Remove virus (Removal Guide) is a malicious domain which locks Internet Explorer, Firefox and Google Chrome, then asks their owners to pay fines for allegedly violating several laws through their online activity. is basically just  a web page containing a malicious javascript that does not allow you to close the browser window or switch to a different web page. malware
The virus will display a bogus notification that pretends to be from your local law enforcement agency (Examples: FBI, Department of Justice, Royal Canadian Mounted Police, Australian Federal Police, Police Central e-crime Unit) and states that your computer has been blocked due to it being involved with the distribution of pornographic material, spam and copyrighted content.
It goes on to say that you need to pay a ransom of 300$ in order to get access to your files and computer again. In order to pay this ransom you need purchase a MoneyPak voucher and submit it in the web browser. The malware’s authors prefer these payment services because transactions made through them cannot be reversed and are hard to trace.
Furthermore, to make this alert seem more authentic, also has the ability to access your installed webcam, so that the bogus alert shows what is happening in the room.

If your computer is infected with the browser hijacker, this infection will display a localized webpage that covers the entire web browser of the infected computer and demands payment for the supposed possession of illicit material. The message displayed by this ransomware infection can be localized depending on the user’s location, with text written in the appropriate language.

The text of the popup that is displayed when you try to close the browser window is: pop-up virus

Are you sure you want to leave this page?
Message from webpage:

YOUR BROWSER HAS BEEN BLOCKED UP. Leave this page or Stay on this page.

Cyber criminals often updated the design of this lock screen, however you should always keep in mind that no law enforcement agency (eg: FBI, Department of Justice, Royal Canadian Mounted Police or Police Central e-crime Unit) will never lock down your computer or monitor your online activities.

The lock screen is a scam, and you should ignore any alerts that this malicious software might generate. Under no circumstance should you send a MoneyPak, Ukash or Paysafecard voucher to these cyber criminals, and if you have, you can  should request a refund, stating that you are the victim of a computer virus and scam.

How to remove the virus (Removal Guide)

This page is a comprehensive guide, which will remove the infection from a Windows computer and an Apple Mac OS X machine. Please perform all the steps in the correct order. If you have any questions or doubt at any point, STOP and ask for our assistance.

How to Remove virus from a Windows PC

STEP 1: Remove browser hijacker from Internet Explorer, Firefox and Chrome
STEP 2: Remove virus with Malwarebytes Anti-Malware Free
STEP 3: Double-check for the infection with HitmanPro

STEP 1: Remove browser hijacker from Internet Explorer, Firefox and Chrome

  1. Open Task Manager by right-clicking the taskbar, and then clicking Start Task Manager. Alternatively to start the Windows Task Mager, you can press Ctrl+Alt+Del and click on Task Manager or simply press on Ctrl+Shift+Esc.
    [Image: Start Windows Task Manager]
  2. Click the Processes tab to see a list of all the processes that are currently running under your user account and a description of each process.
    [Image: Select the Process tab]
    To view all of the processes currently running on the computer, click Show processes from all users.
  3. Scroll through the list till you see your web browser’s process and left-click on it once so it becomes highlighted. Once you have selected the browser’s process, click on the End Process button as show in the picture below.
    If you are using this browser: End this process:
    Internet Explorer iexplore.exe
    Chrome chrome.exe
    Safari Safari.exe
    SeaMonkey seamonkey.exe
    Opera opera.exe
    Firefox firefox.exe

    [Image: Search for iexplorer.exe, firefox.exe or chrome.exe]

  4. When you click on the End Process button, Task Manager will ask you to confirm if you are sure you want to terminate it as shown in the image below.
    [Image: Kill the malicious process in Windows PC]
    At this point you should press the Yes button in order to kill the process.
  5. Your browser window should now be closed. The next time you open your browser, do not allow the browser to open the last opened page.

STEP 2: Remove virus with Malwarebytes Anti-Malware Free

Malwarebytes Anti-Malware Free uses industry-leading technology to detect and remove all traces of malware, including worms, Trojans, rootkits, rogues, dialers, spyware, and more.
It is important to note that Malwarebytes Anti-Malware works well and should run alongside antivirus software without conflicts.

  1. You can download download Malwarebytes Anti-Malware from the below link.
    MALWAREBYTES ANTI-MALWARE DOWNLOAD LINK (This link will open a new web page from where you can download Malwarebytes Anti-Malware Free)
  2. Once downloaded, close all programs, then double-click on the icon on your desktop named “mbam-setup-consumer-2.00.xx” to start the installation of Malwarebytes Anti-Malware.
    [Image: Malwarebytes Anti-Malware setup program]
    Picture of User Account Control You may be presented with a User Account Control dialog asking you if you want to run this file. If this happens, you should click “Yes” to continue with the installation.
  3. When the installation begins, you will see the Malwarebytes Anti-Malware Setup Wizard which will guide you through the installation process.
    [Image: Malwarebytes Anti-Malware Setup Wizard]
    To install Malwarebytes Anti-Malware on your machine, keep following the prompts by clicking the “Next” button.
    [Image: Malwarebytes Anti-Malware Final Setup Screen]
  4. Once installed, Malwarebytes Anti-Malware will automatically start and you will see a message stating that you should update the program, and that a scan has never been run on your system. To start a system scan you can click on the “Fix Now” button.
    [Image: Click on the Fix Now button to start a scan]
    Alternatively, you can click on the “Scan” tab and select “Threat Scan“, then click on the “Scan Now” button.
    [Image: Malwarebytes Anti-Malware Threat Scan]
  5. Malwarebytes Anti-Malware will now check for updates, and if there are any, you will need to click on the “Update Now” button.
    [Image: Click on Update Now to update Malwarebytes Anti-Malware]
  6. Malwarebytes Anti-Malware will now start scanning your computer for the virus. When Malwarebytes Anti-Malware is scanning it will look like the image below.
    [Image: Malwarebytes Anti-Malware while performing a scan]
  7. When the scan has completed, you will now be presented with a screen showing you the malware infections that Malwarebytes’ Anti-Malware has detected. To remove the malicious programs that Malwarebytes Anti-malware has found, click on the “Quarantine All” button, and then click on the “Apply Now” button.
    [Image: Remove with Malwarebytes Anti-Malware]
    Please note that the infections found may be different than what is shown in the image.
  8. Malwarebytes Anti-Malware will now quarantine all the malicious files and registry keys that it has found. When removing the files, Malwarebytes Anti-Malware may require a reboot in order to remove some of them. If it displays a message stating that it needs to reboot your computer, please allow it to do so.
    [Image: Malwarebytes Anti-Malware removing]
    After your computer will restart, you should open Malwarebytes Anti-Malware and perform another “Threat Scan” scan to verify that there are no remaining threats

STEP 3: Double-check for the infection with HitmanPro

HitmanPro is a second opinion scanner, designed to rescue your computer from malware (viruses, trojans, rootkits, etc.) that have infected your computer despite all the security measures you have taken (such as anti-virus software, firewalls, etc.). HitmanPro is designed to work alongside existing security programs without any conflicts. It scans the computer quickly (less than 5 minutes) and does not slow down the computer.

  1. You can download HitmanPro from the below link:
    HITMANPRO DOWNLOAD LINK (This link will open a new web page from where you can download HitmanPro)
  2. Double-click on the file named “HitmanPro.exe” (for 32-bit versions of Windows) or “HitmanPro_x64.exe” (for 64-bit versions of Windows). When the program starts you will be presented with the start screen as shown below.
    [Image: HitmanPro start-up screen]
    Click on the “Next” button, to install HitmanPro on your computer.
    [Image: HitmanPro setup options]
  3. HitmanPro will now begin to scan your computer for malicious files.
    [Image: HitmanPro scanning for malware]
  4. When it has finished it will display a list of all the malware that the program found as shown in the image below. Click on the “Next” button, to remove virus.
    [Image: HitmanPro scan results]
  5. Click on the “Activate free license” button to begin the free 30 days trial, and remove all the malicious files from your computer.
    [Image: HitmanPro Activate Free License]

