Cheshire Police Authority Virus

[chrisrob]

Not really a question but an alert in case this happens to you.

On restarting my computer (after cleaning up and defrag), the screen froze and an official looking screen came up saying Cheshire Police Authority had locked my computer as I had used it for illegal downloads (which is untrue). And instructions on how to pay a hefty fine to have the machine unlocked.

After hitting CTRL/ALT/DEL a number of times, I eventually managed to get a response permitting me to LOG OFF. As soon as I chose this, the machine was freed and I immediately cancelled the instruction - and can now use it normally.

A google search showed me it is, in fact, a virus but my AVG, Commodo firewall, Advanced System Care, etc had failed to spot it.

Don't know how I got it nor how it's propagated so am following the instructions I downloaded here (http://www.spywarehelpcenter.com/cheshire-police-authority-virus-removal-instructions/ ) to get rid of it.

[marval]

Thank you for the warning.

[VHG]

These types of things are called "ransomware" and basically they try to lock you out of your computer and insist you pay a certain amount of money (say £100) for them to unlock it.

I have helped a few neighbours who have had this problem and in a few cases nothing I did would allow me to get past the "ransom" screen.

One thing that may help is to set yourself up a "spare" Windows user id so that if you get locked out your main userid you can log on to the "spare" one to run you security packages to see if they fix it.

In one case I had to download the Kaspersky rescue disk (for free) and boot from that and then run their security. This got rid of the problem.

This ransomware can be very nasty and can lock you totally out of your computer so be warned.

Read more here

http://www.microsoft.com/en-gb/security/resources/ransomware-whatis.aspx

[chrisrob]

Thanks VHG. I do nave a spare persona already as you have suggested. I was logging off to use it when I managed to regain control. But scanning with latest version of AVG couldn't find it. SpyHunter, however, found it in a file entitled Skype.dat. I don't actually (yet) use Skype though Live mail has told me I'll be automatically upgraded to it. Almost makes me wonder whether the virus came through a microsoft upgrade!

[deggers316]

also looks like a ad for spyhunter too

[puternut]

This is well documented as a malware program and has generally been called a 'UKash' problem.

Some people, including a relative of mine, who had a US / FBI warning could not open in safe mode so I made her a boot USB Stick which automatically ran a malware program (Hitman Pro) on boot up.

[chrisrob]

Thanks. I successfully got rid of it but wonder where it came from in the first place.