If your computer is locked, and you are seeing a “
Your computer has
been blocked” notification from a law enforcement agency (FBI,
Australian Federal Police, Metropolitan Police, U.S. Department of Justice)
asking you to pay a fine via GreenDot MoneyPak, Ukash or Paysafecard code, then
your computer is infected with a piece of malware known as Trojan
Reveton.
![[Image: FBI Moneypak virus]](https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_skEvlEWyPfkr4WHyH2sbAcYGXEfVZAQcZINWLPvzt6gBCahLwjZy9Y5mrcQjyzXAnu5Eo95Sr2vjdLA-8_mcOguDs2MogOnHNmL-bzmUxXD9cD9MeoT_KCpT1DZ_fA5FfKLHl4ETYCVLmqUY46DpXoWtyvEvdH=s0-d "FBI Moneypak virus")
The Police Ukash or Moneypak virus is distributed
through several means. Malicious websites, or legitimate websites that have been
hacked, can infect your machine through exploit kits that use vulnerabilities on
your computer to install this trojan without your permission of
knowledge.
Another method used to propagate this type of malware is spam
email containing infected attachments or links to malicious websites.
Cybercriminals spam out an email, with forged header information, tricking you
into believing that it is from a shipping company like DHL or FedEx. The email
tells you that they tried to deliver a package to you, but failed for some
reason. Sometimes the emails claim to be notifications of a shipment you have
made. Either way, you can’t resist being curious as to what the email is
referring to – and open the attached file (or click on a link embedded inside
the email). And with that, your computer is infected with the Police Ukash or
Moneypak virus.
The threat may also be downloaded manually by tricking the
user into thinking they are installing a useful piece of software, for instance
a bogus update for Adobe Flash Player or another piece of software.
The
Police Ukash or Moneypak virus is also prevalent on peer-to-peer file sharing
websites and is often packaged with pirated or illegally acquired software.
Once installed on your computer, the Police Ukash or Moneypak virus will
display a
bogus notification that pretends to be from
an official law enforcement agency (examples: Irish An Garda
Síochána, Royal Canadian Mounted Police, Police Central e-crime Unit) and states
that your computer has been blocked due to it being involved with the
distribution of pornographic material, SPAM and copyrighted content.
The
Police Ukash or Moneypak virus will lock you out of your computer
and applications, so whenever you’ll try to log on into your Windows
operating system or Safe Mode with Networking, it will display instead a lock
screen asking you to pay
a non-existing fine of in the form of
a Moneypak, Ukash or Paysafecard voucher.
Furthermore, to make this alert
seem more authentic,
this virus also has the ability to access your
installed webcam, so that the bogus Police Ukash or
Moneypak notification shows what is happening in the room.
The Police Ukash or Moneypak virus locks the computer and depending on the
user’s current location, displays a localized webpage that covers the entire
desktop of the infected computer and demands payment for the supposed possession
of illicit material.
Cyber
criminals often updated the design of this lock screen, however you should
always keep in mind that
Police Ukash or Moneypak will never
lock down your computer or monitor your online activities.
The message displayed by the threat can be localized depending on the user’s
location, with text written in the appropriate language.
The
Police
Ukash or Moneypak lock screen is a scam, and you should ignore any
alerts that this malicious software might generate.
Under no
circumstance should you send any Greendot Moneypak, Paysafecard or Ukash code to
these cyber criminals, and if you have, you can should request a
refund, stating that you are the victim of a computer virus and scam.
Remove any Police Ukash,MoneyPak or PaySafecard
virus
If you are using an
Apple Mac OS X machine, then you will
need to follow our
Remove
“Your Browser Has Been Blocked Up” from Apple Mac OS X removal
guide.
If you are using an
Android phone, then you will need
to follow our
Remove
Police or FBI virus from Android phone (Removal Guide).
OPTION 1: Remove Police Ukash or Moneypak lock screen virus with
System Restore
System Restore helps you restore your computer’s system files to an earlier
point in time. It’s a way to undo system changes to your computer without
affecting your personal files, such as e‑mail, documents, or photos.
Because
the Police Ukash or Moneypak virus will not allow you to start the computer in
Windows regular mode, we will need to start System Restore from the
Safe
Mode with Command Prompt mode.
STEP 1: Restore Windows to a previous state using System Restore
- Reboot your computer into Safe Mode with Command Prompt. To do this, turn
your computer off and then back on and immediately when you see anything on the
screen, start tapping the F8 key on your keyboard.
