Search For A Solution!

Total Pageviews

Sunday, September 30, 2012

GREEK POLICE - RANSOMWARE Virus/Malware "Ασφάλεια Αττικής Δίωξη Ηλεκτρονικού Εγκλήματος"


HOW TO REMOVE:

The virus affects only the specific user!
Restart in SAFE MODE or unplug your internet connection and login as another user!

Depending on which OS you have:

Window 7: look for "ProgramData" folder in C:\ (its hidden). You will see an .exe file with usually displaying internet explorer icon! Delete it!
*CCleaner cant see the startup of the infected user as the creators havent put the path in global startup.

Windows XP: Enable hidden files-folders. Go to your C:\ under Docs and Settings, and affected user. Go to application data and look for TEMP folder. Delete the exe files created on the date of your infection!


PS If in safe mide, enable hidden files/folders and do a search in C:\ for *.exe and sort the results by date! Ones crated on date of infection and possibly with weird file name is what you are after!

Be safe! Browse safe!

No comments:

Post a Comment