Windows Anytime Upgrade screen lock

How to unblock your PC after Windows Anytime Upgrade scam?

Windows Anytime Upgrade is a ransomware which claims that you have to pay a fine of 100 pounds to unlock your computer. This screen locker is one of the scams that are being actively distributed all over the Internet by Cyber criminals. Windows Anytime Upgrade is targeting unsuspecting PC users stating that they have to pay a fine for using unlicensed software. This screen lock is using slightly different tactic to trick PC users, other versions of this scam are stating that you have to pay a fine for copyrighted content or for watching pornography.

You should understand that this screen lock is a scam, the Windows logo and it's name is just exploited by Cyber criminals to make their message seem more real. When this rogue infiltrates your computer it will detect your operating system and will accordingly change it's message. Notice that Microsoft doesn't use any of such screen lockers to collect fines for using unlicensed copies of their operating system. You should ignore this message, it's a scam. Don't pay this non existent fine.

Windows Anytime Upgrade scam is using Ukash and Paysafecard to collect the fake fines. To make the situation worse this ransomware also encrypts all of your files that are stored in your computer's HDD. So even after removal of this screen lock you will have to complete several manual removal steps to regain control of your encrypted information. Don't pay the fake penalty of Windows Anytime Upgrade and use the provided information to eliminate this scam from your computer.

Fake message shown in Windows Anytime Upgrade screen lock:

Windows Anytime Upgrade Your computer is blocked
You see this windows because you have software subject to licensing installed on your computer. Or your license has expired.
You see this windows because you have software subject to licensing installed on your computer installed on your computer. Or your license has expired. According to copyright law each software product installed on a home/office PC shall be licensed. Using unlicensed software is prosecuted by law. It is liable to the fine in amount of $1000 or up to 12 weeks’ corrective labour. You shall immediately purchase a license for Microsoft Windows Home Premium (10. 1.2). In case you fail to do it within the next 24 hours, your computer will be blocked and your personal data will be transferred to court.
The cost of the license is 100 pounds
You can pay for the license with Ukash or Paysafecard. For paying just enter the code into the field below.

Windows Anytime Upgrade screen lock removal:

Step 1

During your computer starting process press F8 key on your keyboard multiple times until Windows Advanced Options menu shows up, then select Safe mode with networking from the list and press ENTER.

Step 2

Log in to the account that is infected with Windows Anytime Upgrade scam. Start your Internet browser and download a legitimate anti-spyware program. Update the anti-spyware software and start a full system scan. Remove all the entries that it detects.

remover for Windows Anytime Upgrade scam

Alternative Windows Anytime Upgrade scam removal guide:

If this ransomware blocks your screen when you start your computer in safe mode with networking, try starting your PC in safe mode with command prompt.

1. During your computer starting process press F8 key on your keyboard multiple times until Windows Advanced Options menu shows up, then select Safe mode with command prompt from the list and press ENTER.

2. In the opened command prompt type explorer and press Enter. This command will open explorer window, don't close it and continue to the next step.

3. In the command prompt type regedit and press Enter. This will open the registry editor window.

4. In the registry editor window you should navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\

5. In the right side of the window locate "Shell" and right click on it. Click on Modify. The default value data is Explorer.exe if you see something else written in this window remove it and type in Explorer.exe (you can write down whatever else was written in the value data section - this is a path of the rogue execution file) - use this information to navigate to the rogue executable and remove it.

6. Restart your computer, download and install a legitmate anti-spyware software and perform a full system scan to eliminate any left remnants of Windows Anytime Upgrade scam.

remover for Windows Anytime Upgrade scam

If you can't start your computer in safe mode with networking (or with command prompt) you should boot your computer using a rescue disk. Some variants of ransomware disables safe mode making it's removal more complicated. For this step you will need access to another computer. After removing Windows Anytime Upgrade scam from your PC restart your computer and scan it with a legitimate antispyware software to remove any possibly left remnants of this security infection.

Step 3

This ransomware encrypts all of the files on your computer. To decrypt your files download and run Kaspersky's Rannoh Decryptor. After launching this software click "Start Scan" button. Average scan time is about 2 hours.

After completing these steps your computer should be clean, reboot your computer in normal mode.

Other tools known to remove Windows Anytime Upgrade screen lock:

• iS3 STOPzilla
• Malwarebytes Anti-Malware

Some malicious software modifies browser settings and disables downloads of spyware and virus removing software. If you have problems downloading anti-spyware software with Internet Explorer, try downloading with Chrome, FireFox, Opera, etc.

If you can't access Internet:

Load your computer in safe mode. Click Start, click Shut down, click Restart, click OK. During your computer starting process press F8 key on your keyboard multiple times until you see Windows Advanced Option menu, then select Safe mode with networking from the list.

Start Task manager. Press ctrl+alt+del (or ctrl+shift+esc) and end task the processes of rogue program. ( if after this procedure you can't access any programs press ctrl+alt+del, click File, select New Task, and type explorer.exe then press OK.

Open Internet explorer, click Tools and select Internet Options. Select Connections, then click LAN settings, if a Use a proxy server for your LAN is checked, un-check it and press OK.

After this procedure you should be able to access Internet. Now you can download anti-spyware software from our "Top spyware removers" section and run a full scan. Download, install and don't forget to update your selected anti-spyware program.

Manual Windows Anytime Upgrade scam removal:

If you were unable to remove Windows Anytime Upgrade screen lock using the steps above, you can use this manual removal instruction. Use it at your own risk. If you don't have strong computer knowledge you could harm your operating system. Be careful and use it only if you are an experienced computer user. (Instructions on how to end processes, remove registry entries...)

End these Windows Anytime Upgrade screen lock processes:

random.exe

Delete these Windows Anytime Upgrade screen lock files:

%Temp%\<random>.exe
%StartupFolder%\ctfmon.lnk

If you continue to have problems removing this ransomware try booting your computer using a rescue disk.