{"id":427686,"date":"2026-10-13T05:10:25","date_gmt":"2026-10-13T05:10:25","guid":{"rendered":"https:\/\/malwaretips.com\/blogs\/?p=427686"},"modified":"2026-10-13T07:55:18","modified_gmt":"2026-10-13T07:55:18","slug":"fake-police-virus-warning","status":"publish","type":"post","link":"https:\/\/malwaretips.com\/blogs\/fake-police-virus-warning\/","title":{"rendered":"Fake Police Virus Warning? How to Unlock Your PC and Remove the Infection"},"content":{"rendered":"If your computer is locked, and you are seeing a &#8220;<strong>Your computer has been blocked<\/strong>&#8221; notification from a law enforcement agency (FBI, Australian Federal Police, Metropolitan Police, U.S. Department of Justice) asking you to pay a fine via GreenDot MoneyPak, Ukash or Paysafecard code, you are seeing a police impersonation scam. Older Windows screen-locking infections included Trojan Reveton, but a webpage with this message does not by itself identify that malware.\n<p><strong>If only the browser is blocked:<\/strong> press <strong>Esc<\/strong> to leave full screen, then close the tab. If it will not close, press <strong>Ctrl + Shift + Esc<\/strong>, select the browser in Task Manager, and choose <strong>End task<\/strong>. Reopen it without restoring the scam tab. Use the recovery options below if Windows itself remains locked or you ran a downloaded file.<\/p><div id=\"mwtad3766794727\" class=\"gas_fallback-ad_309684--placement_406659\" style=\"margin-top: 50px;margin-right: 10px;margin-bottom: 50px;margin-left: 10px;\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-7750719144850257\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-7750719144850257\" \ndata-ad-slot=\"3957935887\" \ndata-ad-format=\"auto\" data-full-width-responsive=\"true\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div>\r\n\n\n\n<figure class=\"wp-block-image size-full\"><img src=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2026\/10\/fake-police-lock-mwt-oct2026.webp\" alt=\"Conceptual illustration of a fake police screen lock being separated from a protected computer\" class=\"wp-image-427687\" width=\"1440\" height=\"810\" decoding=\"async\" fetchpriority=\"high\" loading=\"eager\" title=\"\" srcset=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2026\/10\/fake-police-lock-mwt-oct2026.webp 1440w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2026\/10\/fake-police-lock-mwt-oct2026-300x169.webp 300w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2026\/10\/fake-police-lock-mwt-oct2026-1024x576.webp 1024w\" sizes=\"(max-width: 1440px) 100vw, 1440px\" \/><\/figure>\n\n\n\r\nThe Police Ukash or Moneypak virus is distributed through several means. Malicious websites, or legitimate websites that have been hacked, can infect your machine through exploit kits that use vulnerabilities on your computer to install this trojan without your permission or knowledge.\r\nAnother method used to propagate this type of malware is spam email containing infected attachments or links to malicious websites. Cybercriminals spam out an email, with forged header information, tricking you into believing that it is from a shipping company like DHL or FedEx. The email tells you that they tried to deliver a package to you, but failed for some reason. Sometimes the emails claim to be notifications of a shipment you have made. Either way, you can&#8217;t resist being curious as to what the email is referring to &#8211; and open the attached file (or click on a link embedded inside the email). And with that, your computer is infected with the Police Ukash or Moneypak virus.\r\nThe threat may also be downloaded manually by tricking the user into thinking they are installing a useful piece of software, for instance a bogus update for Adobe Flash Player or another piece of software.\r\nThe Police Ukash or Moneypak virus is also prevalent on peer-to-peer file sharing websites and is often packaged with pirated or illegally acquired software.\r\n\r\nOnce installed on your computer, the Police Ukash or Moneypak virus will display a <strong>bogus notification<\/strong>\u00a0that pretends to be from <strong>an official law enforcement agency<\/strong> (examples: Irish An Garda S\u00edoch\u00e1na, Royal Canadian Mounted Police, Police Central e-crime Unit) and states that your computer has been blocked due to it being involved with the distribution of pornographic material, SPAM and copyrighted content.