![[Image: F8 key]](https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_sytIfo2gt6QSEkFVCM3RM0mrcVL92tArchvy6AolON8MlKXCAB_q0bK-IUL2H8YQ26cJx1HrNJu4l9PzqgE6g1a_tiok9QfB7E1zSz7IOcV7vMxpSuOz9JDjq6evNswL0Y6JNphvqTjQ=s0-d "Windows F8 key")
If you are using Windows 8, the trick is to hold the
Shift button and gently tap the F8 key
repeatedly, this will sometimes boot you into the new advanced
“recovery mode”, where you can choose to see advanced repair options. On the
next screen, you will need to click on the Troubleshoot option,
then select Advanced Options and select Windows Startup
Settings. Click on the Restart button, and you should now be able to
see the Advanced Boot Options screen.
- Using the arrow keys on your keyboard, select Safe Mode with Command
Prompt and press Enter on your keyboard.
![[Image: Starting computer in Safe Mode with Command Prompt]](https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_tbdZdYYew9BW4xW7xSLCQswcQ3lXCELv6ZlZYtY2VoXVBC84knpzn1hBXejl7rnSnAs7uLa7nWQZZNJ0eKTLhp-n3NrMxdq_lO00AXzCFy-nj2ILjKGu1fCWx4Gp4k59CPZy9Kjh1mEwEDcc-TnGOFdor4MeBW5OamRlPL=s0-d "Advanced Boot Options screen")
- At the command prompt, type rstrui.exe, and then press
ENTER.
![[Image: Start System Restore to remove lock screen virus]](https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_tdtJm9vL3vIvjeAPjIxWWW4KjHpm-8CcNk_x9GWu56W3t0eh-jTQ4Y9p3jIVnPcyq2jyhWlh37jc36J6Mefpgec-UEwZv6Acej-oC7XO-TZhdF4n61sdVUgfFcswOggdKVDMozp00Y5PFr_-21A_LX4mZShQA=s0-d "rstrui.exe command in Safe Mode with Command Prompt")
Alternatively, if you are using Windows Vista, 7 and 8,
you can type: C:\windows\system32\rstrui.exe , and
press Enter. And if you are a Windows XP user, type
C:\windows\system32\restore\rstrui.exe, then press
Enter.
- System Restore should start, and you will display also a list of restore
points. Try using a restore point created just before the date and time the
Police Ukash or Moneypak lock screen virus has infected your computer.
![[Image: Restore settings to remove ransomware]](https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_s89s_S9weY4TQ-B9yDdNDEF_K-MwdfYx2MLrnD1t-HQerWjHTBZF1Qz8gksd7GE7a4cObdi45MnG5MCj6Jp4bH5HwBgSLTFDH__jTzZ4YCvHwiVEmBymiNnjyYo4kQ4PHyM7lJDl9W5_Bc-j76=s0-d "Restore your computer's system files to an earlier point in time")
- When System Restore has completed its task, start your computer in Windows
regular mode, and perform a scan with Malwarebytes Anti-Malware and HitmanPro,
as seen in the next step.
STEP 2: Remove Police Ukash or Moneypak malicious files with Malwarebytes
Anti-Malware Free
Malwarebytes Anti-Malware Free uses industry-leading technology to detect and
remove all traces of malware, including worms, Trojans, rootkits, rogues,
dialers, spyware, and more.
It is important to note that Malwarebytes
Anti-Malware works well and should run alongside antivirus software without
conflicts.
- You can download download Malwarebytes Anti-Malware from
the below link.
MALWAREBYTES ANTI-MALWARE DOWNLOAD LINK (This
link will open a new web page from where you can download Malwarebytes
Anti-Malware Free)
- Once downloaded, close all programs, then double-click on the icon on your
desktop named “mbam-setup-consumer-2.00.xx” to start the installation
of Malwarebytes Anti-Malware.
![[Image: Malwarebytes Anti-Malware setup program]](https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_trVMLGO2-3PrKftBfU1VtnWJQup6QMW8urKyBz7O1g5r5NCtC-tb-YzAQZTc3_bcE94G06PfOTG9CrGXxIr28fdr9sFwH_1JBTdUKWjMydCHxwOPIC1ICNK8j5VKlwpZxkzOpf5CrevQPIY9PbUXfGHvEGq8k0OHR0BgBTYEk=s0-d "Malwarebytes Anti-Malware setup program")
You may be presented with a User Account Control dialog
asking you if you want to run this file. If this happens, you should click
“Yes” to continue with the installation.
