Virus help - police type one?

longwalks1

Netwizard wrote: »

Restart computer

Hit F8 on startup then select safe mode with command prompt

Once in command prompt type rstrui.exe

Follow system restore procedure and restore pc to an earlier time.

Thats how ive fixed a few laptops with this police virus on in the past few weeks.

Thanks wizard, this worked a treat, you are a star
Thanks to everyone else who helped as well, I can sleep easy now

rmg1

It might still be worth running a full virus and malwarebytes scan on your machine.
That will probably throw up some other "oddities" than need to go.

aerostar

rmg1 wrote: »

It might still be worth running a full virus and malwarebytes scan on your machine.
That will probably throw up some other "oddities" than need to go.

Most definately run Malwarebytes, I did a restore for a neighbour, and after that ran MB, it found 2 files, identified as Ransomware, one was random letters, the other was named SKYPE.DAT !

waddler_8

Using system restore is not an ideal solution. MS never intended for it to be used to combat malware infections - It's far better to use dedicated malware removal tools.

aerostar wrote: »

I did a restore for a neighbour, and after that ran MB, it found 2 files, identified as Ransomware, one was random letters, the other was named SKYPE.DAT !

As above.

http://www.threatexpert.com/report.aspx?md5=69b5dd0c7ac5d3f2acda3f077e743d82

https://www.virustotal.com/en/file/55d6985eb59313b289153e826d6d3e5a64f5a76165296253004c615cd8d38480/analysis/

bluesnake

This guy britec09 on youtube does some awesome videos, and has a whole range on how to remove various police ones.

https://www.youtube.com/results?search_query=britec09+police&oq=britec09+police&gs_l=youtube.3...24352.27712.0.32001.7.7.0.0.0.0.88.418.7.7.0...0.0...1ac.1.11.youtube.x38bFwC1lxk

bcl999

rmg1 wrote: »

I removed this from a friends PC using an anti-virus boot CD. You'll need to download it on another machine and burnt it to disc.
The files can be found here:-
http://www.avira.com/en/download/product/avira-antivir-rescue-system

You'll also need some sort of image burning software (imgburn is a good free one). I downloaded the ISO and burnt it as an image.

Once that's on disc, boot from it, let it update (if necessary) and do a full scan.

This was the only method that got it off my PC too.

andy2004

most modern pc can boot from flashdrives, and most antivirus cd's can be put onto flash drives.
I used a little program called YUMI to create a flashdrive with kaspersky and dr.web + a few other like hirens boot cd. dont need a big flash drive.
Got mine from asda 8gb, and better than a dvd due to twice the size, and reusable. you can also add portable programs to it.