\r\n\r\nThe <strong>Police Ukash or Moneypak virus will lock you out of your computer and applications<\/strong>, so whenever you&#8217;ll try to log on into your Windows operating system or Safe Mode with Networking, it will display instead a lock screen asking you to pay <strong>a non-existing fine of <\/strong>\u00a0in the form of a Moneypak, Ukash or Paysafecard voucher.\r\nFurthermore, to make this alert seem more authentic, <strong>this virus also has the ability to access your installed webcam<\/strong>, so that the bogus Police Ukash or Moneypak\u00a0notification shows what is happening in the room.\r\n\r\nThe Police Ukash or Moneypak virus locks the computer and depending on the user\u2019s current location, displays a localized webpage that covers the entire desktop of the infected computer and demands payment for the supposed possession of illicit material.\r\n\r\n\r\nCyber criminals often updated the design of this lock screen, however you should always keep in mind that <strong>Police Ukash or Moneypak<\/strong> will never lock down your computer or monitor your online activities.\r\n\r\nThe message displayed by the threat can be localized depending on the user\u2019s location, with text written in the appropriate language.\r\nThe <strong>Police Ukash or Moneypak lock screen is a scam<\/strong>, and you should ignore any alerts that this malicious software might generate.\r\n<strong>Under no circumstance should you send any Greendot Moneypak, Paysafecard or Ukash code to these cyber criminals<\/strong>, and if you have, contact the payment provider immediately and ask whether the payment can be stopped or refunded, stating that you are the victim of a computer virus and scam.\r\n<div id=\"mwtad2048574976\" class=\"gas_fallback-ad_309746-ad_309685-placement_406660\" style=\"margin-top: 30px;margin-bottom: 30px;\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-7750719144850257\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-7750719144850257\" \ndata-ad-slot=\"4456629336\" \ndata-ad-format=\"auto\" data-full-width-responsive=\"true\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div><h2 style=\"text-align: center;\">Remove any Police Ukash,MoneyPak or PaySafecard virus<\/h2>\r\n<p style=\"text-align: center;\">This page is a comprehensive guide, which will remove the Police Ukash or Moneypak infection from your computer. Please perform all the steps in the correct order. If you have any questions or doubt at any point <strong>STOP<\/strong> and ask for our assistance.\r\nThe Police Ukash or Moneypak will start automatically when you login to your computer and display its screenlocker so that you are unable to access your computer, therefore we will need to remove this infection by using any of the below methods:\r\n<a href=\"#safemode\"><strong>OPTION 1<\/strong>: Remove Police Ukash or Moneypak lock screen virus with System Restore<\/a>\r\n<a href=\"#hitmanpro\"><strong>OPTION 2<\/strong>: Start Windows in Safe Mode and run the removal tools<\/a>\r\n<a href=\"#kaspersky\"><strong>OPTION 3<\/strong>: Remove Police Ukash or Moneypak virus with Kaspersky Rescue Disk<\/a><\/p>\r\n\r\n<div style=\"margin-top: 3px; padding: 5px; border: solid 1px #E51400; border-left: solid 8px #E51400;\">If you are using an <strong>Apple Mac OS X<\/strong> machine, then you will need to follow our <a href=\"http:\/\/malwaretips.com\/blogs\/your-browser-has-been-blocked-up-mac-os-x\/\"><em>Remove \u201cYour Browser Has Been Blocked Up\u201d from Apple Mac OS X<\/em><\/a> removal guide.\r\nIf you are using an <strong>Android<\/strong> phone, then you will need to follow our <a href=\"http:\/\/malwaretips.com\/blogs\/android-police-virus-removal\/\"><em>Remove Police or FBI virus from Android phone (Removal Guide)<\/em><\/a>.