West Midlands Police Virus How to Remove Ukash Virus from Computers Thoroughl

Published on December 4, 2013

!eneral "nowledge a#out West Midlands Police Virus

West Midlands Police virus displays a full screen accusation message by police of violation on laws stating no violent films should be downloaded, no bulk sending of emails are allowed, no copyrighted content should be possessed and no porn content should be visited ! fine of "100 is prescribed to be submitted via #kash or Paysafecard for the abolishment of accusation as well as the deprivation of liberty

$he blocked screen is commonly seen to be the result of visiting porn site, which effectively convinces victims that %est &idlands Police sealed screen message is authentically issued by the police concerned and makes victims to hand over the non'

e(istent ransom willingly )ew cases happened to unblock target computers after the submission *owever, %est &idlands Police virus showed up after several hours to accuse for ransom even though no law'breaching activity had been made $herefore, submitting as prescribed is no use in unblocking computers +ictims should remove %est &idlands Police virus as soon as possible ,f there-s any .uestion especially posed by %indows /P owners, please feel free to live chat with VilmaTech $nline %upport for answers and help

Risk &ssessment on West Midlands Police Virus

%est &idlands Police virus, with high alert level, manages to make good use of vulnerability on web applications and system to initiate its fatal infiltration !s long as vulnerability, if any, being taken advantage, %est &idlands Police virus is capable of blocking installed secure defenders from working properly by sending numerous numbers of connections to a target machine for significant consumption of resource, resulting in little resource being left available, which is way too sufficient to support proper running !s a conse.uence, %est &idlands Police virus becomes able to further modify database without being interrupted, making it possible to scan the entire data stored on a target machine for information collection $he collected information will be made in duplicate, one of which is sent through backdoor to its appointed remote server, helping its cyber criminal gain huge profit out of the reselling of information0 the other is hidden somewhere to make victims believe that the #kash virus does wipe out personal data and submit the stated amount of money the ne(t time they get blocked again 1y modifications in database, %est &idlands Police virus is not only capable of introducing in additional virus due to the backdoor it

opens up, but also disabling build'in services, such as 2afe &ode, 2ystem 3estore, security defense and so on $o not putting e(tra work in removing additional infections and to remove %est &idlands Police virus .uickly, it is advised to adopt manual method that has been proven to be effective 3efer to the steps below only if professional skills are available0 otherwise, consult computer e(perts from +ilma$ech 4nline 2upport for solutions e(clusively suitable to concrete situation

How to Remove West Midlands Police Virus from Computers

5owadays, with lock'up virus being improved ceaselessly, 2afe &ode with 5etworking is usually being disabled $hus it is time saving to remove %est &idlands Police virus by entering 2afe &ode with 6ommand Prompt or entering into another user account, if any 1e noted that to remove items generated by %est &idlands Police virus re.uires administrator right

%tep one' 7nter into another user account to disable 2tartup items generated by %est &idlands Police virus

%indows 8 a *old and press !lt96trl9delete key combination to select :$ask &anager; in the brought up window b *it 7nter key to find and tick items generated by %est &idlands Police virus

c Press <Disable- option %indows =>/P>+ista a Press %in key and 3 key at once to bring up 2earch> 3un bo(

b $ype <msconfig- and hit 7nter key to bring up a window with several tabs c 5avigate to 2tartup tab to find and tick items generated by %est &idlands Police virus

d Press <Disable !ll- option

%tep two' 3emove %est &idlands Police virus from database

%indows 8 a *over mouse over lower right screen to enable 2earch charm and type <regeditb 7nter key follows up to bring up :3egistry 7ditor; c Press and hold 6trl9) to search for %inlogon

d ?ocate key labeled 2hell in the right pane when results are given out

e ,f the healthy user account is guest, right click on %inlogon to select :!uthority;>;?imit; @names can be different from 42A f 6lick on the current guest user account to tick all bo( in the :!llow; column, press 4B button to finish g 3ight click on %inlogon again to replace it with <e(plorer e(e- to help remove %est &idlands Police virus %indows =>/P>+ista a Put <regedit- in 3un bo( and press 7nter b Press and hold 6trl9) to search for %inlogon d ?ocate key labeled 2hell in the right pane when results are given out

e ,f the healthy user account is guest, right click on %inlogon to select :!uthority;>;?imit; @names can be different from 42A f 6lick on the current guest user account to tick all bo( in the :!llow; column, press 4B button to finish g 3ight click on %inlogon again to replace it with <e(plorer e(e- to help remove %est &idlands Police virus

