Remove Metropolitan Police

Photo of author

Written by: Stelian Pilici

Published on:

Metropolitan Police is a malicious software (Trojan Ransomware) that is locking your computer, and posing as an official notice from a law enforcement agency, claims that the your PC has been determined to have visited illegal websites.In reality, none of what Metropolitan Police is reporting is real, and the alert is only used to scare you into paying for a non-existing fine and stealing your personal financial information

If you’ve got a Metropolitan Police infection , you’ll be seeing this screens :

[Image: Metropolitan Police]
We strongly advise you to follow our Federal Computer Crime Unit removal guide and ignore any alerts that this malicious software might generate.Under no circumstance should you send any any money to this cyber criminals as this could lead to identity theft.

Removal guide for Metropolitan Police

STEP 1: Remove the Metropolitan Police lock creen using HitmanPro ForceBreach.

We will be using the Kaspersky Rescue Disk Bootable CD to clean the Windows registry and to perform a system scan to remove the malicious files.
What you’ll need to perform this removal guide :

  1. A computer with Internet access.
  2. 1 blank DVD or CD
  3. 1 DVD/CD Burner
  4. Software which can create a bootable CD –  http://www.imgburn.com/index.php?act=download
  5. A copy of the latest Kaspersky Rescue Disc from here –  http://rescuedisk.kaspersky-labs.com/rescuedisk/updatable/
  6. About 1 -2  hours depending on how much data you have on C:

STEP 1: Download and create a bootable Kaspersky Rescue Disk CD

  1. Download the Kaspersky Rescue Disk ISOimage from below.
    KASPERSKY RESCUE DISK DOWNLOAD LINK (This link will open a new page from where you can download Kaspersky Rescue Disk ISO)
  2. Download ImgBurn, a software that will help us create this bootable disk.
    IMGBURN DOWNLOAD LINK (This link will open a new page from where you can download ImgBurn)
  3. You can now insert your blank DVD/CD in your burner.
  4. Install ImgBurn by following the prompts and then start this program.
  5. Click on the Write image file to disc button.
    Create bootable CD step1
  6. Under ‘Source’ click on the Browse for file button, then browse to the location where you previously saved the Kaspersky Rescue Disk ISO file.(kav_rescue_10.iso)
    Create bootable CD step2
  7. Click on the big Write button.
    Create bootable CD step3
  8. The disc creation process will now start and it will take around 5-10 minutes to complete.

STEP 2:Configure the computer to boot from CD-ROM

  1. Use the Delete or F2 keys, to load the BIOS menu.Information how to enter the BIOS menu is displayed on the screen at the start of the OS boot:
    Boot into Bios
  2. In your PC BIOS settings select the Boot menu and set CD/DVD-ROM as a primary boot device.
    Boot into BIOS Step2
  3. Insert your Kaspersky Rescue Disk and restart your computer.

STEP 3:Boot your computer from Kaspersky Rescue Disk

  1. Your computer will now boot from the Kaspersky Rescue Disk,and you’ll be asked to press any key to proceed with this process
    Kaspersky Rescue Disk 1
  2. In the start up wizard window that will open, select your language using the cursor moving keys. Press the ENTER key on the keyboard.
    Kaspersky Rescue Disk 2
  3. On the next screen, select Kaspersky Rescue Disk. Graphic Mode then press ENTER.
    Kaspersky Rescue Disk 3
  4. The End User License Agreement of Kaspersky Rescue Disk will be displayed on the screen. Read carefully the agreement then press the C button on your keyboard.
    Kaspersky Rescue Disk 4
  5. Once the actions described above have been performed, the Kasprsky operating system will start.

STEP 4: Launch Kaspersky WindowsUnlocker to remove the Metropolitan Police virus malicious registry changes

Metropolitan Police has modified your Windows system registry so that when you’re trying to boot your computer it will instead launch his lock screen.To remove this malicious registry changes we need to use the Kasersky WindowsUnlocker from Kaspersky Rescue Disk.