- When the installation begins, you will see the Malwarebytes Anti-Malware
Setup Wizard which will guide you through the installation process.
![[Image: Malwarebytes Anti-Malware Setup Wizard]](https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_v-RS136AjTZYi3BEN7LdRhCcx0_2xI0GFY9Zx1TTrV9HR9H9qTbtIbOtlxf4eoD0qp0E6ySnvPXFekgWKYxEEr4m_zWJS7BVcwBq1x9DSIkP_G61Zc8DqrBEeOMeYlCavRvvtVI8WBjV6CQiSMAYtzZzZr5EC1Xo7k8IHrCXkUgBpGcikPDlxwuQ=s0-d "Malwarebytes Anti-Malware Setup Wizard")
To install Malwarebytes Anti-Malware on your machine,
keep following the prompts by clicking the “Next”
button.
![[Image: Malwarebytes Anti-Malware Final Setup Screen]](https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_u8ny9BA1tbA1EBvNs-opSRtr74NzdQaeTwduv4Wu07BS19RyjRvnPDg4v0BkAB5T2kl9ad-IUwVZJh90sBAY5xPe0jKWFJGAlnc_mWkn2BevDZnWHonmmFY06BtSKAhkRxBiknVllGskB793HehIWzNfKhhSAgRd-WByLgAuq_fzdAscAneAQ9NA=s0-d "Malwarebytes Anti-Malware Final Setup Screen")
- Once installed, Malwarebytes Anti-Malware will automatically start and you
will see a message stating that you should update the program, and that a scan
has never been run on your system. To start a system scan you can click on the
“Fix Now” button.
![[Image: Click on the Fix Now button to start a scan]](https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_sgUCr2ZOw86Som5Dj1l5zXV8XTqITtLODlTqeRp_mAr15fNbaAG1w1AEzgHQEdYkgV7iSjF9naLqaH2DszUP6I1TW5J-iijH2kn5fcNQsE8lIsOxZXc0_qbIS3QRSVhEBYKqNQ-_MAAi3rSCThYrwOVVpYlR8n4fzXfjhJNHoa=s0-d)
Alternatively, you can click on the
“Scan” tab and select “Threat Scan“, then click on the
“Scan Now” button.
![[Image: Malwarebytes Anti-Malware Threat Scan]](https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_s7XLUp15j7U3YpglMSE2kWtwdHnXSUFaL47WtHOu4JyefXYxZ5n4UVbrSX_V-ripti4yPv-n3k10szkigUACGncfCxTF5ogdWg2ND01h7sOPz_NdW8hxP0yLccAyt3tnzpJFxea47EDI9uThJ1h50xAfQzeMSnH-FeWV7RSPqWT-C3y4F1WvVVpZMH=s0-d "Malwarebytes Anti-Malware Threat Scan")
- Malwarebytes Anti-Malware will now check for updates, and if there are any,
you will need to click on the “Update Now” button.
![[Image: Click on Update Now to update Malwarebytes Anti-Malware]](https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_tvQsv5m01noFUMf-DYwC9OMM1BRCAX7UyV3D8phy4f-KoN6furIINt1nVsZSUH1XU3Ip_NSfEWVkcJ3tS_wRtKuJbm2uDhFgixKo4D0Um0pqTyu1SF1GK1E_G-B9nUasrR7QUViwQv6MBoUsBKHSbzGusH00zait7DTj2cgzEtiiWR_r1-2Q=s0-d "Click on Update Now to update Malwarebytes Anti-Malware")
- Malwarebytes Anti-Malware will now start scanning your computer for the
pop-up virus. When Malwarebytes Anti-Malware is scanning it will look like the
image below.
![[Image: Malwarebytes Anti-Malware while performing a scan]](https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_vdzOzCujaF2RNIKJ1CGS6jdCJS90f7Pk1ohSY6CXdK8Z-rPzfhR74xGmCSDhaCC6tbUotqm4FdkC26knzZOiwMZEZlH7J-JGSKc1xOWj8mZQ9pnUoMoU9MmJYyGAzAnzCFe-6ON-yeTmeWw7mlblyXYcuc0vDTkIV1e-4XDw=s0-d "Malwarebytes Anti-Malware while performing a scan")
- When the scan has completed, you will now be presented with a screen showing
you the malware infections that Malwarebytes’ Anti-Malware has detected. To
remove the malicious programs that Malwarebytes Anti-malware has found, click on
the “Quarantine All” button, and then click on the
“Apply Now” button.