%tep three' 2how hidden files to delete affiliates of %est &idlands Police virus inCected in kernel part

%indows 8 a 4pen %indows 7(plorer on 2tart 2creen

b 2elect +iew tab on %indows 7(plorer window to tick <)ile name e(tensions- and <*idden items- options c 5avigate to 3oaming folder and $emp folder respectively under 6D%indows to remove files with abnormal name @such as serial numbers with random lettersA, 3ecycler folders containing %est &idlands Police virus in all Disks %indows =>/P>+ista a Eet into <6ontrol Panel- from 2tart menu and search for <)older 4ptions-

b #nder +iew tab to tick <2how hidden files and folders and non'tick *ide protected operating system files @3ecommendedA- and then click <4Bc 5avigate to 3oaming folder and $emp folder respectively under 6D%indows to remove files with abnormal name @such as serial numbers with random lettersA, 3ecycler folders containing %est &idlands Police virus

If one doesnt have another user account, follow the below steps to create a new user account with administer right from CMD line.

%tep one' 7nter into 2afe &ode with 6ommand Prompt

%indows 8 a Press !lt,6trl and delete key together when %est &idlands Police virus is on screen b *old shift key and click on power button at the right bottom in blue screen to select 3estart c *ighlight $roubleshoot with arrow keys and hit 7nter key to bring up its window with options d 2elect !dvanced options e *it 3estart button at the right bottom of the screen to hit )F

functional key to get into 2afe &ode with 6ommand Prompt in the ne(t window

%indows =>/P>+ista a Beep tapping on :)8 key; continuously as the computer is booting but before %indows launches

b *ighlight :2afe &ode with 6ommand Prompt; option with arrow keys in :%indows !dvanced 4ptions &enu; window c Press 7nter key

%tep two' 6reate user account with administer right

%indows = a #nfold 2tart menu to click open 6ontrol Panel b 6lick #ser !ccounts and )amily 2afety

c 2elect #ser !ccounts to choose <&anage another accountd 4n the ne(t screen, select <6reate a new accounte $ype the name you want to name the user account f $ick <!dministrator- before clicking 6reate !ccount to finish creating a new administrative user account %indows /P a #nfold 2tart menu before clicking open 6ontrol Panel b Double click on <#ser !ccount- to select <6reate a new accountc $ype a name for the new user account before clicking on <5e(td $ick -6omputer administrator- before clicking <6reate !ccount%indows +ista a *it 2tart menu to click open 6ontrol Panel b 2elect <!dd or 3emove #ser !ccounts- option to choose <6reate a 5ew !ccountc 7nter an account name, then select account type as administrator d 6lick <6reate !ccount button- to finish the process %indows 8 a *over mouse over :#npin; button to click open <6ontrol Panel-

b 6hoose <!dd a user- under <#sers- section on the left pane

,f %indows ?ive id is available, use it to create a new account 4therwise, click on <&ore about logon options- to fill in the given form

c $hen follow the on'screen hint to finish creating a user account

%tep three' )ollow the same process depicted in the first section

Conclusion' %est &idlands Police virus copies itself to various directories, ensuring some key build'in services are disabled and affected to serve its will, which enables it to bypass detections and make random modifications in the kernel part of a machine to threaten victims into submitting money %hen the target machine is compromised further, more infections and computer problems will be seen after the removal of %est &idlands Police virus, such as search redirect virus, countless popup ads that completely ruin surfing e(perience, sluggish P6 performance, etc 2ince anti'virus programs are restricted from functioning appropriately by %est &idlands Police virus, it is recommended to adopt manual way for the removal *owever, some computer skills are needed ,f the choice goes to manual method but no computer skill is available, +ilma$ech 4nline 2upport is always here ready to help