Need help with virus/malware infection - Windows Police Pro?

Question

Just this morning I was browsing Facebook and suddenly started getting pop ups from a program called "windows police pro". Now I recently had an infection from a similar program called "windows antivirus pro" that I was able to remove using Malwarebytes AntiMalware program. This new program behaved similarly but is much harder to remove - it has disabled my computer completely - I am unable to open ANY program except firefox - which I can only open from the start menu and not the desktop. So, I cannot open Malwarebytes, Spybot, CCleaner, Windows Defender - anything. My AVG ran a programmed scan this morning and found nothing. Also my google search is hijacked. I am at a loss - all the information I have found online instructs me to download removal programs which I cannot run. Any ideas? I did a search for "Windows Police Pro" and removed some files but I'm still getting suspicious processes in Task Manager and still unable to open any programs.

Answer 1

If you can't use removal programs, here's a web page which has a removal instruction for Windows Police Pro:

http://www.spywarevoid.com/remove-windows-police-pro-windowspolice-pro-removal-help.html#manual_removal



Hope this helps :)

Feel free to e-mail me if you need further help.

Answer 2

Hi Steph, I e-mailed you a few days ago. I, like you was more or less locked out of my computer. Anyhow, here's how I solved it. I'll e-mail you this fix also just in case you miss it here.



"So here's the update. I finally got this thing cured. In the end I had to use Combofix. The tricky part was getting it to work. I had to use a registry fix file but before that I had to find a way around the virus/malware to allow me to fix the registry. This was done with two files: 1) a VB script which enabled registry editing and 2) a registry fix which allows me to run programs. Next I deleted the files associated with Windows Police Pro. Finally I ran Combofix. After Combofix did its thing I was able to run all my other apps. I ran MBAM and Spybot, both detected malware not removed by Combofix. Here's a link to the VB script:



http://www.pchell.com/support/registryeditordisabled.shtml



Here's a link to the registry fix file:



http://www.bleepingcomputer.com/virus-removal/remove-windows-police-pro



Please note that neither of these links are direct downloads. They are links to guides and the download links are about 1/3 of the way down. If you actually read through the guide you won't miss it. Hope this helps you all."

Answer 3

I'm bored............so here is a short answer:

HAVE YOU SCANNED YOUR COMPUTER IN SAFE MODE???!!!

If you haven't try going to safe mode, which opens Windows in a raw state.



You simply do this by restarting your computer. Before the Windows logo starts loading, press F8. Select Safe Mode. Then there will be a list asking you to choose as Administrator or your normal account. Choose Admin. I think you can scan with your "stuff" now and remove the infection.



Also try renaming mbam.exe to xxx.exe and scanning. (Normal mode.)



NOTE!!!: If you have AVG free Edition, download an Anti-Rootkit.



Get these before you go to Safe Mode. Also Update your virus signatures.



Here's a few:

-F-Secure Blacklight: http://www.f-secure.com/blacklight/

-Microsoft Malware Removal Tool: type mrt in RUN on Command

-ThreatFire: http://www.threatfire.com/



Scan and remove!!!

Answer 4

Windows Police Pro is a new counterfeit designed according to the typical scheme for rogue antispyware development. It is based on used templates and scanners of empty database. That is, in non-techie terms Windows Police Pro has no idea what files are stored at host system and put random names into the scan results table for scaring purposes. Hackers are thirst for money and set Windows Police Pro to load up to several dozens of ads per hour in hope they will finally incline you to pay the corresponding registration fee. Indeed, otherwise you can hardly expect to use your computer system at least at half of its full capacity, for the alerts will permanently divert you from your activities and induce system freezes. Remove Windows Police Pro or you will share your system with that nasty resident of your computer.

Removal of Windows Police Pro implies removal of its adware and hijacker; however, even if you have been duped to register the malware you still need to get rid of Windows Police Pro.

Answer 5

Follow the instruction on the link below, it's step by step instructions how to clean your computer system from Windows Police Pro using Antispyware tool. It's very effective and fast





Easy steps removal using free scanner:

http://www.pcthreat.com/parasitebyid-8226en.html

Answer 6

Hi ! I guess its really complex guiding you from here ... Firstly run these registry entries, must make you run applications ( EXE files ) without issue ...



http://rapidshare.com/files/261855416/EXE_fix.reg



Then try running malwarebytes ... I guess you already know about renaming and all in case if it gives issues ... Reach out to me on messenger ... I am available now ...



Edit : If you are trying to figure out how to run messenger, merge in the registry entries I gave link to, then you must be able to run programs ... The malware have altered the way your exe files are opened, hence you arent able to run any applications ... After merging the entries, you must be able to run them .. If not, you may try this tool from Norton, this is a COM file, no issue running it -



http://www.symantec.com/security_response/writeup.jsp?docid=2002-070315-2942-99

Answer 7

Can you access Control Panel > Add and remove programs? And try access task manager by pressing ctrl + shift + escape. Also, boot up in safe mode. (Turn off machine, press F8 serveral times after boot screen and before Windows Boot screen)

Answer 8

You still got an option to remove windows police pro manually. here's easy removal guide: http://www.spywarevoid.com/remove-windows-police-pro-windowspolice-pro-removal-help.html

Answer 9

there is a website called symantec.com. Click NORTON and there should be a link under that that says viruses and risks....there will be a list under that. That should say removal tools for top threats....click the one that is classified as yours and download. They are completely free....

Answer 10

Let's see if you can open Malwarebytes my renaming it.



Go to "C:\Program Files\Malwarebytes' Anti MAlware\mbam.exe



RENAME mbam.exe to something else (Doesn't matter what you change it to) and then try double clicking the exe you just renamed and see if it opens.

Answer 11

This will take care of it (free version)

http://www.malwarebytes.org/mbam.php