![[Image: Remove the malware that Malwarebytes Anti-Malware has found]](https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_s-KDpnbEHY7yx71-Btt-X52n_L-zC6p6rkxXmo7UUweoLXCF2fls1i1Sv6fRSYhNy1THSr6gRRfOtJCSTrE2DxGJO4Zmi7g_Af5rawBbK4WvebqhBEiGATRqdSgWYLtettdBhpJcRbZIGKxe43FhqCJL5eJo9TgzSyqfcGRMarTduhr0RHlbS_MRiPso3GyUj1Xg=s0-d "Remove the malware that Malwarebytes Anti-Malware has detected")
Please note that the infections found may be different
than what is shown in the image.
- Malwarebytes Anti-Malware will now quarantine all the malicious files and
registry keys that it has found. When removing the files, Malwarebytes
Anti-Malware may require a reboot in order to remove some of them. If it
displays a message stating that it needs to reboot your computer, please allow
it to do so.
![[Image: Malwarebytes Anti-Malware while removing viruses]](https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_ulATyZFLoPwG2Lsu_c8eRdWhkOZDW3Ere70nqDjJw-h9M8Wo7gKxQ2PWhnOwj_41fIytMRl-_fEJohrC_5rdjf9OlV0XvooBO9r1ETFOGNIZzRm8weHDGqvT5RDMM0HpUnowh3RiU3z8Y4SIkraeh9h6qo4Pm_e4lPEEarbB7HAIzYW54q=s0-d "Malwarebytes Anti-Malware asking to reboot your computer")
After your computer will restart, you should open
Malwarebytes Anti-Malware and perform another “Threat Scan” scan to verify that
there are no remaining threats
STEP 3: Double-check for the Police Ukash or Moneypak virus with
HitmanPro
HitmanPro is a second opinion scanner, designed to rescue your computer from
malware (viruses, trojans, rootkits, etc.) that have infected your computer
despite all the security measures you have taken (such as anti virus software,
firewalls, etc.). HitmanPro is designed to work alongside existing security
programs without any conflicts. It scans the computer quickly (less than 5
minutes) and does not slow down the computer.
- You can download HitmanPro from the below link:
HITMANPRO DOWNLOAD LINK (This link will
open a new web page from where you can download HitmanPro)
- Double-click on the file named “HitmanPro.exe” (for 32-bit
versions of Windows) or “HitmanPro_x64.exe” (for 64-bit
versions of Windows). When the program starts you will be presented with the
start screen as shown below.
![[Image: HitmanPro start-up screen]](https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_utSvvnN3fW-z8h_r6hZV5J2GFMAf2hHhoxR62PnwMwV0UspPqmpp8YqFo3p5yfixCb9FeiIo0678kOQvcRmdTrxhORhllnefxpz4GHu5v06XprWZQG1SsYnDzfIDHYB1VMFZwjE6YdrWvipn1uf0vo=s0-d "HitmanPro startup screen (Click Next)")
Click on the “Next” button, to install
HitmanPro on your computer.
![[Image: HitmanPro setup options]](https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_soVX2y8Mgm9hA1pz_13ZIZowTZ0PjPLWn70YCO5LgU3GpUmBWjKXJX1ZOwAFxXzcAsAvVf806ZyTxNuJ3NxQUB0q7_AyHwwE1pZ2wd2LAiP1HsTeFXAgaiGdq40_gnO5D--nSVh0V4qC2L6t9jeAqVSQs=s0-d "HitmanPro installation options (Click Next)")
- HitmanPro will now begin to scan your computer for any malicious files that
may be on your machine.
![[Image: HitmanPro scanning for malware]](https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_t_Q4soKYMd1M3uCE6_NNDeNqyoEVEmGchcKKkQ04RBuaCOFLGm3xWgRpYgT_m0ho0qam8Uczqn9VzrkAX8YjNkmUzqaWZXMo42bOVJ03IF1mxvBCbVw0KRW5erJTOtW3kBnUZI7IQnvbbSYmQoIvpxMA=s0-d "HitmanPro scanning for pop-up virus")
- When it has finished it will display a list of all the malware that the
program found as shown in the image below. Click on the “Next”
button, to remove any virus that has been found.