<\/div>\r\n<div id=\"mwtad411785824\" class=\"gas_fallback-ad_309747-ad_309685-placement_406661\" style=\"margin-top: 30px;margin-bottom: 30px;\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-7750719144850257\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-7750719144850257\" \ndata-ad-slot=\"9589536513\" \ndata-ad-format=\"auto\" data-full-width-responsive=\"true\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div><h2 id=\"safemode\">OPTION 1: Remove Police Ukash or Moneypak lock screen virus with System Restore<\/h2>\r\nSystem Restore helps you restore your computer&#8217;s system files to an earlier point in time. It&#8217;s a way to undo system changes to your computer without affecting your personal files, such as e\u2011mail, documents, or photos.\r\nIf the lock screen prevents normal access, open <strong>Windows Recovery Environment<\/strong> to use System Restore. On Windows 10 and 11, use the recovery menu below rather than repeatedly pressing F8. Have the BitLocker recovery key for this PC ready if it is requested.\r\n<h3>STEP 1: Restore Windows to a previous state using System Restore<\/h3>\r\n<ol>\r\n\t<li>At the Windows sign-in screen, hold <strong>Shift<\/strong> while choosing <strong>Power \u2192 Restart<\/strong>. If Windows already shows Automatic Repair, choose <strong>Advanced options<\/strong>. If you cannot reach either screen, boot from official Windows installation media and choose <strong>Repair your computer<\/strong>.\r\n\r\n<p>On an older Windows 7 PC, F8 may still open Advanced Boot Options. Windows 10 and 11 normally use the recovery menu above; do not keep interrupting startup to chase the old menu.<\/p><\/li>\r\n\t<li>Choose <strong>Troubleshoot \u2192 Advanced options \u2192 System Restore<\/strong>. Select your Windows installation and account if asked, and unlock the drive with its recovery key if prompted.\r\n<\/li>\r\n\t<li>Click <strong>Next<\/strong> in System Restore and choose a restore point from before the lock screen appeared. If no restore point is available, cancel and try another recovery option; do not create a new restore point expecting it to undo an existing infection.\r\n\r\n<p>The older <strong>rstrui.exe<\/strong> command opens System Restore from a working Windows session or a compatible Safe Mode session. You do not need that command when you opened System Restore through the recovery menu.<\/p><\/li>\r\n\t<li>System Restore should start, and you will display also a list of restore points. Try using a restore point created just before the date and time the Police Ukash or Moneypak lock screen virus has infected your computer.\r\n<img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-9084\" title=\"Restore your computer's system files to an earlier point in time\" src=\"\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2013\/06\/system-restore.jpg\" alt=\"[Image: Restore settings to remove ransomware]\" width=\"570\" height=\"452\" srcset=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2013\/06\/system-restore.jpg 570w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2013\/06\/system-restore-300x237.jpg 300w\" sizes=\"auto, (max-width: 570px) 100vw, 570px\" \/><\/li>\r\n\t<li>When System Restore has completed its task, start your computer in Windows regular mode, and perform a scan with Malwarebytes Anti-Malware and HitmanPro, as seen in the next step.<\/li>\r\n<\/ol>\r\n<h3>STEP 2: Remove Police Ukash or Moneypak malicious files with Malwarebytes Anti-Malware Free<\/h3>\r\nMalwarebytes Anti-Malware Free uses industry-leading technology to detect and remove all traces of malware, including worms, Trojans, rootkits, rogues, dialers, spyware, and more.\r\nIt is important to note that Malwarebytes Anti-Malware works well and should run alongside antivirus software without conflicts.\r\n<ol>\r\n\t<li>You can download <strong>download Malwarebytes Anti-Malware<\/strong>\u00a0from the below link.\r\n<span class=\"mwt_inline_cta\"><a class=\"mwt_inline_btn\" data-google-vignette=\"false\" href=\"https:\/\/malwaretips.com\/downloads\/MBSetup-076886.076886-consumer.exe\" onclick=\"window.open('https:\/\/malwaretips.com\/get\/malwarebytes-free','_blank','noopener');\">Download Malwarebytes<\/a><span class=\"mwt_inline_note\">Free official installer. Your download starts right away.<\/span><\/span><\/li>\r\n\t<li>Save your work, open <strong>Downloads<\/strong>, and double-click the current <strong>MBSetup<\/strong> installer. Approve the Windows prompt only after checking that it identifies Malwarebytes.