How to Remove virus from an Apple Mac OS X

For years, Windows users have been plagued by ransomware demanding several hundred dollars to unlock their computers.
The bad guys know there is a growing market of Apple consumers who, for the most part, feel pretty safe about browsing the Internet on a Mac without the need for any security product.
Cyber-criminals, well known for not re-inventing the wheel, have ‘ported’ the latest ransomware to OS X, not by using some complicated exploit but rather leveraging the browser and its ‘restore from crash’ feature. The ransomware page is being pushed onto unsuspecting users browsing regular sites but in particular when searching for popular keywords.
To remove from your Apple MAC OS X browser you can follow any of below options.

OPTION 1: Remove malicious web page from Apple Mac OS X by resetting Safari to its default settings
OPTION 2: Remove browser hijacker Apple Mac OS X virus using Force Quit for your browser
OPTION 3: Remove malicious web page from Apple Mac OS X by disabling Javascript

OPTION 1: Remove malicious web page from Apple Mac OS X by resetting Safari to its default settings

To remove the browser hijacker from Safari, we will need to reset your browser to its default settings.

  1. Click on the Safari menu and then choose Reset Safari
    [Image: Select Reset Safari from the menu]
  2. In the new windows, make sure all items are marked and click on the Reset button.
    [Image: Reset Safari to default settings]

OPTION 2: Remove browser hijacker Apple Mac OS X virus using Force Quit for your browser

  1. Press Command + Option + Escape simultaneously. This will open the open the Force Quit Applications window.
    [Image: Press Command + Option + Escape to start Force Quit menu]
  2. Select Safari, Chrome, Firefox or any other browser in which your are seeing the ransomware notification.
    [Image: Select Firefox, Chrome or Safari from Force Quit menu]
  3. Click the button that says “Force Quit“. This will forcefully end your browser program, thus removing the browser hijacker.
    [Image: Click on the Force Quit button to remove virus]
    If you cannot switch from the unresponsive app, press Command + Option + Shift + Esc for three seconds to force it to quit. This key combination tells OS X to force quit the frontmost app.

OPTION 3: Remove malicious web page from Apple Mac OS X by disabling Javascript

  1. Click on Safari in your browser menu, located at the top of your screen. When the drop-down menu appears, select the choice labeled Preferences
    Please note that you can use the following keyboard shortcut in lieu of the aforementioned menu item: COMMAND (APPLE) + COMMA
    [Image: Select Preferences from the Safari menu]
  2. Safari’s Preferences dialog should now be displayed, overlaying your browser window. Click on the tab labeled Security.
    [Image: Select Security from the Safari menu]
  3. Safari Security Preferences should now be displayed. In the third section from the top, labeled Web content, is an option titled Enable JavaScript. By default, this option is checked and therefore active. To disable JavaScript, simply uncheck the appropriate box. Then you should be able to close and browser away.
    [Image: Disable Javascript in Safari]
    Once you have closed, you can enable Javascript again in Safari.

To protect your Apple Mac OS X from future infections, we recommend that you download and install avast! Free Antivirus for Mac.


I am the creator and owner of the MalwareTips Community. I've started this site in 2010 to help people solve their computer problems.
I live in Bucharest, where I run my own local computer repair shop. My area of expertise includes malware removal and computer forensics. I'm active in the various online anti-malware communities where I do researches for new malware threats as they are released.

We love Malwarebytes and HitmanPro!

We really like the free versions of Malwarebytes and HitmanPro, and we love the Malwarebytes Premium and HitmanPro.Alert extra features.

Malwarebytes Logo Malwarebytes Premium sits beside your traditional antivirus, filling in any gaps in its defenses, providing extra protection against sneakier security threats.

Malwarebytes Premium Features

HitmanPro Logo HitmanPro.Alert prevents good programs from being exploited, stops ransomware from running, and detects a host of different intruders by analyzing their behavior. HitmanPro.Alert will run alongside your current antivirus without any issues.

HitmanPro.Alert Features