![[Image: HitmanPro scan results]](https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_uOUIDZhbNjpvbVNZYiDumK8RA60d9CNxNYr9whZ5I38rLvVWUVX_lzCRnJVVxUplEPEvuD680DuylBFp_do7XDkzaH5DvuP_1o9XSQ5BHEOisupP6nl_GOi2nYNyJV_vXjPB2Gv8t-3CNEfyVcBUdxgsl0mw=s0-d "HitmanPro scan results (Click Next)")
- Click on the “Activate free license” button to begin the
free 30 days trial, and remove all the malicious files from
your computer.
![[Image: HitmanPro Activate Free License]](https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_tzFMmCfaG9y2fnVlO3GDWpX5N9kZJTlfSKxmFlOGzVQ-CZBuf-kQGAHORYDPh8VcfFZ2KlXd2kpr7-xGo2LIzbXmdujUBTkm6ZrqRCczFH_1EE5wgFT4hPjajQ2QVAMo8eRg2wxIiZev2FnrOH4QnPKpt1=s0-d "Click on the Activate free license button")
OPTION 2: Remove Police Ukash or Moneypak virus with with
HitmanPro Kickstart
If you cannot start your computer into
Safe Mode with Command Prompt
mode, we can use the
HitmanPro Kickstart program to bypass
Police Ukash or Moneypak lock screen.
As the Police Ukash or Moneypak
ransomware infection locks you out of your computer, you will need to create a
bootable USB drive that contains the HitmanPro Kickstart program.
We will
then boot your computer using this bootable USB drive and use it to clean the
infection so that you are able to access Windows normally again.
You will
also need a USB drive,
which will have all of its data erased and will
then be formatted. Therefore, only use a USB drive that does not
contain any important data.
- Using a “clean” (non-infected) computer, please download HitmanPro
Kickstart from the below link.
HITMANPRO DOWNLOAD LINK (This link will
open a download page in a new web page from where you can download HitmanPro
Kickstart)
- Once HitmanPro has been downloaded, please insert the USB flash
drive that you would like to erase and use for the installation of
HitmanPro Kickstart. Then double-click on the file named
HitmanPro.exe (for 32-bit versions of Windows) or
HitmanPro_x64.exe (for 64-bit versions of Windows).
To
create a bootable HitmanPro USB drive, please follow the instructions from this
video:
- Now, remove the HitmanPro Kickstart USB drive and
insert it into the Police Ukash or Moneypak infected computer.
- Once you have inserted the HitmanPro Kickstart USB drive, turn off the
infected computer and then turn it on. As soon as you power it on, look for text
on the screen that tells you how to access the boot menu.
![[Image: Windows Boot Menu screens]](https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_tbOk7Bks9PKTaHx3QAvmaD8QzlFeg3-4GJQ1HOEUicY7rU8cjAp7n3TyeQNbjWeRQufyf7Ua11wlQsd4UU--j00IDlAGxPzqGVmMThIuYZlxCN12wPkLMUiiMRcZh5UX1SMRwZjatLMSWSIG_CSVgyALdo=s0-d "Windows Boot Menu screens")
The keys that are commonly associated with enabling the
boot menu are F10, F11 or
F12.
- Once you determine the proper key (usually the F11 key)
that you need to press to access the Boot Menu, restart your computer again and
start immediately tapping that key. Next, please perform a scan with HitmanPro
Kickstart as shown in the video below.
- HitmanPro will now reboot your computer and Windows should start normally.
Then please Malwarebytes Anti-Malware and HitmanPro, and scan your computer for any
left over infections.
OPTION 3: Remove Police Ukash or Moneypak virus with Kaspersky
Rescue Disk
If any of the above methods did not clean your infected computer, we can use
a
Kaspersky Rescue Disk Bootable to clean the Windows registry
and to perform a system scan to remove the Police Ukash or Moneypak virus.
To
create a bootable Kaspersky Rescue Disk, we will need the following items:
- A clean (non-infected) computer with Internet access
- A blank DVD or CD
- A computer with a DVD or CD burner
STEP 1: Download and create a bootable Kaspersky Rescue Disk CD
- You can download Kaspersky Rescue Disk utility from link
below:
KASPERSKY RESCUE DISK DOWNLOAD LINK
(This link will automatically download Kaspersky Rescue Disk
(kav_rescue_10.iso) on your computer.)