\r\n<img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-18896\" title=\"Malwarebytes Anti-Malware setup program\" src=\"\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2014\/02\/Malwarebytes-Anti-Malware-Setup.jpg\" alt=\"[Image: Malwarebytes Anti-Malware setup program]\" width=\"107\" height=\"107\" \/>\r\n<img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-18096\" title=\"User Account Control icon\" src=\"\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2014\/02\/UAC-prompt.jpg\" alt=\"Picture of User Account Control\" width=\"13\" height=\"16\" \/> You may be presented with a User Account Control dialog asking you if you want to run this file. If this happens, you should click \u201c<em>Yes<\/em>\u201d to continue with the installation.<\/li>\r\n\t<li>When the installation begins, you will see the <em>Malwarebytes Anti-Malware Setup Wizard<\/em> which will guide you through the installation process.\r\n<img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-18898\" title=\"Malwarebytes Anti-Malware Setup Wizard\" src=\"\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2014\/02\/malwarebytes-anti-malware-2-0-installation.jpg\" alt=\"[Image: Malwarebytes Anti-Malware Setup Wizard]\" width=\"538\" height=\"419\" srcset=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2014\/02\/malwarebytes-anti-malware-2-0-installation.jpg 538w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2014\/02\/malwarebytes-anti-malware-2-0-installation-300x233.jpg 300w\" sizes=\"auto, (max-width: 538px) 100vw, 538px\" \/>\r\nTo install Malwarebytes Anti-Malware on your machine, <em>keep following the prompts<\/em> by clicking the &#8220;<strong>Next<\/strong>&#8221; button.\r\n<img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-18897\" title=\"Malwarebytes Anti-Malware Final Setup Screen\" src=\"\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2014\/02\/malwarebytes-anti-malware-2-0-final-screen.jpg\" alt=\"[Image: Malwarebytes Anti-Malware Final Setup Screen]\" width=\"528\" height=\"412\" srcset=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2014\/02\/malwarebytes-anti-malware-2-0-final-screen.jpg 528w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2014\/02\/malwarebytes-anti-malware-2-0-final-screen-300x234.jpg 300w\" sizes=\"auto, (max-width: 528px) 100vw, 528px\" \/><\/li>\r\n\t<li>Open Malwarebytes and click <strong>Scan<\/strong> on the dashboard. The normal Threat Scan checks common malware locations. If setup offers a subscription or optional browser extension, review it and skip offers you do not want.\r\n\r\nFor a targeted scan, open the scanner options and choose <strong>Custom Scan<\/strong>; a rootkit check is optional there and is unavailable on Windows ARM.\r\n<\/li>\r\n\t<li>Allow Malwarebytes to update its detection database before the scan. If the update fails, check your connection and retry; record any error instead of assuming that old definitions are current.\r\n<\/li>\r\n\t<li>Malwarebytes Anti-Malware will now start scanning your computer for the pop-up virus. When Malwarebytes Anti-Malware is scanning it will look like the image below.\r\n<img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-18908\" title=\"Malwarebytes Anti-Malware while performing a scan\" src=\"\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2014\/02\/malwarebytes-anti-malware-scan.jpg\" alt=\"[Image: Malwarebytes Anti-Malware while performing a scan]\" width=\"642\" height=\"421\" srcset=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2014\/02\/malwarebytes-anti-malware-scan.jpg 642w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2014\/02\/malwarebytes-anti-malware-scan-300x196.jpg 300w\" sizes=\"auto, (max-width: 642px) 100vw, 642px\" \/><\/li>\r\n\t<li>When scanning finishes, review the detected items. Leave confirmed threats selected and click <strong>Quarantine<\/strong>. Save the report if you need help assessing an item before excluding or restoring it.\r\n\r\nPlease note that the infections found may be different than what is shown in the image.<\/li>\r\n\t<li>Malwarebytes Anti-Malware will now quarantine all the malicious files and registry keys that it has found. When removing the files, Malwarebytes Anti-Malware may require a reboot in order to remove some of them. If it displays a message stating that it needs to reboot your computer, please allow it to do so.