Digital Spy

Search Digital Spy
 

DS Forums

 
 
 

PC is locked by Police Virus * Help Needed


Reply
Thread Tools Search this Thread
Old 23-12-2012, 14:03
PES 2009
Forum Member
 
Join Date: Nov 2008
Posts: 948

I got that Your PC is locked by the police, send 100 to Police etc virus.

Cannot use the infected PC at all, everytime I boot up the message comes up. Can't even boot into safe mode as exactly the same message pops up.

Message looks like this one.

http://malwaretips.com/blogs/wp-cont...lice-virus.jpg

Any help would be gratefully received.
PES 2009 is offline   Reply With Quote
Please sign in or register to remove this advertisement.
Old 23-12-2012, 14:11
flagpole
Inactive Member
 
Join Date: Jan 2003
Posts: 43,524
I think i'd be tempted to try a system restore to an earlier time.

but what i would try is not the main concern. I'm sure there is information out there.
flagpole is offline   Reply With Quote
Old 23-12-2012, 14:20
max99
Forum Member
 
Join Date: Jun 2005
Posts: 8,620
Take a look over on BleepingComputer. They usually have full removal guides for this kind of ransomware. Search for the exact name of the scam or some of the key phrases from the message.
max99 is offline   Reply With Quote
Old 23-12-2012, 14:21
PES 2009
Forum Member
 
Join Date: Nov 2008
Posts: 948
I think i'd be tempted to try a system restore to an earlier time.

but what i would try is not the main concern. I'm sure there is information out there.
Can't even do a system restore when I try in safe mode the police pop up comes up straightaway.
PES 2009 is offline   Reply With Quote
Old 23-12-2012, 14:27
tealady
Forum Member
 
Join Date: Apr 2005
Location: colchester
Posts: 10,321
Try
http://www.fixpcyourself.com/police-...irus-locks-pc/
and
http://www.youtube.com/watch?v=lHU77sBi8cU
tealady is offline   Reply With Quote
Old 23-12-2012, 14:39
flagpole
Inactive Member
 
Join Date: Jan 2003
Posts: 43,524
Can't even do a system restore when I try in safe mode the police pop up comes up straightaway.
you can do it from the recovery console / command prompt.

but the other advice is better.
flagpole is offline   Reply With Quote
Old 23-12-2012, 14:42
njp
Forum Member
 
Join Date: Dec 2004
Posts: 16,618
I got that Your PC is locked by the police, send 100 to Police etc virus.

Cannot use the infected PC at all, everytime I boot up the message comes up. Can't even boot into safe mode as exactly the same message pops up.

Message looks like this one.

http://malwaretips.com/blogs/wp-cont...lice-virus.jpg

Any help would be gratefully received.
Safemode with command prompt, then combofix (read the disclaimers first!) sorted this problem on a PC I was asked to fix.

In that case, the dodgy files to be deleted were these, which my manual inspection missed:

...\AppData\Roaming\msconfig.dat
...\AppData\Roaming\msconfig.ini
njp is offline   Reply With Quote
Old 23-12-2012, 14:55
TheBigM
Forum Member
 
Join Date: Aug 2004
Location: moon
Posts: 12,662
Depending on your method of backup, either restore an image you know to be clean or reinstall windows and reload your data from your backup.

...You do have a backup scheme in place riiight?
TheBigM is offline   Reply With Quote
Old 23-12-2012, 14:58
Mr Teacake
Forum Member
 
Join Date: Apr 2012
Posts: 3,944
I restarted in safe mode then ran MSCONFIG and unticked all dodgy looking startup programs and it was that simple to fix. I also performed scans.
Mr Teacake is offline   Reply With Quote
Old 23-12-2012, 15:06
flagpole
Inactive Member
 
Join Date: Jan 2003
Posts: 43,524
Depending on your method of backup, either restore an image you know to be clean or reinstall windows and reload your data from your backup.

...You do have a backup scheme in place riiight?
Everytime we get one of these threads someone says that.

i imagine how helpful it seems to the OP.
flagpole is offline   Reply With Quote
Old 23-12-2012, 15:11
TheBigM
Forum Member
 
Join Date: Aug 2004
Location: moon
Posts: 12,662
Everytime we get one of these threads someone says that.

i imagine how helpful it seems to the OP.
It will help them the next time they're in a similar mess and they may well advise their friends/family to do the same.

