Metropolitan Police virus is a ransomware scam based on scaring victims with fake messages supposedly coming from UK police and extorting money a s a fine paid for a fake violation. New incarnation of Metropolitan Police virus, that have a message “Your Personal Computer has been blocked”, accuses victims in watching child pornography. Victim’s webcam is used to make the claim more persuasive and help cyber criminals easily collect victim’s money. Metropolitan Police virus is spread with Trojans, and after being installed it locks screen and victim’s access to other controls and displays this malicious fake message. Since Metropolitan Police virus is spread in United Kingdom, it requests 100 GBP paid as a fine for the violation. As with typical ransomware spread in Europe the payment has to be made with Ukash or Paysafe payment systems that government do not use for collecting fines but cyber criminals love for a possibility of running this scam without being traced and cought.
This removal guide will help you to remove Metropolitan Police virus either manually or with a help of Metropolitan Police virus Removal Tool that comes with “Free online support” and “Free one-year-long protection” against stubborn malicious programs.
What is Metropolitan Police virus ?
Metropolitan Police virus is a scam used by cyber criminals for money extortion. They are trying to scare victims with fake accusations in a crime committed on the Internet made on behalf of state police or other agency related to law enforcement. Then they ask for money paid as a fine. Removing Metropolitan Police virus is complicated by locked access to infected computer and blocked antivirus program. Metropolitan Police virus is spread with Trojans coming from infected websites, and it is better to avoid clicks made on links found in suspicious content or unbelievably attractive offers that are often used by cyber criminals for increasing a chance of visitors’ clicking on infected links. Please, remember that payment of a fine requested to be made with Ukash and Paysafe is a clear sign of the scam. Government do not use this payment systems and do not lock computers for minor violations on the web. Message that you see is fake and you do not owe any money to cyber criminals. They will not unlock your computer, and you need to remove Metropolitan Police virus .
Take some precautions while browsing because your computer might be infected withMetropolitan Police virus after you visit some website or download some free content contaminated with viruses. Avoid clicking links in suspicious email and websites with adult content that are often used for spreading ransomware like Metropolitan Police virus .
Metropolitan Police virus Removal Tool
Metropolitan Police virus is locks antivirus software and victim’s access to controls for protecting itself against removal. It is possible but difficult for an average computer user to remove Metropolitan Police virus manually. Some removal procedures are potentially dangerous to your computer system. Unless you understand everything in thismanual removal guide, it is better to use Metropolitan Police virus Removal Tool that comes with a free antispyware program and free online assistance.
Remove Metropolitan Police virus Manually
Start your system in Safe Mode and try to access Windows System Restore . You need to find the restore point set before your computer was infected with Metropolitan Police virus and restore your system to previous. System Restore will undo all the changes made by this virus, and you can restart your computer as normal and run a full scan with your security program to remove malicious files installed onto your PC.
If the System Restore is not available or there is no a restore point that you can use, then, do the following:
1. First, you need to check proxy settings and repair them to prevent hijacking that might link your computer to a malicious website that spread this infection.
2. Start your computer in a Safe Mode and log as a system administrator. Then access Startup folder. For this click Start, select All Programs and find Startup folder. Look at the startup folder and remove suspicious program that you cannot identify. Metropolitan Police virus uses a random name consist of characters and numbers, and some variations might use startup for blocking your computer. Disable suspicious items, restart your computer, and see if it helps.
3. If disabling suspicious files in Windows Startup list doesn’t help to prevent blocking your PC, than you need to fix registry keys used for blocking.
Click Start and type regedit in the search field below. Then press Enter. (On windows XP you need to click Run in the menu and type the command in the input field of the Run utility.
Press OK button, or Enter key, when done.)
In Registry Editor Look for the key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\
Double click on this key and find Shell in the right pane. It should be set to “Explorer.exe”. If there is something different or an addition to it after coma, right click this line and modify the value to “Explorer.exe” only.
Note: If you see path related to the name that you remove, write it down. It points to the program that runs Metropolitan Police virus , and you need to find and remove it.
VERY IMPORTANT: Before you make changes to your system registry database, make a backup file for the keys being changed or removed in your system registry. You can do this by opening File menu in the Registry Editor and clicking Export. Then follow instructions on the screen. If something goes wrong, you can restore this key by double clicking the saved registry backup file. If no problem is noticed, then you can just discard this file later. Unless you do the backup, you might end with inoperable machine that requires expensive professional attention.
Kill Metropolitan Police virus malicious processes
Note: The file is located in either %AppData% or %Temp% directory in the current user profile.
Remove Metropolitan Police virus entries from system registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell [random chars].exe
Delete Metropolitan Police virus files and folders:
%userprofile%\Local Settings\Application Data\Microsoft\Windows\ [random chars and numbers]
%userprofile%\Local Settings\Application Data\Microsoft\Windows\[random chars ] \ [random name].exe
Note: Better check for location in your system registry as described above since the path might be different.
If manual removal is difficult and confusing to you, then use removal tool and get a free assistance for removing Metropolitan Police virus and free antispyware program that will protect your computer against spyware for a full year.
Complete Metropolitan Police virus Removal
Metropolitan Police virus might come with other malicious programs. After you remove this virus, make an update to your antivirus software and scan your system. You can use free antivirus scanner from different manufacturers to make sure that no threat is missed. Then you need to scan your system for spyware with some anti-spyware program like one coming with offered Metropolitan Police virus Removal Tool since a normal antivirus software wouldn’t remove legitimate spyware used with malicious purpose by cyber criminals.
Find more about prevention computer infections and protection against malicious programs.