\r\n<img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-18910\" title=\"Malwarebytes Anti-Malware asking to reboot your computer\" src=\"\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2014\/02\/malwarebytes-anti-malware-remove-virus.jpg\" alt=\"[Image: Malwarebytes Anti-Malware while removing viruses]\" width=\"651\" height=\"427\" srcset=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2014\/02\/malwarebytes-anti-malware-remove-virus.jpg 651w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2014\/02\/malwarebytes-anti-malware-remove-virus-300x196.jpg 300w\" sizes=\"auto, (max-width: 651px) 100vw, 651px\" \/>\r\nAfter your computer will restart, you should open Malwarebytes Anti-Malware and perform another &#8220;Threat Scan&#8221; scan to verify that there are no remaining threats<\/li>\r\n<\/ol>\r\n<h3>STEP 3: Double-check for the Police Ukash or Moneypak virus with HitmanPro<\/h3>\r\nHitmanPro is a second opinion scanner, designed to rescue your computer from malware (viruses, trojans, rootkits, etc.) that have infected your computer despite all the security measures you have taken (such as anti virus software, firewalls, etc.). HitmanPro is designed to work alongside existing security programs without any conflicts. It scans the computer quickly (less than 5 minutes) and does not slow down the computer.\r\n<ol>\r\n\t<li>You can download <strong>HitmanPro<\/strong> from the below link:\r\n<span class=\"mwt_inline_cta\"><a class=\"mwt_inline_btn\" data-google-vignette=\"false\" href=\"https:\/\/download.sophos.com\/endpoint\/clients\/HitmanPro_x64.exe\" target=\"_self\" onclick=\"window.open(&#039;https:\/\/malwaretips.com\/get\/hitmanpro&#039;,&#039;_blank&#039;,&#039;noopener&#039;);\" rel=\"noopener\">Download HitmanPro<\/a><span class=\"mwt_inline_note\">Official Sophos download. Free scan, free 30-day trial to remove threats.<\/span><\/span><\/li>\r\n\t<li>Double-click on the file named &#8220;<strong>HitmanPro.exe<\/strong>&#8221; (for 32-bit versions of Windows) or &#8220;<strong>HitmanPro_x64.exe<\/strong>&#8221; (for 64-bit versions of Windows). When the program starts you will be presented with the start screen as shown below.\r\n<img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-20036\" title=\"HitmanPro startup screen (Click Next)\" src=\"\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2014\/03\/hitmanpro-install.jpg\" alt=\"[Image: HitmanPro start-up screen]\" width=\"598\" height=\"480\" srcset=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2014\/03\/hitmanpro-install.jpg 598w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2014\/03\/hitmanpro-install-300x240.jpg 300w\" sizes=\"auto, (max-width: 598px) 100vw, 598px\" \/>\r\nClick on the &#8220;<strong>Next<\/strong>&#8221; button, to install HitmanPro on your computer.\r\n<img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-20039\" title=\"HitmanPro installation options (Click Next)\" src=\"\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2014\/03\/hitmapro-start-scan.jpg\" alt=\"[Image: HitmanPro setup options]\" width=\"594\" height=\"475\" srcset=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2014\/03\/hitmapro-start-scan.jpg 594w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2014\/03\/hitmapro-start-scan-300x239.jpg 300w\" sizes=\"auto, (max-width: 594px) 100vw, 594px\" \/><\/li>\r\n\t<li>HitmanPro will now begin to scan your computer for any malicious files that may be on your machine.\r\n<img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-20037\" title=\"HitmanPro scanning for pop-up virus\" src=\"\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2014\/03\/hitmanpro-scanning.jpg\" alt=\"[Image: HitmanPro scanning for malware]\" width=\"594\" height=\"471\" srcset=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2014\/03\/hitmanpro-scanning.jpg 594w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2014\/03\/hitmanpro-scanning-300x237.jpg 300w\" sizes=\"auto, (max-width: 594px) 100vw, 594px\" \/><\/li>\r\n\t<li>When it has finished it will display a list of all the malware that the program found as shown in the image below. Click on the &#8220;<strong>Next<\/strong>&#8221; button, to remove any virus that has been found.