WikiWirral Wirral's Biggest Online Forum
Forum Statistics
Forums65
Topics76,512
Posts1,034,183
Members14,907
Most Online121,890
Sep 24th, 2025
Who's Online Now
10 members (anonyme, 3 invisible), 11,522 guests, and 439 robots.
Key: Admin, Global Mod, Mod
Top Posters
sunnyside 45,164
MattLFC 22,315
Mark 21,269
granny 17,811
_Ste_ 16,347
Newest Members
Charlie92, Monkeh, Caro11, Monroe, jonmac
14,907 Registered Users
New General Forums
Magnet fishing
by Dilly - 2nd Oct 2017 11:43am
New Wirral History
Information on Wallasey Central Conservative Club
by sugaray - 20th Sep 2025 10:07pm
Looking for lost streets
by CloverBee - 12th Sep 2025 2:20pm
what was this building in Claughton Road
by derekdwc - 1st Sep 2025 12:10pm
461 Collingwood, Black Horse Hill, West Kirby
by diggingdeeper - 3rd Mar 2009 9:30pm
Top Posters(30 Days)
bert1 5
Topic Replies
DIGITAL I D
by GaryFromWirral - 30th Sep 2025 12:59pm
Recommend a company to fit a new kitchen?
by Longnails - 29th Sep 2025 12:25pm
Are there any grants available for a new boiler?
by Longnails - 29th Sep 2025 12:19pm
What are they doing at four bridges?
by Excoriator - 29th Sep 2025 2:33am
Information on Wallasey Central Conservative Club
by sugaray - 20th Sep 2025 10:07pm
461 Collingwood, Black Horse Hill, West Kirby
by KevinFinity - 13th Sep 2025 10:05pm
Looking for lost streets
by CloverBee - 13th Sep 2025 4:49pm
Temporary relocation of Birkenhead Market
by diggingdeeper - 12th Sep 2025 12:12am
Tree surgeon recommendations
by CarterUSM - 4th Sep 2025 1:24pm
September
M T W T F S S
1 2 3 4 5 6 7
8 9 10 11 12 13 14
15 16 17 18 19 20 21
22 23 24 25 26 27 28
29 30
Top Likes Received (30 Days)
Top Likes Received
bert1 29
Mark 4
casper 4
Previous Thread
Next Thread
Print Thread
#793571 12th May 2013 9:03pm
Joined: Aug 2010
Posts: 372
Old Hand
OP Offline
Old Hand
Joined: Aug 2010
Posts: 372
Hiya folks , my brother in law has had his laptop locked by this virus , anybody no how to deal with it...i've had a look online but its all a bit unclear..cheers Peter

Google Ads
Joined: Apr 2006
Posts: 2,367
Forum Master
Offline
Forum Master
Joined: Apr 2006
Posts: 2,367
Boot up in safemode

Use a dongle with Malware Antimalware bytes programme and Avira anti-virus

Run both programmes while in safe mode and it should get rid of it.

HTH


[Linked Image]
Joined: Aug 2010
Posts: 372
Old Hand
OP Offline
Old Hand
Joined: Aug 2010
Posts: 372
cheers..i'll pass that on..

Joined: Aug 2006
Posts: 2,423
Forum Master
Offline
Forum Master
Joined: Aug 2006
Posts: 2,423
http://malwaretips.com/blogs/pceu-virus/

Info about this virus, and how to remove it

Joined: Jan 2013
Posts: 48
Newbeee
Offline
Newbeee
Joined: Jan 2013
Posts: 48
Safe Mode, System Restore, Scan with AV tools (Malwarebytes is the one that works)

That's the procedure we use at the shop and it'll only ever fail if there's no System Restore points.

Joined: Dec 2010
Posts: 2,293
Likes: 3
Forum Master
Offline
Forum Master
Joined: Dec 2010
Posts: 2,293
Likes: 3
You can take out the hard drive, mount it in a caddy of a known "good" PC with Malwarebytes pre-installed.

