Celas Trojan - How to remove

Celas Trojan is a ransomware that has been infecting computers lately. It is named under a well known company that monitors and licenses music related issues. One of the most important company’s missions is to pay a key anti-piracy role in the online and mobile markets in EU. Celas Trojan misuses the name and the mission of this company by attacking PC and stating that your computer is blocked due to illegal usage or distribution of copyrighted content.
Celas Trojan locks your machine therefore you cannot perform any action on it. The reason given is that your PC is used for downloading music or movies illegally. The ransomware states that the only way to unblock your PC is to pay the fine of 50 EUR. The fines are collected using pre-paid PaySafe cards which should raise suspicions at once. No legal company works like this. This is a well thought hackers’ scheme how to easily collect money from scared computer users. Do not fall for this trick and do not pay the fine.
The fake Celas virus alerts look like this:

Access to your computer was denied.
Illegally downloaded music tracks (in other words, “pirated copies”) have been detected on your PC.
While being downloaded the before mentioned tracks were copied – that’s also a criminal offensein conformity with 106 of the Digital Millennium Copyright Act.
Both Copyrighted music tracks download in the Internet and music files exchange are illegal subject to compiliance with 106 of the Digital Millennium Copyright Act and punished by either imposition of monetary fines or up to three years of imprisonment. Moreover, following 184 of the Criminal Code the property is subject of detention it can carry forfeit of the computer has been formerly used for the above mentioned files downloading.

The only way to get rid of this screen lock and unblock your PC is to remove Celas virus. The best way to do so is to use Alternate OS Scanners. If you manage to launch browser window, you can download and scan your PC with spyhunter too. This can be done from other user account too.

Perform these steps in order to remove Celas Trojan:

1. Reboot into safe mode with command prompt.
2. Run regedit. Search for Winlogon.
3. There will be a key labeled Shell under Winlogon. It should reference Explorer.exe or be blank. If there is something else referring an executable in one of users folders, replace it with explorer.exe.
4.Save changes, reboot to safe mode with networking.
5. Run msconfig and disable all unnecessary startup entries. You should be able to reboot normally.
6. Install and run https://www.2-viruses.com/downloads/spyhunter-i.exe. Scan with it the PC and delete the Celas trojan executables it finds.

Automatic Malware removal tools

Manual removal