  1. Click on the Start button located in the left bottom corner of the screen and select the Kaspersky WindowsUnlocker.
    Kaspersky Rescue Disk WindowsUnlocker 1
    Alternatively you can select Terminal and in the command prompt type windowsunlocker and then press Enteron the keyboard.
  2. A white colored console window will appear and will automatically start loading the registry files for scanning and disinfection. The whole process will take only a couple of seconds and after this process you should be able to boot your computer in normal mode.
    Kaspersky Rescue Disk WindowsUnlocker 2

STEP 5:Scan your system with Kaspersky Rescue Disk

  1. Click on the Start button located in the left bottom corner of the screen and select the Kaspersky Rescue Disk then click on My Update Center and press Start update.
    Kaspersky Bootable Cd scan 1
  2. When the update process has completed, the light at the top of the window will turn green, and the databases release date will be updated.
    Kaspersky Bootable Cd scan 2
  3. Click on the Objects Scan tab, then click Start Objects Scanto begin the scan.
    Kaspersky Bootable Cd scan 3
  4. If any malicious items are found, the default settings are to prompt you for action with a red popup window on the bottom right. Delete is the recommended action in most cases but we strongly recommend that you try first to disinfect , and if it doesn’t work chose to quarantine the infected files just to be on the safe side.
    Kaspersky Bootable Cd scan 5
  5. When all detected items have been processed and removed, the light in the window will turn green and the scan will show as completed.
    Kaspersky Bootable Cd scan 7
  6. When done you can close the Kaspersky Rescue Disk window and use the Start Menu to Restart the computer.

STEP 6: Download and scan with Malwarebytes Anti-Malware FREE to remove any left over malicious files from your computer.

  1. Download and run Malwarebytes Anti-Malware FREE
    MALWAREBYTES ANTI-MALWARE DOWNLOAD LINK
  2. Install Mawlarebytes Anti-Malware by following the prompts. Do not make any changes to the default installation settings and do not restart your computer if asked so.
    [Image: Scan with Malwarebytes S1]
  3. On the Scanner tab,please select Perform full scan and then click on the Scan button to start scanning your computer for any possible infections.
    [Image: Scan with Malwarebytes S2]
  4. When the scan is finished click the ‘OK‘ button and then you will be presented with a screen showing you the malware infections that Malwarebytes’ Anti-Malware has detected.
    Make sure that everything is Checked (ticked) and click on Remove Selected button.
    [Image: Scan with Malwarebytes S3]
  5. Malwarebytes’ Anti-Malware will now start removing the malicious files.
    If during the removal process Malwarebytes will display a message stating that it needs to reboot, please allow this request.

If you are still experiencing problems while trying to remove Canadian Security Intelligence Service from your machine, please start a new thread in our Malware Removal Assistance forum.

What’s next? Join our amazing community and build up your malware defenses !

How to Stay Safe Online

Here are 10 basic security tips to help you avoid malware and protect your device:

  1. Use a good antivirus and keep it up-to-date.

    Shield Guide

    It's essential to use a good quality antivirus and keep it up-to-date to stay ahead of the latest cyber threats. We are huge fans of Malwarebytes Premium and use it on all of our devices, including Windows and Mac computers as well as our mobile devices. Malwarebytes sits beside your traditional antivirus, filling in any gaps in its defenses, and providing extra protection against sneakier security threats.

  2. Keep software and operating systems up-to-date.

    updates-guide

    Keep your operating system and apps up to date. Whenever an update is released for your device, download and install it right away. These updates often include security fixes, vulnerability patches, and other necessary maintenance.

  3. Be careful when installing programs and apps.

    install guide

    Pay close attention to installation screens and license agreements when installing software. Custom or advanced installation options will often disclose any third-party software that is also being installed. Take great care in every stage of the process and make sure you know what it is you're agreeing to before you click "Next."

  4. Install an ad blocker.

    Ad Blocker

    Use a browser-based content blocker, like AdGuard. Content blockers help stop malicious ads, Trojans, phishing, and other undesirable content that an antivirus product alone may not stop.

  5. Be careful what you download.

    Trojan Horse

    A top goal of cybercriminals is to trick you into downloading malware—programs or apps that carry malware or try to steal information. This malware can be disguised as an app: anything from a popular game to something that checks traffic or the weather.

