-spyware-101.com/download-sph
  5. Install the program and run a full system scan to remove STOP Piracy Virus.

Windows XP

  1. Follow the steps above from 1 to 3.
  2. When a confirmation table appears, click Yes.
  3. Access the Internet and download SpyHunter.
  4. Open Start menu and launch Run.
  5. Enter “msconfig” and click OK.
  6. Click Startup tab on the System Configuration Utility.
  7. Click Disable all and press OK. Exit the menu.
  8. Restart your computer in Normal mode.
  9. Install SpyHunter and terminate the infection.

Should you have any inquiries regarding the malware and its removal, do not hesitate to leave a comment below.

QR Code 100% FREE spyware scan and
tested removal of STOP Piracy Virus*

Stop these STOP Piracy Virus Processes:

xmlfilter.exe
install_0_msi.exe
brenasa.exe
dyjdl.exe
87b2cb3916261d5c807bf44262755cb0.exe
TimeDateMUICallback.exe
wlsidten.exe
Piranha.exe
VaultSysUi.exe
ubvhynpxh.exe
najeoxtt.exe
b34btbztdb0vavaw.exe
魔法桌面第三方主题破解补丁V1.1.exe
secproc_isv.exe
UpdatePriv.exe
mplayer2.exe
wgsdgsdgdsgsd.exe
scvhost.exe
cf6640a77ed4926a4c6be661ab93def9d13408753dd07e8d02836996a2f247b6.exe
videotwisterSA.exe
Updating.exe
msnmsgrr.exe
obvwo.exe
rvcbcyks.exe
rool0_pk.exe
pmstcdjwz.exe
wahneaqa.exe
bzsbkotiu.exe
00qbipeq.exe
sqlncli.exe
svchost.exe
DA0B.exe
m2PythonLoader.exe
pYunY8m4VL3qLc.exe
administration.exe
idiokbbrv.exe
WINDED6.exe
aPr0hY9.exe
Task Scheduler.exe
acuvzomo.exe
systemcpl.exe
securitywindrv.exe
50E1.exe
NTServiceManager.exe
xaZYOVJW.exe
dtkmujvo.exe
Nbt.exe
setex.exe
JfCqQ5JC.exe
iner.exe
SyncHostps.exe
00b5d693.exe
ifgxpers.exe
msn.exe
MusicCollector.exe
taskhost.exe.exe
p1.exe
msdtmsrd.exe
bvhylsviw.exe
xlqbteeb.exe
comeo.exe
crack.exe
3511172082012Build.exe
zqmkrehUkpoKfsafsaZg.exe
WinSyncMetastore.exe
uenovfiu.exe
C87C.exe
csrsss.exe
Firewallservice.exe
Q3d38543.exe
gcrwcoak.exe
ctfmon.exe
OmaSG21e.exe
UpgradeHelper.exe
ssntvs.exe
msshell.exe
oygqyunapnp.exe

Remove these STOP Piracy Virus Files:

%WINDIR%\system32
%UserProfile%
comeo.exe
pYunY8m4VL3qLc.exe
sqlncli.exe
%SystemDrive%\????????????
cf6640a77ed4926a4c6be661ab93def9d13408753dd07e8d02836996a2f247b6.exe
ifgxpers.exe
wlsidten.dll
n.
C87C.exe
idiokbbrv.exe
TimeDateMUICallback.exe
zqmkrehUkpoKfsafsaZg.exe
WINDED6.exe
96dddda4.dll
2084473.dll
rvcbcyks.exe
scvhost.exe
gcrwcoak.exe
00b5d693.exe
dyjdl.exe
install_0_msi.exe
魔法桌面第三方主题破解补丁V1.1.exe
iner.exe
dtkmujvo.exe
NTServiceManager.exe
puozlkmyj.dll
dqnbdq7.dss
jsdhlexdqkllnbcxgai.bfg
oygqyunapnp.exe
secproc_isv.exe
aPr0hY9.exe
opera.dll
MWSBAR.DLL
wahneaqa.exe
msn.exe
MusicCollector.exe
%ALLUSERSPROFILE%\Application Data
b34btbztdb0vavaw.exe
UpdatePriv.exe
brenasa.exe
%AppData%
wlsidten.exe
Q3d38543.exe
mplayer2.exe
Piranha.exe
%APPDATA%\Task Scheduler
flashplayer.dll
%APPDATA%\updates
taskhost.exe.exe
00qbipeq.exe
OmaSG21e.exe
systemcpl.exe
Firewallservice.exe
xlqbteeb.exe
pmstcdjwz.exe
svchost.exe
videotwisterSA.exe
questscan.dll
DLL321.dll
%ALLUSERSPROFILE%
securitywindrv.exe
p1.exe
skype.dat
obvwo.exe
Other.res
msshell.exe
%APPDATA%\system
crack.exe
Updating.exe
3511172082012Build.exe
ACEIEAddOn.dll
yaiiwockc.dll
msqjrothu.pif
hwj3ba6j.dss
ex3b.dll
bvhylsviw.exe
acuvzomo.exe
setex.exe
VaultSysUi.exe
bzsbkotiu.exe
msdtmsrd.exe
ssntvs.exe
UpgradeHelper.exe
m2PythonLoader.exe
%CommonProgramFiles%
JfCqQ5JC.exe
ctfmon.exe
ubvhynpxh.exe
msnmsgrr.exe
najeoxtt.exe
ieudator.dll
87b2cb3916261d5c807bf44262755cb0.exe
xmlfilter.exe
rool0_pk.exe
xaZYOVJW.exe
Nbt.exe
DA0B.exe
50E1.exe
wjthvwjb.dss
%LOCALAPPDATA%\lollipop
wgsdgsdgdsgsd.exe
%WINDIR%\Temp
WinSyncMetastore.exe
jucheck.dll
wpbt0.dll
administration.exe
%LOCALAPPDATA%\Temp
Task Scheduler.exe
csrsss.exe
uenovfiu.exe
SyncHostps.exe
%TEMP%
Disclaimer
Disclaimer

Leave a Comment

Enter the numbers in the box to the right *