Question:
Virus on my computer 'west yorkshire police'?
ℝy♡
2012-11-07 12:15:57 UTC
Hi there,
Whilst i was browsing on my computer before i struck a problem. the website was taking ages to load and temporarily froze my computer, after two minutes it opened a new tab and froze again. 2 minutes again it was fine and then all of a sudden boom.. an alert message blocking my entire screen, preventing me from doing anything appears. It stated 'West yorkshire police, Your computer has been blocked, to unblock pay a one hundred pound fine to Ukash. now i'm no stranger to viruses. i don't have a fire wall or any protection as i cant afford them and ive used up a ton of free trials.:( i've just downloaded mal malwarebytes and i found 3 trojans in the scan. they have been deleted however, logging on in normal mode (ive been running safe mode whilst downloading malware bytes) its still there. as i said before im no stranger to viruses and i can usually fix them, this one is relentless i've deleted all the files that have been created today and i and its still there. i need some help please!! reading further down it says my computer has been banned due to pornographic imagery. now my laptop hasnt been on anything and i sure havnt either. if theres anyone there who can help please post im stuck, this is a fairly new computer and i cant afford for it to fail on me like my last one.. please please help.
Thanks, Ry
Six answers:
2012-11-07 13:41:44 UTC
Stuck on my mobile, so can't supply a full answer.



This ransomware encrypts some files. Go to YouTube and search for Britec09 West Yorkshire Police ransomware. His video will show how to temove it.



Hope this helps.
popcorn
2012-11-07 12:40:16 UTC
Just deleting this will not work. It has changed your winlogon registry entry.

Try this

Restart your computer, and then press and hold F8 during the initial startup to start your computer in safe mode with a Command prompt.

Note: With some computers, if you press and hold a key as the computer is booting you will get a stuck key message. If this occurs, instead of pressing and holding the “F8 key”, tap the “F8 key” continuously until you get the Advanced Boot Options screen.

Use the arrow keys to select the Safe mode with a Command prompt option.



At the command prompt, type cd restore and then press ENTER.

Next,type rstrui.exe , and then press ENTER



The System Restore window will start and you’ll need to select a restore point previous to this infection.



Then download malwarebytes, install, update and run
iBite
2012-11-07 12:25:08 UTC
First off, don't connect to the internet with it.



I use to have a similar problem. Have you tried system restore? But thats usually the first thing the virus deactivates.



I solved the problem using 3 trial software, this was a long time ago but I think it was



Super anti spyware

something about anti malware

and then something like avast or something.



You have to run the one, reboot, run the other, reboot and then let the avast do a deep system scan.
Alex
2012-11-07 12:23:37 UTC
1 go in to safe mode

2 turn on windows firewall

3 download Microsoft Security Essetials

4 run a Security Essentials full scan

5 deal with any problems detected

6 re run malwarebytes

7 deal with any flagged up problems
burket
2016-12-28 20:48:42 UTC
Restart your computing gadget in risk-free mode. (You get a menu in case you press F8 on startup). click the beginning up key and form regedit interior the hunt field (or the run field on XP). Press enter and you'd be interior the registry editor. there's a itemizing tree on the left and there are 2 places the place residing house windows keeps the names of classes that run on startup. improve the tree HKey modern purchasers>utility>Microsoft>residing house windows>modern version>Run The values interior the main appropriate hand window could be classes and techniques you realize. If there is a few thing there with a attractiveness made up of random numbers and letters, make an commentary of it, right click on it and delete in. Now do the comparable with HKey interior of sight gadget>utility>Microsoft>residing house windows>Curre... version>Run close the window that regedit is working in and restart the gadget. that would desire to have stopped the virus working, however the record continues to be there. click on computing gadget and your important rigidity Use the hunt recurring to locate the archives with the call you have written down (they may well be hidden everywhere on the gadget so the hunt might take it slow). once you come across them, delete them.
Don
2012-11-07 15:57:38 UTC
start the machine and repeatedly tap the F8 key until the option screen appears and choose safemode with networking then open your browser and go to SAFETY.LIVE.com that is Microsoft's online virus scanner there are others SYMANTEC.com...McAfee.com...after that go to MalwareBytes.org and download their free scanner and run the scan...Avira.com and Kaspersky.com offer free rescue disk just use a clean machine to download and burn the disk set your bios to boot from the cd/dvd player and run the rescue disk before the machine can boot up...to return to safe mode restart your machine


This content was originally posted on Y! Answers, a Q&A website that shut down in 2021.
Continue reading on narkive:
Loading...