Royal Canadian Mounted Police Ukash Virus Removal - YooSecurity

Royal Canadian Mounted Police Ukash Virus is a kind of ransomware which shows you the fake notifications in order to steal your money.  It is quite tough to remove Royal Canadian Mounted Police Ukash Virus completely if you are not very familiar with the Windows system.  As the upgrade version of Canadian Security Intelligence Service (CSIS) Ukash virus, Royal Canadian Mounted Police Ukash Virus  are spread more countries all over the world not only in the Canada. Once your computer has been infected by the Royal Canadian Mounted Police Ukash Virus, you will receive fake alert on your PC screen which asks you to pay CAD $100 if you want to unblock your computer. The reason why they block your computer is that you have violated the local law and related copyright policy. If you don't send them the money in 72 hours, you will never regain your computer. 

In most situations, the threat alert information may like this: Attention! Your computer has been locked! Your computer has been locked due to violation of the law in Canada. Your activities such the film shooting, registration or transfer of documents with pornographic content involving minors, child pornography, sodomy and violence against children violate National Law. To unlock your computer, you have to pay a fine in accordance with Canadian law in the amount of 100 euros. A penalty in the form of fine is possible only if it is your first violation. Repeated violation entails criminal liability. If you do not pay the fine, your computer will be confiscated and your case will be referred to the Court. And you are threatened to do those things: To pay the fine through our partner or by using Ukash voucher. You can get Ukash voucher for the amount of $250, then fill in the form, specifying a voucher code and then click on the “Pay the fine” button. Please never believe this kind of information, it’s totally fake and even if you pay for it, your computer will be still locked.

The whole message on your computer is:

Royal Canadian Mounted Police
International Cyber Security Protection Alliance
ATTENTION! Your PC is blocked due to at least one of the reasons specified below.
You have been violating ‘Copyright and Related Rights Law o (Video, Music, Software) and illegally using or distributing copyrighted content, thus infringing Article 128 of the Criminal Code of Canada.
Article 128 of the Criminal Code provides for a fine of 200 to 500 minimal wages or a deprivation of liberty for 2 to 8 years.
You have been viewing or distributing prohibited Pornographic content (Child Porno, Zoophilia and etc). Thus violating Article 202 of the Criminal Code of Canada.
Article 202 of the Criminal Code provides for a deprivation of liberty for four to 12 years. Illegal access to computer data has been initiated from your PC, or you have been…
Article 208 of the Criminal Code provides for a fine of up to CAD $100,000 and/or a deprivation of liberty for 4 to 9 years.
Illegal access has been initiated from your PC without your knowledge or consent, your PC may be infected by malware. thus you are violating the law On Neglectful Use of Personal Computer.
Article 210 of the Criminal Code provides for a fine of CAD 02,000 to CAD $8,000.
Spam distribution or other unlawful advertising has been effected from your PC as a profit-seeking activity or without your knowledge, your PC may be infected by malware. Article 212 of the Criminal Code provides for a fine of up to CAD $250,000 and a deprivation of liberty of up to 6 years. In case this activity has been effected without your knowledge, you fall under the above mentioned article 210 of the Criminal Code of Canada.
Your personality and address are currently being identified, a criminal case is going to be initiated against you under one or more articles specified above within the next 72 hours.
Pursuant to the amendment to the Criminal Code of Great Canada of February 04, 2013, this law infringement (if it is not repeated – first time) may be considered as conditional in case you pay the fine to the State.
Fines may only be paid within 72 hours after the infringement. As soon as 72 hours elapse, the possibility to pay the fine expires, and a criminal case is initiated against you automatically within the next 72 hours! The amount of fine is CAD $100. You can pay a fine Ukash or PaySafeCard.
When you pay the fine, your PC will get unlocked in 1 to 72 hours after the money is put into the State’s account.
Since your PC is unlocked, you will be given 7 days to correct all violations. In case all violations are not corrected after 7 working days, your PC will be blocked again, and a criminal case will be initiated against you automatically under one or more articles specified above.

To remove the RCMP virus, you can follow the tips from YooSecurity blog.  YooSecurity provides you with the free malware removal guides so that you can remove most of the PC threats manually.

  1. Remove all floppy disks, CDs, and DVDs from your computer, and then restart your computer.
  2. Press and hold the F8 key as your computer restarts.Please keep in mind that you need to press the F8 key before the Windows start-up logo appears.
    Note: With some computers, if you press and hold a key as the computer is booting you will get a stuck key message. If this occurs, instead of pressing and holding the “F8 key”, tap the “F8 key” continuously until you get the Advanced Boot Options screen.
  3. On the Advanced Boot Options screen, use the arrow keys to highlight Safe Mode with Networking , and then press ENTER.

  4. Press Ctrl+Alt+Del keys to open the Task manager to stop the progress of Royal Canadian Mounted Police Ukash Virus Ransomware. Because the name will be changed fast, it will be show with different name.

5. Delete all the files related to Royal Canadian Mounted Police Pay the fine Ransomware

6. Delete Royal Canadian Mounted Police Ukash Virus register entries created in computer system.