Remove Royal Canadian Mounted Police virus

The fake Royal Canadian Mounted Police warning is a virus classified as ransomware. By some users it is referred to as RCMP virus or ransomware. This alert on the screen is not associated with Canadian police or any other legal body of this country. Instead, the warning that suddenly appears on many computers is the desktop-locking application elaborated by the team of instrumental hackers who want to earn a fortune through tricky, scary and deceptive methods. This guide explains how to get rid of Royal Canadian Mounted Police virus off your computer and unlock your system.

Royal Canadian Mounted Police virus

There are various modifications of RCMP virus warning. Two large ransomware families that use this good name of Canadian police are called Urausy and Reveton. We honestly don’t know why exactly they bear such names. What we know is that they both act very aggressively. Once the malware enters the computer the entire desktop (screen) of it gets absolutely locked with a fake Royal Canadian Mounted Police alert. It begins condemning user, the owner of the locked machine, of performing various crimes online through the attacked computer. Then the virus tells that in order to unlock the computer user must pay the fine in the amount of CAD 100 through indication of Ukash of Paysafecard voucher of PIN code in a special field of the locker. The ransomware infection states that this money will go to the state budget or treasury as a fine for the crimes user has supposedly committed. In reality, the funds (if paid) will be directly credited to the accounts of the crooks. As you see, there’s no point paying such fine, because obviously this is a fake fine. To be more accurate, this is the ransom which hackers want you to pay in their favor.

Here is what the locker actually says once it infects your computer:

Royal Canadian Mounted Police
International Cyber Security Protection Alliance
Attention! Your PC is blocked due to at least one of the reasons specified below.

You have been violating “Copyright and Related Rights Law» (Video, Music, Software) and illegally using or distributing copyrighted content, thus infringing Article 128 of the Criminal Code of Canada.
Article 128 of the Criminal Code provides for a fine of 200 to 500 minimal wages or a deprivation of liberty for 2 to 8 years.
You have been viewing or distributing prohibited Pornographic content (Child Porn/Zoophilia and etc). Thus violating Article 202 of the Criminal Code of Canada.
Article 202 of the Criminal Code provides for a deprivation of liberty for four to 12 years.
Illegal access to computer data has been initiated from your PC, or you have been…
Article 208 of the Criminal Code provides for a fine of up to CAD $100,000 and/or a deprivation of liberty for 4 to 9 years.
Illegal access has been initiated from your PC without your knowledge or consent, your PC may be infected by malware, thus you are violating the law On Neglectful Use of Personal Computer.
Article 210 of the Criminal Code provides for a fine of CAD $2,000 to CAD $8,000.
Spam distribution or other unlawful advertising has been effected from your PC as a profit-seeking activity or without your knowledge, your PC may be infected by malware.
Article 212 of the Criminal Code provides for a fine of up to CAD $250,000 and a deprivation of liberty of up to 6 years. In case this activity has been effected without your knowledge, you fall under the above-mentioned article 210 of the Criminal Code of Canada.
Your personality and address are currently being identified, a criminal case is going to be initiated against you under one or more articles specified above within the next 72 hours.
Pursuant to the amendment to the Criminal Code of Great Canada of February 04, 2013, this law infringement (if it is not repeated – first time) may be considered as conditional in case you pay the fine to the State.
Fines may only be paid within 72 hours after the infringement. As soon as 72 hours elapse, the possibility to pay the fine expires, and a criminal case is initiated against you automatically within the next 72 hours.
The amount of fine is CAD $100. You can pay a fine Ukash or PaySafeCard.
When you pay the fine, your PC will get unlocked in 1 to 72 hours after the money is put into the State’s account.
Since your PC is unlocked, you will be given 7 days to correct all violations.
In case all violations are not corrected after 7 working days, your PC will be blocked again, and a criminal case will be initiated against you automatically under one or more articles specified above.

The problem with unlocking computers infected with Royal Canadian Mounted Police (RCMP) virus is surely essential for many computer users these days, especially those that live in Canada. The chances are that some other countries might also be attacked by this scam, even though Canada is the primary target. Yet, another side of the coin is that there are various solutions of unlocking computers infected with RCMP ransomware. If one attempts to simply reboot the computers regularly he/she would obviously fail to restore the system in such a primitive manners. Hackers aren’t that stupid to let the locker leave machine simply by rebooting. In fact, no matter how many times one restarts the PC regularly, the same locked status of the machine remains, as well as the scary yet fake Royal Canadian Mounted Police alert.

We know several solutions for unlocking system attacked by RCMP scam. One of them implies restoring the computer to previous state through System Restore Point. Again, this is just one of many working methods to unlock the computer. There are many other working solutions as well, and you should try them first of all. Use System Restore method only if other methods don’t work. If you have any questions with regard to this or other problem with your system please let us know. Decent comments are always welcome!

Recommended removal guides to remove ransomware from your computer:

Alternative removal guide:

https://www.system-tips.net/how-to-unlock-computer-though-system-restore-restore-point/

AFP ransomware removal video guide (System Restore method):