Remove Australian Federal Police ransomware (AFP virus)

This is a guide explaining the method of Australian Federal Police ransomware removal. First of all, let us mention that this technique of unlocking computers infected with AFP virus is just one of several methods that can be working solutions. Still, there might be cases when this or other ransomware removal solution will simply not work due to the virus being modified by hackers. However, we do believe that this ransomware removal instruction should work in many cases, provided that you do have a System Restore point available on your computer, and that this option in your operating system is enabled.

Australian Federal Police ransomware

Below is how the face of the Australian Federal Police ransomware looks like. In fact, there are various modificatoins of this virus. Basically, they all can be grouped into two large ransomware families – Urausy and Reveton. Both of these virus clans are extermely severe and dangerous for your computer, since they’re integrated and interconnected with other malware types. Furthermore, the primarly purpose of this locker is to steal money from tricked and scared users, this is why this is definitely the malware that must be immediately removed from your computer to prevent further, more serious damage. Here is the extract from the text of Australian Federal Police ransomware:

Australian Fedral Police
International Cyber Security Protection Alliance
ATTENTION! Your PC is blocked due to at least one of the reasons specified below.
You have been violating «Copyright and Related Rights Law» (Video, Music, Software) and illegally using or distributing copyrighted content, thus infringing Article 128 of the Criminal Code of Australia.
Article 128 of the Criminal Code provides for a fine of 200 to 500 minimal wages or a deprivation of liberty for 2 to 8 years.
You have been viewing or distributing prohibited Pornographic content (Child Porn/Zoophilia and etc). Thus violating Article 202 of the Criminal Code of Australia.
Article 202 of the Criminal Code provides for a deprivation of liberty for 4 to 12 years.
Illegal access to computer data has been initiated from your PC, or you have been…
Article 208 of the Criminal Code provides for a fine of up to AUD $100,000 and/or a deprivation of liberty for 4 to 9 years.
Illegal access has been initiated from your PC without your knowledge or consent, your PC may be infected by malware, thus you are violating the law On Neglectful Use of Personal Computer.
Article 210 of the Criminal Code provides for a fine of AUD $2,000 to AUD $8,000.
Spam distribution or other unlawful advertising has been effected from your PC as a profit-seeking activity or without your knowledge, your PC may be infected by malware.
Article 212 of the Criminal Code provides for a fine of up to AUD $250,000 and a deprivation of liberty of up to 6 years. In case this activity has been effected without your knowledge, you fall under the abovementioned article 210 of the Criminal Code of Australia.
Your personality and address are currently being identified, a criminal case is going to be initiated against you under one or more articles specified above within the next 72 hours.
Pursuant to the amendment to the Criminal Code of Australia of February 04, 2013, this law infringement (if it is not repeated – first time) may be considered as conditional in case you pay the fine to the State.
Fines may only be paid within 72 hours after the infringement. As soon as 72 hours elapse, the possibility to pay the fine expires, and a criminal case is initiated against you automatically within the next 72 hours!
When you pay the fine, your PC will get unlocked in 1 to 72 hours after the money is put into the State’s account.
Since your PC is unlocked, you will be given 7 days to correct all violations.
In case all violations are not corrected after 7 working days, your PC will be blocked again, and a criminal case will be initiated against you automatically under one or more articles specified above.

As you can clearly see, this ransomware also uses the logo of International Cyber Security Protection Alliance, also referred to as the ICSPA. However, the virus has nothing to do with AFP, of course, or with ICSPA. Hackers use the good names and the logos of these Australian law-enforcement agencies for the purpose of fulfilling their evil plots. So, if fake AFP warning came up on your system and locked your screen, don’t worry. Hackers, the developers of this scam, want you to be extremely scared in order to make you obey their further fraudulent instructions. Hence, the first step to successful removal of the Australian Federal Police ransomware is ignoring its evil suggestions to pay the ransom via Ukash.

We’ve developed one of the methods how to unlock your computer blocked with the AFP virus warning. It is well described in the video guide below. Also, there’s additional step-by-step guide that explains all these ransomware removal milestones in details.