- Completely locked me out of the system including the keyboard and mouse (apart from the keypad)
- A banner that took up the whole of my monitor appeared with a "policeman" giving a stop signal to me.
- Content included: "This computer has been locked due to known criminal activity including the following: Child Pornography, Gambling, Copyright Theft etc". In addition there was a section where the malware must integrate with your local webcam where it quotes "We are watching you" with the output of the webcam integrated on the banner.
- Also - it resolves your IP address. ISP and location using an internet connection to make it look more realistic.
- Finally - it stated that to unlock the computer - Please dial a number and pay 100 GBP. A keycode will be be provided to unlock the computer.
- Disconnect from the internet - this will stop the banner from starting
- Perform an unexpected reboot of your PC and boot into Windows Safe mode
- Go to Start > Run > and type 'msconfig'
- Locate to the startup tab and scroll down to near the bottom
- Untick any unfamilar startup entries that are in another language or does not fit in to your other startup entries, click Apply, OK.
- Find out the location of the start up program and remove it (if you attempt to so this on normal boot of windows you will get an error).
- Reboot your system