Tuesday, December 13, 2011

Remove Strathclyde Police popup as a variant of Ukash Metropolitan Virus

Strathclyde Police Ukash popup (trojan) is variant of notorious alert issued by Ukash virus. Ukash is a payment system through which the view of popup is expected to transfer GBB 100 as the user is accused of watching adult materials, even child pornography.
The popup specifies, as a rule, correctly, I.P., location (city, town, even village) of targeted PC. It is spread throughout entire territory of England and Scotland.
Removal of Strathclyde police popup (fake Metropolitan Police alert modification) is aggravated by blocking desktop with the virus. The block, however, can be eliminated through the Task Manger (by default combination of keys is Ctrl, Alt, Delete to launch the manager), where a victim of the scam needs to quit all running programs. Besides, reboot in Safe mode with Networking makes sense.
If download links of this post work more or less appropriately without any preparation, or after eliminating the lock set upon by the ransomware, click here to run free scan and get rid of Strathclyde Police popup, as well as clean your PC of other hazardous programs. 


Ransomware informs users that:
”From this IP-address it was visited sites containing banned scenes of violence against people, as well as viewing banned in United Kingdom child pornographic materials. We discouverd video files that contain elements of violence were found on your computer.”
Unsolicited Bulk Messages was send from your computer’s IP address and it was recorded by SpamHaus this month.
The computer has been locked to prevent your illegal activities on the Internet. To unlock the computer you are obliged, within 48 hours of receiving notice, to pay a fine of £ 100. “

Manual removal guide:
Delete infected files:
[SET OF RANDOM CHARACTERS].exe
Delete infected registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\"Shell" = "[SET OF RANDOM CHARACTERS].exe"
Rename the remover to "explorer.exe" or try to install from Safe Mode if virus blocks download\installation


No comments: