This tutorial contains step by step instructions on how to remove any POLICE DEPARTMENT scam – virus e.g. FBI Moneypak, Metropolitan Police Virus, Police Ukash, AKA Police Virus, Lock screen virus Mandiant, Cyber Security virus, etc. First of all you must know that all these viruses are scam and was designed by cybercriminals to earn money from you. For that reason are named ransomware.
The POLICE ransomware virus locks your computer screen and makes impossible to work with your computer and terrifies you that your computer is locked because you violate copyright laws or because you have accessed pornographic material and in order to unlock your computer you must pay the ransom. If you see a similar message on your screen, please DO NOT PANIC & DO NO PAY the requested ransom to cybercriminals.
To disinfect your computer from FBI POLICE virus just follow the steps below:
How to unblock & clean your computer from FBI POLICE Ransomware infection.
There are three (3) easy methods to disinfect and unblock your computer from Police ransomware virus:
Method 1: Use System Restore to remove FBI Police virus.
To restore you system in a previous working state:
- Windows XP:
- Read this article Windows XP System Restore (How To).
- Windows 7, Vista:
- Restart your computer and hit the “F8” key while your computer is starting up (before the appearance of Windows Logo).
- When “Advanced options” menu appears on your screen, navigate to “Repair your computer” option (using your keyboard arrow keys) option and hit Enter.
- Choose your Keyboard layout (e.g. US) & press Next
- Choose an administrator user and type your password (in case you have one).
- At the System Recovery options window, choose System Restore.
- At System Restore information window, press Next.
- Choose a previous restore point from the list & press Next.
- Wait until System restore is completed & restart your computer.
- Windows 8 & Windows 8.1:
- Start your computer normally.
- At login (password screen), hold down the Shift key and click the Power button at the bottom right corner on your screen & choose Restart.*
* Note: If your computer login straight to Windows without typing the user password, then when the virus lock screen shows up, press
Ctrl + Alt + Del key to open the Switch User interface. Then hold down the Shift key and click the Power button at the bottom right corner on your screen & choose Restart. - At Choose an option screen, choose Troubleshoot.
- At Troubleshoot screen, choose Advanced Options.
- At Advanced Options screen choose Startup Settings.
- At Startup Settings screen click Restart.
- When “Advanced options” menu appears on your screen, navigate to “Repair your computer” option (using your keyboard arrow keys) option and hit Enter.
- Choose your Keyboard layout (e.g. US) & press Next.
- Choose an administrator user and type your password (in case you have one).
- At the System Recovery options window, choose System Restore.
- At System Restore information window, press Next.
- Choose a previous restore point from the list & press Next.
- Wait until System restore is completed & restart your computer.
Method 2: Use Kaspersky’s Windows Unlocker utility to unlock your computer from POLICE (Windows locker) virus.
From another clean computer:
- Download Kaspersky WindowsUnlocker Rescue Disk to your computer.
- Burn the “kav_rescue_10.iso” image file to an empty CD using ImgBurn. How to burn an ISO file to a CD/DVD disk.
- Boot your computer with Kaspersky WindowsUnlocker Rescue Disk and follow the instructions to disinfect your computer from here: How to launch Kaspersky WindowsUnlocker and disinfect the registry.
- After you have clean Windows registry from malicious entries follow the steps 3 to 8 of method 3 below, to clean the remained malicious files and entries from your computer.
Method 3: Remove FBI Police ransomware manually.
Step 1: Start your computer in “Safe Mode”.
First of all you have to boot your computer into safe mode to prevent any malicious programs from running. To do that:
- Windows 7, Vista & XP:
- Restart your computer and hit the “F8” key while your computer is starting up (before the appearance of Windows Logo).
- When “Advanced options” menu appears on your screen, navigate to “Safe Mode With Networking” option (using your keyboard arrow keys) option and hit Enter.
- Windows 8 & Windows 8.1:
- Start your computer normally.
- At login (password screen), hold down the Shift key and click the Power button at the bottom right corner on your screen & choose Restart.*
* Note: If your computer login straight to Windows without typing the user password, then when the virus lock screen shows up, press
Ctrl + Alt + Del key to open the Switch User interface. Then hold down the Shift key and click the Power button at the bottom right corner on your screen & choose Restart. - At Choose an option screen, choose Troubleshoot.
- At Troubleshoot screen, choose Advanced Options.
- At Advanced Options screen choose Startup Settings.
- At Startup Settings screen click Restart.
- When “Advanced options” menu appears on your screen, navigate to “Safe Mode With Networking” option (using your keyboard arrow keys) option and hit Enter.
Step 2. Remove POLICE virus suspicious files from Temp Folders
- Enable the Hidden files & folders view. To do that:
- Open Windows Control Panel:
- Open Folder Options.
- Click the View tab
- Check to enable the Show hidden files, folders, and drives option.
- Uncheck the “Hide protected operating system files (Recommended)” option.
- Click the View tab
- Click OK.
- Open Folder Options.
- Open Windows Control Panel:
- Delete all files inside these folders:
- Windows 8, 7, Vista:
- C:Temp
- C:WindowsTemp
- C:Users<USERNAME>AppDataLocalTemp
- C:Users<USERNAME>AppDataLocalMicrosoftWindowsTemporary Internet Files
- C:Users<USERNAME>AppDataRoamingMicrosoftWindowsStart MenuProgramsStartup
- C:UsersDefaultAppDataLocalTemp
- C:UsersDefaultAppDataLocalMicrosoftWindowsTemporary Internet Files
- C:UsersAll UsersAppDataRoamingMicrosoftWindowsStart MenuProgramsStartup
- C:UsersAll UsersTEMP
- Windows XP:
- C:Temp
- C:WindowsTemp
- C:Documents and Settings<USERNAME>Local SettingsTemp
- C:Documents and Settings<USERNAME>Local SettingsTemporary Internet Files
- C:Documents and Settings<USERNAME>Start MenuProgramsStartup
- C:Documents and SettingsDefault UserLocal SettingsTemp
- C:Documents and SettingsDefault UserLocal SettingsTemporary Internet Files
- C:Documents and SettingsAll UsersStart MenuProgramsStartup
- Windows 8, 7, Vista:
Step 3: Remove Police Virus malicious entries from Windows Startup.
- Download and install CCleaner.
- Run CCleaner utility & select “Tools” from the left pane.
- Press the “Startup” button.
- At the “Windows” tab:
- Delete any suspicious entry that is listed there. (e.g. “C:Windowsprogram.lnk” ).
- At the Scheduled Tasks tab:
- Select & Delete any scheduled task named At, At1, At2, etc.
- Close CCleaner.
- Restart your computer in Safe Mode with Networking again.
Step 4: Remove Police Virus infection using MalwareBytes Anti-Malware.
- Download and install Malwarebytes Anti-Malware Free. (Beware: at the last screen of installation, uncheck the box next to “Enable free Trial of Malwarebytes Anti-Malware PRO” in order to use the free version of this GREAT software).
- Run Malwarebytes Anti-Malware.
- Update the Database.
- Press the “Scan Now” button and then wait until the scan process is finished.
- When the scan is completed select all items found and then press “Quarantine All”.
- Restart your computer if needed.
Step 5: Remove Police Virus malicious files from with RogueKiller.
- Download and run RogueKiller.
- Press the “Scan” button (when pre-scan operation is complete).
- Be patient until Rogue Killer scans your system.
- When the scan is finished select all items found at “Registry” & “Web Browsers” tabs.
- Press the “Delete” button to clean them.
Step 6. Remove Adware programs by using AdwCleaner.
- Download AdwCleaner utility to your computer (e.g. your desktop).
- After you download it, close all open programs and run AdwCleaner.
- At the main window, press the “Scan” button and wait until the scan is completed.
- Finally press the “Clean” button to remove all the entries it has found and restart your computer.
Step 7: Remove Junkware programs by using JRT.
- Download and run Junkware Removal Tool.
- Be patient until JRT scans and cleans your system and then reboot your computer again.
Step 8: Remove Virus(es) with your Antivirus Program.
- Start you Antivirus program and perform a full antivirus scan.
Step 9 (Optional): Reset Internet Browser Settings.
Internet Explorer
How to reset Internet Explorer settings:
- From Internet Explorer’s main menu, click: the “gear” icon at the top right corner and choose “Internet Options”.
- Go to “Advanced Tab”.
- Click the “Reset” button.
- Check to enable the “Delete Personal Settings”.
- Press “Reset”
- Close all Internet Explorer windows.
- Restart Internet Explorer.
Firefox
How to reset Firefox settings:
- From Firefox Main menu choose “Help” > “Troubleshooting Information”
- Press the “Reset Firefox” button
- Press the “Reset Firefox” button again,
- Restart Firefox (After reset, Firefox restarts automatically).
Google Chrome
How to reset Chrome settings:
- Click on Chrome’s menu icon at the upper right corner) and choose “Settings“.
- Scroll down at “Settings” page and click “Show Advanced Settings…“.
- Scroll down again and press the “Reset browser settings” icon.
- Click “Reset” one more time.
- Restart Google Chrome.
That’s all folks! It might sound like a lot of work, but in reality you’ll be free from the FBI POLICE DEPARTMENT virus (Lock Screen) in less than 30 minutes, if you follow these instructions. Did it work for you? Please leave a comment in the comment section below or even better: like and share this blog post in the social networks to help spread the word about these really annoying crap Windows infections.