virus that says you must pay police £100?
- Thread starter Jimbo
- Start date
I had this a few months ago. Lots of sites said to boot into safe mode and remove it using AV, but that had no effect on me, the virus still blocked my pc in safe mode.
Managed to get rid of it by running a windows restore point from that morning.
Managed to get rid of it by running a windows restore point from that morning.
- Joined
- 14 Jun 2004
- Posts
- 17,538
- Location
- Newcastle U/T
Boot into safe mode w/networking.
the threat itseld will be a randomly named .exe normally in the user profile folders.
just sort by date modifeied or even search for a *.exe created within the last few days in the folder. Permanantly Delete and reboot.
Sorted
the threat itseld will be a randomly named .exe normally in the user profile folders.
just sort by date modifeied or even search for a *.exe created within the last few days in the folder. Permanantly Delete and reboot.
Sorted
Permabanned
- Joined
- 9 Aug 2008
- Posts
- 35,711
Can't remove it fully without formatting... it still sits there in the background I only done a couple this week and they back on.
Permabanned
- Joined
- 9 Aug 2008
- Posts
- 35,711
It can be removed. You just failed.
You do know there are varients of this floating about? Some can't be removed because they hide regardless of what you use and some varients require a format. Doesn't matter if you restore, remove or whatever you do.
There are only so many places where malware can hide. Even nasty root kits can be removed with a little effort. It depends how much effort one wants to put in to remove the infection. Format is always the easy way out.
- Joined
- 14 Jun 2004
- Posts
- 17,538
- Location
- Newcastle U/T
Regardless of what you use?
Please tell me you're not just going to safe mode and running random scans in the vain hope one of them has been updated recently/correctly in order to pickup one of these varients you speak of?
I've seen people say they've used all sorts to no avail only to manually check thru the folders and locate the problem in a short period of time.
There are only so many places where malware can hide. Even nasty root kits can be removed with a little effort. It depends how much effort one wants to put in to remove the infection. Format is always the easy way out.
BOOM
Nail|Head
Permabanned
- Joined
- 9 Aug 2008
- Posts
- 35,711
ok
It's called the Ukash virus. There's an application to decrypt the files it encrypts and removal instructions around the net, here's a discussion about it;
http://forums.anvisoft.com/viewtopic-45-905-0.html
http://forums.anvisoft.com/viewtopic-45-905-0.html
If it were me I'd take everything important off the machine and re-install, you can never fully guarantee that the system is clean and that it hasn't downloaded itself elsewhere or hooked onto something else.
Soldato
- Joined
- 7 Mar 2005
- Posts
- 19,623
- Location
- LU7
This. A colleague had this on his work laptop. Spybot didn't find anything but Malwarebytes did and removed it. Easy as 1, 2, 3 it was.