Windows Anytime Upgrade Virus removal guide
Windows Anytime Upgrade is a ransomware which claims that you have to pay a fine of 100 pounds to unlock your computer. This screen locker is one of the scams that are being actively distributed all over the Internet by Cyber criminals. Windows Anytime Upgrade is targeting unsuspecting PC users stating that they have to pay a fine for using unlicensed software. This screen lock is using slightly different tactic to trick PC users, other versions of this scam are stating that you have to pay a fine for copyrighted content or for watching pornography.
You should understand that this screen lock is a scam, the Windows logo and it's name is just exploited by Cyber criminals to make their message seem more real. When this rogue infiltrates your computer it will detect your operating system and will accordingly change it's message. Notice that Microsoft doesn't use any of such screen lockers to collect fines for using unlicensed copies of their operating system. You should ignore this message, it's a scam. Don't pay this non existent fine.
Windows Anytime Upgrade scam is using Ukash and Paysafecard to collect the fake fines. To make the situation worse this ransomware also encrypts all of your files that are stored in your computer's HDD. So even after removal of this screen lock you will have to complete several manual removal steps to regain control of your encrypted information. Don't pay the fake penalty of Windows Anytime Upgrade and use the provided information to eliminate this scam from your computer.
Fake message shown in Windows Anytime Upgrade screen lock:
Windows Anytime Upgrade Your computer is blocked
You see this windows because you have software subject to licensing installed on your computer. Or your license has expired.
You see this windows because you have software subject to licensing installed on your computer installed on your computer. Or your license has expired. According to copyright law each software product installed on a home/office PC shall be licensed. Using unlicensed software is prosecuted by law. It is liable to the fine in amount of $1000 or up to 12 weeks’ corrective labour. You shall immediately purchase a license for Microsoft Windows Home Premium (10. 1.2). In case you fail to do it within the next 24 hours, your computer will be blocked and your personal data will be transferred to court.
The cost of the license is 100 pounds
You can pay for the license with Ukash or Paysafecard. For paying just enter the code into the field below.
Windows Anytime Upgrade screen lock removal:
During your computer starting process press F8 key on your keyboard multiple times until Windows Advanced Options menu shows up, then select Safe mode with networking from the list and press ENTER.
Video showing how to start Windows 7 in "Safe Mode with Networking":
Log in to the account that is infected with Windows Anytime Upgrade scam. Start your Internet browser and download a legitimate anti-spyware program. Update the anti-spyware software and start a full system scan. Remove all the entries that it detects.
Alternative Windows Anytime Upgrade scam removal guide:
If this ransomware blocks your screen when you start your computer in safe mode with networking, try starting your PC in safe mode with command prompt.
1. During your computer starting process press F8 key on your keyboard multiple times until Windows Advanced Options menu shows up, then select Safe mode with command prompt from the list and press ENTER.
2. In the opened command prompt type explorer and press Enter. This command will open explorer window, don't close it and continue to the next step.
3. In the command prompt type regedit and press Enter. This will open the registry editor window.
4. In the registry editor window you should navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\
5. In the right side of the window locate "Shell" and right click on it. Click on Modify. The default value data is Explorer.exe if you see something else written in this window remove it and type in Explorer.exe (you can write down whatever else was written in the value data section - this is a path of the rogue execution file) - use this information to navigate to the rogue executable and remove it.
6. Restart your computer, download and install a legitimate anti-spyware software and perform a full system scan to eliminate any left remnants of Windows Anytime Upgrade scam.
If you can't start your computer in safe mode with networking (or with command prompt) you should boot your computer using a rescue disk. Some variants of ransomware disables safe mode making it's removal more complicated. For this step you will need access to another computer. After removing Windows Anytime Upgrade scam from your PC restart your computer and scan it with a legitimate antispyware software to remove any possibly left remnants of this security infection.
This ransomware encrypts all of the files on your computer. To decrypt your files download and run Kaspersky's Rannoh Decryptor. After launching this software click "Start Scan" button. Average scan time is about 2 hours.
After completing these steps your computer should be clean, reboot your computer in normal mode.
Other tools known to remove Windows Anytime Upgrade screen lock:
If you continue to have problems removing this ransomware try booting your computer using a rescue disk.