Metropoliton police virus.

peter_the_piper

Friend of OH has got this. Was going to use the ""Cleanpcguide.com removal tool but when starting in safe mode, if you go into networking or command prompt it stops there saying windows has a problem. This is a definite Ooops moment, any suggestions would be appreciated.

waddler_8

Don't bother with that crappy site.

If you can't get into regedit to edit the Userinit value then run the Kaspersky rescue disk.

http://support.kaspersky.com/viruses/rescuedisk

peter_the_piper

Good job she can't get to use the tool then. I'm downloading kaspersky now thanks. If I remember correctly its a linux (distro) which boots the comp and removes the carp, is that right?

waddler_8

Yes, that's it.

peter_the_piper

Right, already got one from when you kindly helped my OH to get rid of her virus. I do wish these ladies would keep their "anti" bits up to date and avoid dodgy sites?

waddler_8

It's not necessarily dodgy sites these come from, they can come via legit, normally reputable sites that have been compromised in some way - injected scripts/iframes, malvertisements etc pointing to domains hosting exploits.

It's important to keep everything up to date (OS, browser, installed programs) to help mitigate threats such as these.

Of course if they're downloading/filesharing and indulging in other risky activities then they've only themselves to blame.

Once you've cleaned it, check the pc for outdated software, remove vulnerable apps and update to the latest versions.

http://secunia.com/vulnerability_scanning/online/

Install a custom hosts file.

http://winhelp2002.mvps.org/hosts.htm
http://www.malwaredomainlist.com/hostslist/hosts.txt
http://www.abelhadigital.com/hostsman

peter_the_piper

Its a bit difficult, its my wifes friend and she is the one trying to sort it, I'm at arms length.
Thanks for the help.

krisskross

My husband has this on his laptop. I can't access anything from his laptop. How does a very untechie person get rid of it for him?

Plus it has scared him to death even though he knows he hasn't done anything he shouldn't.

debitcardmayhem

waddler_8 wrote: »

Don't bother with that crappy site.

If you can't get into regedit to edit the Userinit value then run the Kaspersky rescue disk.

http://support.kaspersky.com/viruses/rescuedisk

krisskross wrote: »

My husband has this on his laptop. I can't access anything from his laptop. How does a very untechie person get rid of it for him?

Plus it has scared him to death even though he knows he hasn't done anything he shouldn't.

Look at the quote from Waddler, you can put this on a small 1GB USB stick or a CD ...

baz

I too have this problem ,at the fear of looking even more stupid after downloading the rescue disk down to a usb how do i go about it then,because when i turn the computer on it only works in safe mode .Do i insert the stick in safe mode?
Cheers in advance.

Browntoa

you need to enter bios , normally F2 or F1 as you boot the computer

look for an option to change boot order and then choose USB (may not be an option on earlier PC) or if not then choose CD and you will need to burn to a CD