Metropolitan police malware

scorpiolady

Can someone help me get rid of the above please

waddler_8

http://www.bleepingcomputer.com/virus-removal/remove-police-central-e-crime-unit-reveton-ransomware

Scroll down to:

"Automated Removal Instructions for Police Central e-crime Unit Ransomware using the Emsisoft Emergency Kit:"

AdamJK_2

I'm assuming Windows XP+.

You need to get hold of a copy of MalwareBytes http://www.malwarebytes.org/

It's best to download this on a separate machine, but if not just follow below and boot up as Safe Mode with Networking.

Boot the computer up into Safe Mode, to do this restart the machine and mash the F8 button (on some boards you may need to hit Esc or Del) but it should be F8.

You'll be presented with a list of options - select boot Windows in Safe Mode.

Install Malwarebytes and let it run - it will remove the malware. When done restart the machine. Let it boot up as normal and then run Malwarebytes again for good measure.

When all sorted, go into control panel > Programs. Click on and uninstall Java. Most websites don't use Java anymore and to be honest you'll get by fine without it - this is the vulnerable software that causes most of these problems, you're far better off without it.

scorpiolady

Thankyou both will have a go later

scorpiolady

waddler_8 wrote: »

http://www.bleepingcomputer.com/virus-removal/remove-police-central-e-crime-unit-reveton-ransomware

Scroll down to:

"Automated Removal Instructions for Police Central e-crime Unit Ransomware using the Emsisoft Emergency Kit:"

Thankyou waddler_8
i done it :j

waddler_8

Nice one.

Part of what AdamJK says is true - older, insecure versions of Java can be exploited to facilitate the download & execution of malware without user interaction.

But it's not just Java, other programs can be targeted too - Adobe Flash & Reader for example.

http://www.securelist.com/en/analysis/204792239/IT_Threat_Evolution_Q2_2012#10

You can scan for common vulnerabilities here:

http://www.secunia.com/products/consumer/osi/online/
(Which ironically requires Java to work)

You may find installed programs require Java to perform some functions, it's not just websites.

Any threat from these exploits can be mitigated by ensuring programs are patched and fully up to date, along with ensuring your security programs are kept updated too.

You can see what a typical exploit pack targets here:

http://blogs.technet.com/b/security/archive/2012/07/19/the-rise-of-the-black-hole-exploit-kit-the-importance-of-keeping-all-software-up-to-date.aspx

AdamJK_2

I bow to Waddler's excellent advice on this one. One other thing I find useful as a preventative measure is to use the Immunise function on SpyBot: Search and Destroy.

This blocks known attack sites from being able to run script within the browser i.e. malicious sites or malicious advertising on seemingly legitimate sites. It basically just maintains a block list and if you turn off the active protection option, has no impact on system performance. Very useful I think.