\r\n<img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-20038\" title=\"HitmanPro scan results (Click Next)\" src=\"\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2014\/03\/hitmanpro-scan-results.jpg\" alt=\"[Image: HitmanPro scan results]\" width=\"591\" height=\"471\" srcset=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2014\/03\/hitmanpro-scan-results.jpg 591w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2014\/03\/hitmanpro-scan-results-300x239.jpg 300w\" sizes=\"auto, (max-width: 591px) 100vw, 591px\" \/><\/li>\r\n\t<li>If this PC is eligible, click <strong>Activate free license<\/strong> and follow the prompts for the one-time 30-day trial. If it was already used, an existing paid license is required for removal; scanning remains free. Keep the report if you need help deciding what to remove.\r\n<img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-20035\" title=\"Click on the Activate free license button\" src=\"\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2014\/03\/hitmanpro-activation.jpg\" alt=\"[Image: HitmanPro Activate Free License]\" width=\"594\" height=\"477\" srcset=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2014\/03\/hitmanpro-activation.jpg 594w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2014\/03\/hitmanpro-activation-300x240.jpg 300w\" sizes=\"auto, (max-width: 594px) 100vw, 594px\" \/><\/li>\r\n<\/ol>\r\n\r\n<hr \/>\r\n\r\n<div id=\"mwtad1717550251\" class=\"gas_fallback-ad_309748-ad_309685-placement_406662\" style=\"margin-top: 30px;margin-bottom: 30px;\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-7750719144850257\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-7750719144850257\" \ndata-ad-slot=\"3906789406\" \ndata-ad-format=\"auto\" data-full-width-responsive=\"true\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div><h2 id=\"hitmanpro\">OPTION 2: Start Windows in Safe Mode and run the removal tools<\/h2>\n<p>If System Restore is unavailable, try Safe Mode to reach Windows without the screen locker starting normally. The older HitmanPro Kickstart USB instructions do not describe the current HitmanPro download. Do not look for a Kickstart USB button or download an old copy from an unofficial site.<\/p><div id=\"mwtad2185792682\" class=\"gas_fallback-ad_381396-ad_309685-placement_406667\" style=\"margin-top: 50px;margin-bottom: 50px;\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-7750719144850257\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-7750719144850257\" \ndata-ad-slot=\"1471373341\" \ndata-ad-format=\"auto\" data-full-width-responsive=\"true\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div>\n<ol class=\"mwt_detailed_steps\">\n<li><p class=\"mwt_quick_overview\">Open the recovery menu.<\/p><p>At the sign-in screen, hold <strong>Shift<\/strong> and choose <strong>Power \u2192 Restart<\/strong>. If you cannot reach it, use <strong>Advanced options<\/strong> on the Automatic Repair screen, or boot Windows installation media and choose <strong>Repair your computer<\/strong>. Keep your BitLocker recovery key available.<\/p><\/li>\n<li><p class=\"mwt_quick_overview\">Start Safe Mode.<\/p><p>Select <strong>Troubleshoot \u2192 Advanced options \u2192 Startup Settings \u2192 Restart<\/strong>. Press <strong>4<\/strong> or <strong>F4<\/strong> for Safe Mode. If you need online scanner updates, <strong>5<\/strong> or <strong>F5<\/strong> requests Safe Mode with Networking, although Wi-Fi may be unavailable.<\/p><\/li>\n<li><p class=\"mwt_quick_overview\">Sign in and run a scan.<\/p><p>You may need your account password rather than your PIN. Run the Malwarebytes steps above. If a scanner cannot install or work in Safe Mode, do not keep forcing it; use the rescue-disk option or ask for removal help. A clean computer can be used to download the installer to a USB drive, but that does not make the installer a bootable rescue disk.<\/p><\/li>\n<li><p class=\"mwt_quick_overview\">Use HitmanPro when Windows can run it.<\/p><p>The download below is the normal Windows scanner. Follow the HitmanPro steps above when it runs successfully and has a working connection for cloud checks. Removal requires an eligible trial or a license.