Tuesday, January 10, 2012

Remove Scotland Yards Ukash SCAM Virus as a UK modification of fake police warnings

Scotland Yards Ukash Virus is a UK targeting variant of UKASH scam. It is a worldwide issue.
UKASH does not support the scam. Quite in contrary, the above payment system has warned its users against it: http://www.ukash.com/global/en/alerts/police-virus-scam-%E2%80%93-do-not-send-ukash.aspx
The infection targets computers in countries with high living standards such as USA, Switzerland, the Netherlands etc. It identifies IP of targeted PC, thus recognizing the country and even town/village, nothing to say of the city. Related graphics is then loaded to attacked PC so that a victim would watch an alert issued in the official language of the country of user’s residence and on behalf of the country’s respective police authority.
For instance, Germans have been dealing with Bundezpolizei warning generated by the same virus that, in the case under review, produces popup on the behalf of Metropolitan Police.
Remove Scotland Yards Ukash Virus in order to enhance your computer performance. In many cases, removal of Scotland Yards Ukash Virus is a matter of regaining access to basic system items. Click here to have free scanner installed on your PC as a first step to the misleading popup elimination and healthy PC free of any kind of malware.

Scotland Yards Ukash FAKE warning screenshots:




Manual removal guide:
Delete infected files:
%Windows%\system32\[random].exe
%appdata%\[random].exe
%Documents and Settings%\[UserName]\Application Data\[random].exe
%Documents and Settings%\[UserName]\Local Settings\Temp\[random].tmp
%Documents and Settings%\[UserName]\Desktop\[random].lnk

Delete infected registry entries: 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\"Shell" = "[random].exe"


 Rename the remover to "explorer.exe" or try to install from Safe Mode if virus blocks download\installation


 

No comments: