Win32/Petya

Win32/Petya is a detection name that may pop-up from Microsoft Security Software when it detects a threat with ransomware characteristics. In other terms, this threat is called ransomware virus. It barred your access to computer or files and displays a page of warning messages and ransom notes. To regain your access, Win32/Petya will prompt for ransom money using various online payment schemes.

Threat behavior

Installation

This threat normally comes from trojan infection. Malicious files downloaded from unsafe network-sharing application can also lead to Win32/Petya infection. Beware of clicking links from suspicious email messages and messenger program as it may also cause the malware to invade your PC.

Payload

While Win32/Petya is on the system, it will block your access to the computer or files. It will exhibit a message why it locks the computer and will advise you to pay ransom money. You must understand that this is just a mere tactics of Win32/Petya in order to steal money from its victims.

The warning message it projects are usually download from a remote servers which was put up by malware authors.

It will require you to pay through online payment scheme like MoneyGram, Ukash, and MoneyPak. Some variants of Win32/Petya is also using Bitcoin to process the transaction.

Symptoms

As mentioned, the first sign you may notice is the warning message that blocks your access to the computer or files. If ever Win32/Petya has not fully installed, Microsoft Security Software will keep on showing alerts about several attempts of virus trying to penetrate the computer.

Win32/Petya

How can you remove Win32/Petya?

To totally remove Win32/Petya from the computer and get rid of relevant viruses, please execute the procedures as stated on this page. Make sure that you have completely scan the system with suggested malware removal tools and virus scanners.

Windows XP, Windows Vista, and Windows 7 Instructions:

1. Open Microsoft Security Essentials by going to Windows Start > All Programs. If the tool is not yet installed on the computer, please download Microsoft Security Essentials from the link below. Save the file on your hard drive.

MSE Download Link (this will open on a new window)

Complete installation guide and usage are also provided on the same link. It is essential in removing Win32/Petya effectively. If Microsoft Security Essentials is already installed on the PC, please proceed with the steps below.

2. On Microsoft Security Essentials Home screen, please choose Full under Scan Options.

MSE Full Scan

3. Click on Scan Now button to start detecting Win32/Petya items, viruses, and malware on the PC. Scan may take a while, please be patient and wait for the process to end.

Windows 8 Instructions:

Windows Defender is a free tool that was built help you remove Win32/Petya, viruses, and other malicious items from Windows 8 system. Follow these procedures to scan your computer with Windows Defender:

1. Tap or click the Search charm, search for defender, and then open Windows Defender.

If Windows Defender is not yet installed on the computer, please proceed to download page using the link below. It also contains detailed instruction to install and use the program effectively. Proper usage is required to totally remove Win32/Petya

Windows Defender Download Link (this will open on a new window)

WD-charm

2. On the Home tab, click Full under Scan Options. Click Scan now to start scanning for presence of Win32/Petya. The process may take a while to complete.

WD-fullscan

3. After the scan, delete/quarantine identified threats wether it is relevant to Win32/Petya or not. You may now restart Windows to complete the virus removal process.

Leave a Reply

Your email address will not be published. Required fields are marked *