- To create the bootable rescue disk, we will need to use the
ImgBurn program. You can download ImgBurn from
the below link, then install this program.
IMGBURN DOWNLOAD LINK (This link will open
a new page from where you can download the ImgBurn program)
- Insert your blank DVD or CD in your burner, then start ImgBurn and click on
the Write image file to disc button.
- Under Source click on the Browse for file
button, then navigate to the location where you previously saved the Kaspersky
Rescue Disk utility (kav_rescue_10.iso), then click on the
Write button.
![[Image: Bootable Kaspersky Rescue CD]](https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_tesvyVDKsI7jwFIJdEGn_VXR_-eNcrlZziLc7aopXlS1qaw1ldCf7yleT98BBZyODM5jRKDH2-zKY-dM822e87akWZz0Fo5_4T8sXUQUaaxRRczDZ-4diSXV2a-EVD-NdoQP7mOtX6RK9CkyItHCnHAq41q8fDC8lj3tEmdOOFUWb1AWWYtQ=s0-d "Creating Kaspersky Rescue Disk bootable CD")
That’s it, ImgBurn will now begin writing your bootable
Kaspersky Rescue Disk.
STEP 2: Start your computer using the Kaspersky Rescue Disk
- Once you’ve got the Kasperky Rescue Disk in hand, insert it into the
infected computer, and turn off and then turn it on again.
- As soon as you power it on, you will see a screen that tells you to
press any key to enter the menu, so please tap any key to boot your
machine from the Kaspersky Rescue Disk.
![[Image: Starting infected computer from Kaspersky Rescue Disk]](https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_tqZn7QVZp8N1j7MhK9nrqL8DcHBKBtQ4aRHL_dZRB1bDwe9xPhdICDt1ET2jszYcobbVYTSsAKV2sgpxRlJ2cBfT27XvY29Z-GbLhuZaI9XD6fWHQlnuVPU7h2ry2O6FIHnlrUnWI_obJdoPSOysarDGshJ76Ne74=s0-d "Starting infected computer from Kaspersky Rescue Disk")
- In the next screen, you will need to chose a language, then you click on
Kaspersky Rescue Disk. Graphic Mode and press
ENTER, to start the Kaspersky Rescue Disk.
![[Image: Kaspersky Rescue Disk Graphic Mode screen]](https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_vSkiBSMNpjguJGEWLafbcb7kYQtqs8V0UdUt6-vu0iKZXf9Y8sFl3LFY1KpLQgMERSbmTt7Fi_6eaOEDlzjYb70aZQtmo8rXBCpd3lRt2cqkWwYu4nn1iPb1Sa4wrd00R_g4ntLpxsgaLHlTRd4P-FG1kU2QCfU26D8Cr-UEkP2ds=s0-d "Kaspersky Rescue Disk Graphic Mode screen")
STEP 3: Scan your system with Kaspersky Rescue Disk
- Within a few short seconds you should see the full working environment, with
the Kaspersky Rescue Disk screen front and center as shown below.
![[Image: Kaspersky Rescue Disk scanner]](https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_vjYVUkaJK9jdhu_SLjEoCL2qiuORAchtWBklGNBMK6N1rDPaof-l724g0JJbefNFL2bAqrwwhep8o9EkmJyPVVloQhUbqJ-ZzQBgmSx9krT6hU8g0s0esm2-UIvyF9VZz6ltyfvFmjBZEeKqF7Qm49Nqi3pQ=s0-d "Kaspersky Rescue Disk scanner")
- Switch tabs over to the My Update Center, and then click
the Start update button to load the latest anti-virus
definitions. Please be patience while this process its completed.
![[Image: Updating Kaspersky Rescue Disk antivirus definitions]](https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_uf8jlJmj-mKG3-hl9QRDdJ5LmWKDhMnVlLmOw_GPeb7HGwqdlH7DcjgKGJmukqH2rvy29sLzqH3hHwW2ypIJiEDdOe7fgSL3oe2FExQ_SXApSUoFI31LUucfFXL4uL5B5A1Y5aFux346W_jFZPr43Lxz5HWpS_jMxzBPo=s0-d "Updating Kaspersky Rescue Disk antivirus definitions")
- Switch back over to the Objects Scan tab, select the drives
you want to scan, and then click the Start Objects Scan
button.