  6. Be alert for people trying to trick you.

    warning sign

    Whether it's your email, phone, messenger, or other applications, always be alert and on guard for someone trying to trick you into clicking on links or replying to messages. Remember that it's easy to spoof phone numbers, so a familiar name or number doesn't make messages more trustworthy.

  7. Back up your data.

    backup sign

    Back up your data frequently and check that your backup data can be restored. You can do this manually on an external HDD/USB stick, or automatically using backup software. This is also the best way to counter ransomware. Never connect the backup drive to a computer if you suspect that the computer is infected with malware.

  8. Choose strong passwords.

    lock sign

    Use strong and unique passwords for each of your accounts. Avoid using personal information or easily guessable words in your passwords. Enable two-factor authentication (2FA) on your accounts whenever possible.

  9. Be careful where you click.

    cursor sign

    Be cautious when clicking on links or downloading attachments from unknown sources. These could potentially contain malware or phishing scams.

  10. Don't use pirated software.

    Shady Guide

    Avoid using Peer-to-Peer (P2P) file-sharing programs, keygens, cracks, and other pirated software that can often compromise your data, privacy, or both.

To avoid potential dangers on the internet, it's important to follow these 10 basic safety rules. By doing so, you can protect yourself from many of the unpleasant surprises that can arise when using the web.

4 thoughts on “Remove Metropolitan Police”

  2. I ran the disk but mine says some are infected archives and recomends skipping. How should i proceed then?

  3. Hi if i were you I would run scans for a few days

    And that bootable kaspersky disk 10 did the trick for me(hitmanpro found stuff fixed them but they just kept on coming back

    fora few days I kept thinking amI clean as mycomputer is new so I wanted to start loading my programs …but i waited scanned for 3 days ..I used Microsoft security essentials ..then malwarebytes antimalware thenkaspersky d bootable disk 10

    I kep tdoin all rebooting thendoing the 3 in different order

    Sounds long and boring and it was a bit but now I feel totally clean so I can start to use thecomputer and not have that niggling feeling in the back of my mind all of the time …”are they stealing passwords or bank details etc”

    Just tryin to help …and advise what helped me

    Gary

  4. Hi! Thank you for posting about this malware removal! If you don’t mind, I’d like to ask for your opinion and suggestion. Yesterday while surfing the web with my laptop, my Kaspersky Antivirus 2012 detected Trojan.Win32.Inject.ebqb and recommend me to disinfect with reboot, which I did. After log in to windows again however, the Metropolitan Police malware window suddenly appear. I pressed the power button to put it on hibernate mode while investigating about the thing. I found a tip of removing it from Safe Mode with Command Prompt, so I turned my laptop on and hold the F8 button and enter Safe Mode with Command Prompt. While it was still loading the windows files, my laptop stopped working, so I restart my laptop again and press F8 button to repeat the procedure, but the screen said that one of my drive is unstable and my laptop analyzed (and I think corrected) the problems. After that the windows start normally and the Metropolitan Police window no longer appear. I did full scan using Malwarebytes and it only detected Rootkit.0Acess which I deleted. During the Malwarebytes scan, the same Kaspersky window (detecting Trojan) re-appear but I did nothing. After the Malwarebytes scan completed I scanned my laptop using Kaspersky and it detected several Trojan files. However until now, the status of that particular Trojan.Win32.Inject.ebqb is still ‘will be processed after re-boot’ no matter how many times I restart my laptop. Yesterday I also tried to enter the Safe Mode again to try and find the possible file of that malware but found nothing. However when I pressed F8, there is this option: ‘correct my computer’ along with other options. My doubt is this: Is my laptop now perfectly free from that malware? Is it possible that my laptop correct itself? And what should I do about that Trojan which hasn’t been processed yet? So far I can use my laptop to work normally, connect to the internet (and write this comment) and the Metropolitan Police window never appear again, but I still got some doubts. I would really appreciate your opinion. Thank you very much!

Leave a Comment

Previous

Remove Computer Crime Intellectual Property

Next

Remove Windows Software Saver