<\/p><span class=\"mwt_inline_cta\"><a class=\"mwt_inline_btn\" data-google-vignette=\"false\" href=\"https:\/\/download.sophos.com\/endpoint\/clients\/HitmanPro_x64.exe\" target=\"_self\" onclick=\"window.open(&#039;https:\/\/malwaretips.com\/get\/hitmanpro&#039;,&#039;_blank&#039;,&#039;noopener&#039;);\" rel=\"noopener\">Download HitmanPro<\/a><span class=\"mwt_inline_note\">Official Sophos download. Free scan, free 30-day trial to remove threats.<\/span><\/span><\/li>\n<li><p class=\"mwt_quick_overview\">Restart into normal Windows and check again.<\/p><p>After quarantining detected threats, restart normally. Confirm that the lock screen is gone and review the scan reports. If it returns, save the exact detection names and ask for help instead of paying the demand. If files are also encrypted, preserve the ransom note and encrypted originals before attempting recovery.<\/p><\/li>\n<\/ol>\n<div id=\"mwtad3229480524\" class=\"gas_fallback-ad_318930-ad_309685-placement_406663\" style=\"margin-top: 30px;margin-bottom: 30px;\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-7750719144850257\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-7750719144850257\" \ndata-ad-slot=\"3818335085\" \ndata-ad-format=\"auto\" data-full-width-responsive=\"true\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div><h2 id=\"kaspersky\">OPTION 3: Remove Police Ukash or Moneypak virus with Kaspersky Rescue Disk<\/h2>\r\nIf any of the above methods did not clean your infected computer, we can use a <strong>Kaspersky Rescue Disk Bootable<\/strong> to clean the Windows registry and to perform a system scan to remove the Police Ukash or Moneypak virus.\r\nTo create a bootable Kaspersky Rescue Disk, we will need the following items:\r\n<ul>\r\n\t<li>A clean (non-infected) computer with Internet access<\/li>\r\n\t<li>A blank DVD or CD<\/li>\r\n\t<li>A computer with a DVD or CD burner<\/li>\r\n<\/ul>\r\n<h3>STEP 1: Download and create a bootable Kaspersky Rescue Disk CD<\/h3>\r\n<ol>\r\n\t<li>You can download <strong>Kaspersky Rescue Disk<\/strong> utility from link below:\r\n<span class=\"mwt_inline_cta\"><a class=\"mwt_inline_btn is-ext\" data-google-vignette=\"false\" href=\"https:\/\/www.kaspersky.com\/downloads\/free-rescue-disk\" target=\"_blank\" rel=\"noopener noreferrer\">Download Kaspersky Rescue Disk<\/a><span class=\"mwt_inline_note\">Opens the download page in a new tab.<\/span><\/span><\/li>\r\n\t<li>To create the bootable rescue disk, we will need to use the <strong>ImgBurn<\/strong> program. You can download <strong>ImgBurn<\/strong> from the below link, then install this program.\r\n<span class=\"mwt_inline_cta\"><a class=\"mwt_inline_btn is-ext\" data-google-vignette=\"false\" href=\"http:\/\/www.imgburn.com\/index.php?act=download\" target=\"_blank\" rel=\"noopener nofollow\">Download ImgBurn<\/a><span class=\"mwt_inline_note\">Opens the download page in a new tab.<\/span><\/span><\/li>\r\n\t<li>Insert your blank DVD or CD in your burner, then start ImgBurn and click on the <strong>Write image file to disc<\/strong> button.<\/li>\r\n\t<li>Under <strong>Source<\/strong> click on the <strong>Browse for file<\/strong> button, then navigate to the location where you previously saved the Kaspersky Rescue Disk utility (krd.iso), then click on the <strong>Write<\/strong> button.\r\n<img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-9091\" title=\"Creating Kaspersky Rescue Disk bootable CD\" src=\"\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2013\/06\/creating-bootable-kaspersky-rescue-disk.jpg\" alt=\"[Image: Bootable Kaspersky Rescue CD]\" width=\"545\" height=\"373\" srcset=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2013\/06\/creating-bootable-kaspersky-rescue-disk.jpg 545w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2013\/06\/creating-bootable-kaspersky-rescue-disk-300x205.jpg 300w\" sizes=\"auto, (max-width: 545px) 100vw, 545px\" \/>\r\nThat&#8217;s it, ImgBurn will now begin writing your bootable Kaspersky Rescue Disk.<\/li>\r\n<\/ol>\r\n<h3>STEP 2: Start your computer using the Kaspersky Rescue Disk<\/h3>\r\n<ol>\r\n\t<li>Once you\u2019ve got the Kasperky Rescue Disk in hand, insert it into the infected computer, and turn off and then turn it on again.<\/li>\r\n\t<li>Choose the USB drive or DVD from the computer\u2019s one-time Boot Menu, using the key specified by its manufacturer. Follow the rescue startup prompts and choose your language.