![[Image: Kaspersky Rescue Disk scan]](https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_tmrtqE74ASoAFbcdwcZuQ5R04AmewKJupPSWw_jAOafUZDlwyeHblebm-jqu_nPiwKTqNnb8eVii8uGpUEo9VoBntG7A5U5WamFRk7maOBunWTVHsfAbNgL0xELD314rqUqo6JYsQhM2qPiVaL91R9ISC-wb015gE=s0-d "Kaspersky Rescue Disk scan")
- When Kaspersky Antivirus will detect the Police Ukash or Moneypak virus,
you’ll be prompted to select an action. When this happens, please select
Quarantine or Delete to remove this infection
from your computer.
![[Image: Kaspersky Rescue Disk prompt]](https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_soXdURdezXUewqVtzHUf_8H6HXqMeyHJSq50AETr-OalhvQa3Z77G12hGvphajifM_U8Pu2ESYxcH_RFGGIN8XyRVH6UFpZmY0-E8QTOXO_hlwMOForZU_w9KplTs2N_REbhLfI59_H7rrt0vSbXaZWXm7YMpBuB7H=s0-d "Kaspersky Rescue Disk when detecting malware")
- When the antivirus scan has completed, you can restart back into Windows
regular mode, by clicking on the Kaspersky Start button
![[Image: Kaspersky Rescue Disk Restart button]](https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_v5HIYMSh5Szn-NlHTbL-Kj_Ji0RraBO0MNzTkKyGhU1gh1NgPpf4c-7-xs8A40KPiga0shUOzIvg4lQ9R6QpYNlaOTSG3hbrKNbymap7ldOd8B4pZUcwP4-aNHt-nQ4CtpLTMWFa6C7dNOMZVAcf7Wv5Cn9ArVrUcz3hx7=s0-d "Kaspersky Rescue Disk Restart button")
(lower left corner), and selecting
Restart.
Once your computer will start in Windows regular
more, download Malwarebytes Anti-Malware and HitmanPro, and scan your computer for any
left over infections.
Your computer should now be free of the Police Ukash or Moneypak infection.
If your current anti-virus solution let this infection through, you may want to
consider purchasing
the PRO version of Malwarebytes Anti-Malware to protect against these
types of threats in the future, and perform regular computer scans with
HitmanPro.
If you are still experiencing problems while trying to remove
Police Ukash or Moneypak virus from your machine, please start a new thread in
our
Malware Removal Assistance forum.
Antivirus Studio 2013 is the latest rogue antivirus after dreaded infection of PC Antivirus 2010. Basically, it is known as malicious program as it is pretty much asking for money in order to stop its harassment. In other words, it installs itself on your computer and tricks you into thinking that your computer is fully infected. But that is not the end of the story. Not only will your computer remain infected, the credit card which you used to make the purchase will also become compromised. So no matter what you do, do not buy this program or have it removed instantly.
When you purchase Windows 7 from Microsoft Store, you have the option to download an ISO file or compressed files. The Windows 7 USB/DVD Download tool allows you to create a copy of your Windows 7 ISO file on a USB flash drive or a DVD. To create a bootable DVD or USB flash drive, download the ISO file and then run the Windows 7 USB/DVD 
Ever since my ant uninstalled 
![[Image: FBI Moneypak scam]](http://malwaretips.com/blogs/wp-content/uploads/2012/06/fbi-moneypak-virus.jpg)
![[Image: Ukash virus]](http://malwaretips.com/blogs/wp-content/uploads/2012/06/ukash-virus.jpg)
![[Image: Ukash scam]](http://malwaretips.com/blogs/wp-content/uploads/2012/06/police-ukash-virus.jpg)
![[Image: Police Moneypak virus]](http://malwaretips.com/blogs/wp-content/uploads/2012/06/police-moneypak-virus.jpg)
![[Image: Moneypak virus]](http://malwaretips.com/blogs/wp-content/uploads/2012/06/moneypak-virus.jpg)
![[Image: ICE Cyber Crime Center MoneyPak virus]](http://malwaretips.com/blogs/wp-content/uploads/2013/06/ICE-Cyber-Crimes-Center-MoneyPak-virus.jpg)