Joined: Apr 2013
Posts: 71
Member
Offline
Member
Joined: Apr 2013
Posts: 71
My nephew got this ransomware on his laptop (Windows 7 64 bit Home Edition) last week while he was watching footie on some sports-related website. Apparently the virus was hiding in 5 x HD videos he'd unknowingly downloaded from the site.

The worst thing was this particular strain of the virus wouldn't allow the laptop to be booted in safe mode. It would just shut down if you tried to and restart in normal mode, bringing you back to the annoying Ukash/Met Police screen. I even tried booting from a Kaspersky Rescue Disk but the virus was having none of it! In the end, and after many many failed attempts (and much frustration) I somehow managed to get to his regular desktop. I can't remember how exactly but it involved hitting CTRL+ALT+DEL immediately after logging on with his password (all I know is the timing has to be spot on).

When I succeeded in getting to his regular Desktop, I was able to install and run Malwarebytes, which found (and removed) quite a number of Trojan viruses. I also installed and ran Norton Internet Security to be on the safe side, and I'm glad to say his laptop is running smoothly again.

It took a lot of trial and error, not to mention a great deal of patience, but I got there in the end!


Joined: Feb 2011
Posts: 1,385
Forum Addict
Offline
Forum Addict
Joined: Feb 2011
Posts: 1,385
hi dave my brothers ex had this on her pc last week, I found pressing f8 and going to Safe mode with a Command prompt then type msconfig then search for any suspicious or unknonw entries numbers or letters, ctfmon.exe and unclick them.

this gives you your desktop back then you can run Malwarebyte or hitman

smile

Joined: Apr 2013
Posts: 71
Member
Offline
Member
Joined: Apr 2013
Posts: 71
The thing is, Edd, it wouldn't even allow me to do that. The virus had somehow managed to change the command prompt from "C" to "X" i.e. X:\Windows\System32> and as a result wouldn't accept commands such as msconfig. Believe me, I spent the whole night searching the Internet for a solution and must have tried practically every one of them to no avail. Like I said, it was just by chance that I hit the CTRL+ALT+DEL keys after reading someone else had used this method and Voila! it worked!

Admittedly, there are one or two problems remaining, such as the laptop for some reason, will not install the latest Windows Updates (again I've tried just about everything). I have no idea if this is virus-related or a completely separate issue, but would be interested to know if anybody else is experiencing this after ridding their computer of the Ukash/Met Police virus.


Joined: Aug 2011
Posts: 203
Addict
Offline
Addict
Joined: Aug 2011
Posts: 203
Always keep a back up of all your pictures and music etc off your computer and whenever you get a virus, just install a fresh copy of windows, it's the only way to be sure in my opinion.


Moderated by  Mark 

Link Copied to Clipboard
Random Wirral Images

Click to View Topic.
Newest Topics
DIGITAL I D
by GaryFromWirral - 30th Sep 2025 12:59pm
Recommend a company to fit a new kitchen?
by Longnails - 29th Sep 2025 12:25pm
Information on Wallasey Central Conservative Club
by sugaray - 20th Sep 2025 10:07pm
Looking for lost streets
by CloverBee - 12th Sep 2025 2:20pm
Tree surgeon recommendations
by CarterUSM - 4th Sep 2025 1:24pm
For Sale & Free
Member Spotlight
Beaty59
Beaty59
Port Sunlight
Posts: 236
Joined: May 2009
Today's Birthdays
Tatey
New Wirral Info
Recommend a company to fit a new kitchen?
by Longnails - 29th Sep 2025 12:25pm
Are there any grants available for a new boiler?
by Longnails - 25th Aug 2025 9:34pm
What are they doing at four bridges?
by Excoriator - 25th Jul 2025 12:23pm
Temporary relocation of Birkenhead Market
by mikeeb - 29th May 2021 1:01pm
News : New Topics
DIGITAL I D
by GaryFromWirral - 30th Sep 2025 12:59pm
New Enthusiast Forums
Tree surgeon recommendations
by CarterUSM - 4th Sep 2025 1:24pm
Popular Topics(Views)
10,600,487 CW Chat room thread
5,815,121 WIKI WALK CHAT
4,578,467 Spotted!
Powered by UBB.threads™ PHP Forum Software 7.7.5