\r\n<\/li>\r\n\t<li>Choose <strong>Graphic mode<\/strong> and wait for the rescue environment to load. If that mode fails, try <strong>Limited graphic mode<\/strong>. Read and accept the displayed agreements if you agree.<\/li>\r\n<\/ol>\r\n<h3>STEP 3: Scan your system with Kaspersky Rescue Disk<\/h3>\r\n<ol>\r\n\t<li>Wait for <strong>Kaspersky Rescue Tool<\/strong> to open. If the Windows drive uses BitLocker, unlock it with your recovery key or other supported credentials; do not format it.\r\n<\/li>\r\n\t<li>If the tool reports outdated databases, click <strong>Update now<\/strong>, let the download finish, and restart the scanning application if prompted. You can check the database date in <strong>About<\/strong>.\r\n<\/li>\r\n\t<li>Review the scan scope, include the Windows drive you intend to check, and click <strong>Start scan<\/strong>. Let it finish and review the results.\r\n<\/li>\r\n\t<li>Review each detection and the proposed action. Use disinfection when available for an infected system file; do not blindly delete Windows components. Save the report and seek help if you cannot assess a detection.\r\n<\/li>\r\n\t<li>When the antivirus scan has completed, you can restart back into Windows regular mode, by clicking on the Kaspersky Start button <img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-9100\" title=\"Kaspersky Rescue Disk Restart button\" src=\"\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2013\/06\/Kaspersky-Rescue-Disk-restart.jpg\" alt=\"[Image: Kaspersky Rescue Disk Restart button]\" width=\"34\" height=\"36\" \/> (lower left corner), and selecting <strong>Restart<\/strong>.\r\nOnce your computer will start in Windows regular more, download <a href=\"http:\/\/malwaretips.com\/download-malwarebytes\" target=\"_blank\" rel=\"noopener noreferrer\"><strong>Malwarebytes Anti-Malware<\/strong><\/a> and <a href=\"http:\/\/malwaretips.com\/download-hitmanpro\" target=\"_blank\" rel=\"noopener noreferrer\"><strong>HitmanPro<\/strong><\/a>, and scan your computer for any left over infections.<\/li>\r\n<\/ol>\r\n\r\n<hr \/>\r\n\r\nYour computer should now be free of the Police Ukash or Moneypak infection. If your current anti-virus solution let this infection through, you may want to consider purchasing <strong>the PRO version of <a title=\"Malwarebytes Anti-Malware\" href=\"http:\/\/malwaretips.com\/download-malwarebytes\" target=\"_blank\" rel=\"noopener noreferrer\">Malwarebytes Anti-Malware<\/a><\/strong> to protect against these types of threats in the future, and perform regular computer scans with HitmanPro.\r\nIf you are still experiencing problems while trying to remove Police Ukash or Moneypak virus from your machine, please start a new thread in our <strong><a title=\"Free Malware Removal Support\" href=\"http:\/\/malwaretips.com\/Forum-Malware-Removal-Assistance\" target=\"_blank\" rel=\"noopener noreferrer\">Malware Removal Assistance<\/a><\/strong> forum.","protected":false},"excerpt":{"rendered":"<p>A fake police virus warning demands a fine or locks your screen. Learn how to close the alert, regain access to Windows, and remove a screen-locking infection.<\/p>\n","protected":false},"author":1,"featured_media":427687,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-427686","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-guides","masonry-post","generate-columns","tablet-grid-50","mobile-grid-100","grid-parent","grid-50","resize-featured-image"],"_links":{"self":[{"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/posts\/427686","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/comments?post=427686"}],"version-history":[{"count":8,"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/posts\/427686\/revisions"}],"predecessor-version":[{"id":428244,"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/posts\/427686\/revisions\/428244"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/media\/427687"}],"wp:attachment":[{"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/media?parent=427686"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/categories?post=427686"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/tags?post=427686"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}