You guys can give the OP a fish, I want to teach them how to fish.
TheBigM is offline   Reply With Quote
Old 23-12-2012, 15:16
JeffG1
Forum Member
 
Join Date: Jan 2005
Location: Newbury
Posts: 4,793
You guys can give the OP a fish, I want to teach them how to fish.
Maybe they already know how to fish, and find your post arrogant in the extreme.
JeffG1 is offline   Reply With Quote
Old 23-12-2012, 15:20
njp
Forum Member
 
Join Date: Dec 2004
Posts: 16,618
You guys can give the OP a fish, I want to teach them how to fish.
No, we are advising them of the availability of suitable nutcrackers. You are suggesting that they invest in a sledgehammer, and use it to resolve any similar problems in the future.
njp is offline   Reply With Quote
Old 23-12-2012, 15:24
max99
Forum Member
 
Join Date: Jun 2005
Posts: 8,620
On the other hand, advising someone on the importance of backups is possibly the single most important piece of computer-related advice that they will ever be given.
max99 is offline   Reply With Quote
Old 23-12-2012, 15:31
flagpole
Inactive Member
 
Join Date: Jan 2003
Posts: 43,524
On the other hand, advising someone on the importance of backups is possibly the single most important piece of computer-related advice that they will ever be given.
there's a time and a place.

it's a bit like helpfully telling someone who's just lost someone in a car crash how important seatbelts are.

but specifically it is completely off topic.
flagpole is offline   Reply With Quote
Old 23-12-2012, 16:01
max99
Forum Member
 
Join Date: Jun 2005
Posts: 8,620
there's a time and a place.

it's a bit like helpfully telling someone who's just lost someone in a car crash how important seatbelts are.

but specifically it is completely off topic.
There's never a bad time to tell someone they should have a backup. Never.
max99 is offline   Reply With Quote
Old 23-12-2012, 16:02
TheBigM
Forum Member
 
Join Date: Aug 2004
Location: moon
Posts: 12,662
there's a time and a place.

it's a bit like helpfully telling someone who's just lost someone in a car crash how important seatbelts are.

but specifically it is completely off topic.
Restoring from a clean image is off-topic? It would have solved the problem with minimal fuss and therefore must surely be on-topic.

Whilst any anti-malware software might make it seem like it's gone away, you really don't know what damage has been done in the meantime.
TheBigM is offline   Reply With Quote
Old 23-12-2012, 16:07
flagpole
Inactive Member
 
Join Date: Jan 2003
Posts: 43,524
Restoring from a clean image is off-topic? It would have solved the problem with minimal fuss and therefore must surely be on-topic.
You perfectly well the op doesn't have a system image. don't play dumb.
flagpole is offline   Reply With Quote
Old 23-12-2012, 16:47
PES 2009
Forum Member
 
Join Date: Nov 2008
Posts: 948
I restarted in safe mode then ran MSCONFIG and unticked all dodgy looking startup programs and it was that simple to fix. I also performed scans.
Wish it was that simple as I mentioned in the opening post safe mode is not an option as the Police Pop Up comes up in safe mode as soon as it boots into windows.
PES 2009 is offline   Reply With Quote
Old 23-12-2012, 16:50
PES 2009
Forum Member
 
Join Date: Nov 2008
Posts: 948
A windows reinstall is a last resort but looks like it may be the only option to me as I just can't get rid of the bugger.
PES 2009 is offline   Reply With Quote
Old 23-12-2012, 16:51
the sandman
Forum Member
 
Join Date: May 2009
Posts: 564
First time I've heard of the police virus.
the sandman is offline   Reply With Quote
Old 23-12-2012, 16:54
TheBigM
Forum Member
 
Join Date: Aug 2004
Location: moon
Posts: 12,662
First time I've heard of the police virus.
Perhaps Andrew Mitchell was behind it?
TheBigM is offline   Reply With Quote
Old 23-12-2012, 16:58
LION8TIGER
Forum Member
 
Join Date: May 2005
Posts: 7,227
Have a look at method 3 here.
LION8TIGER is offline   Reply With Quote
Old 23-12-2012, 16:58
mossy2103
Forum Member
 
Join Date: Aug 2005
Posts: 57,430
On the other hand, advising someone on the importance of backups is possibly the single most important piece of computer-related advice that they will ever be given.
Along with:

A backup is only a backup if you can restore from it

(something that a SCO Unix Support person once told me)
mossy2103 is online now   Reply With Quote
Old 23-12-2012, 17:01
PES 2009
Forum Member
 
Join Date: Nov 2008
Posts: 948
Have a look at method 3 here.
Already tried a couple of boot scanners, Kaspersky Rescue Disk and HitmanPro. Both were unable to detect the virus and did pretty much fek all.
PES 2009 is offline   Reply With Quote
 
Reply



Thread Tools Search this Thread
Search this Thread:

Advanced Search

 
Forum Jump


All times are GMT +1. The time now is 16:36.