Ireland's National Police Service Virus

Also Known As: Guard of the Peace Ransomware
Type: Ransomware
Damage level: Severe
Distribution: High
Damage Level

How to remove Ireland's National Police Service virus from your computer?

What is Ireland's National Police Service?

Ireland's National Police Service is a screen locker scam distributed by Cyber criminals. This ransomware targets computer users from Ireland and is often spread using Trojans and misleading websites, which exploit your computer's security vulnerabilities. After infiltrating your computer, this ransomware blocks your desktop with a message demanding that you pay a 100 Euro fine for watching child pornography, storing pirated content, etc.

No authorities use screen lockers such as this to collect fines for any illegal activities. This message it a scam created by Internet criminals in the hope that you will fall for their trickery and send Ukash codes to them. In fact, Ireland's National Police Service does not collect fines using screen lockers, therefore, ignore this message and do not pay this fabricated fine to Cyber criminals.

Ireland's National Police Service virus

Update July 19, 2013 - Cyber criminals have released a new variant of this ransomware virus targeted at PC users from Ireland: GARDA "Your computer has been blocked" virus 

Ireland's National Police Service is just one of many ransomware variants infecting Internet users' systems worldwide. For example, computer users from the USA are being targeted by rogue FBI ransomware. To prevent these security infections from infiltrating your PC, use legitimate antivirus and antispyware programs and update your operating system and your installed programs regularly.

Ukash (Smart Voucher Limited) is a legitimate company and not related to ransomware viruses - Cyber criminals use the name of this service to extort money from unsuspecting PC users.

A fake message shown by Ireland's National Police Service screen lock:

Irelands National Police Service.
Your computer is locked.
Your computer has been locked by the automated information control system (AICS)
What is the reason?
This could be due to one of the following reasons:
1. Your computer has been used to view banned Web sites
2. Your computer has been used to view Web site containing child pornography.
3. Your computer has been used to illicit information exchange
4. Your computer has been used for storing/viewing pirated content
What should I do?
According to "Information Security and Control Act (ISCA) 2012", you are required to pay a fine of 100 euro. For the convenience of paying the fine we provide a secure payment gateway for Ukash Vouchers. You need to buy Ukash voucher(s) for the sum of 100 euro and enter the 19 (sometimes 16) digit code written on the voucher to the secure payment form, then press "Submit Code" button to send the code. What will happen after I submit the code? Once the Ukash voucher code is verified by our system your computer will be immediately unlocked. If you want to pay a fine using two codes of 50 euro each - you should enter the first code, after receiving confirmation, the second code. What if I have problems? If for any reason you can not pay the fine through a secure payment form, you will need to send an e-mail to This e-mail address is being protected from spambots. You need JavaScript enabled to view it , stating your IP address and Ukash voucher code (19 digits or 16 digits) of total sum of 100 euro. Once the code is verified by our system your computer will be immediately unlocked.

Quick menu:

Ireland's National Police Service computer lock removal:

Step 1

Start your computer in Safe Mode. Click Start, click Shut Down, click Restart, click OK. During your computer starting process press the F8 key on your keyboard multiple times until you see the Windows Advanced Option menu, then select Safe Mode with Networking from the list.

alt

Video showing how to start Windows 7 in "Safe Mode with Networking":

Step 2

Log in to the account infected with the Ireland's National Police Service virus. Start your Internet browser and download a legitimate anti-spyware program. Update the anti-spyware software and start a full system scan. Remove all the entries detected.

remover for Ireland's National Police Service ransomware

By downloading any software listed on this website you agree to our Privacy Policy and Terms of Use. We are affiliated with anti-virus and anti-spyware software listed on this site. All the products we recommend were carefully tested and approved by our technicians as being one of the most effective solutions for removing this threat.
If you need assistance removing Ireland's National Police Service Virus, give us a call 24/7:
1-877-484-8393

Cannot boot in Safe Mode with Networking? (Ireland's National Police Service virus blocks Safe Mode with Networking)

If you have more than one user account in your operating system - please log-in to the clean account and download the recommended malware removal software, install it and run a full system scan, remove all the security infections detected. If, however, you have only one user account, please follow this guide (this guide demonstrates how to create a new user account using Safe Mode with Command Prompt - using this newly created user account, you will be able to remove Ireland's National Police Service virus).

If Ireland's National Police Service virus also blocks your operating system's Safe Mode with Networking, follow these removal instructions:

1. During your computer starting process, press the F8 key on your keyboard multiple times until the Windows Advanced Options menu appears, and then select Safe Mode with Command Prompt from the list and press ENTER.

Boot your computer in Safe Mode with Command Prompt

2. When Command Prompt mode loads, enter the following line: net user removevirus /add and press ENTER.

alt

3. Next, enter this line: net localgroup administrators removevirus /add and press ENTER.

creating new user using command prompt

4. Finally, enter this line: shutdown -r and press ENTER.

adding a new user in command prompt

5. Wait for your computer to restart, boot your PC in Normal Mode, and then login to the newly created user account ("removevirus"). This account will not be affected by the ransomware infection and you will be able to download and install recommended malware removal software to eliminate this virus from your computer.

new user account created

6. Download and install recommended malware removal software to eliminate this ransomware infection from your computer:

remover for Ireland's National Police Service virus

By downloading any software listed on this website you agree to our Privacy Policy and Terms of Use. We are affiliated with anti-virus and anti-spyware software listed on this site. All the products we recommend were carefully tested and approved by our technicians as being one of the most effective solutions for removing this threat.
If you need assistance removing Ireland's National Police Service Virus, give us a call 24/7:
1-877-484-8393

Alternative Ireland's National Police Service scam removal guide:

If this ransomware blocks your screen when you start your computer in Safe Mode with Networking, try starting your PC in Safe Mode with Command Prompt.

Video showing how to remove ransomware virus using "Safe Mode with Command Prompt" and "System Restore":

1. During your computer starting process, press the F8 key on your keyboard multiple times until the Windows Advanced Options menu appears, and then select Safe Mode with Command Prompt from the list and press ENTER.

Boot your computer in Safe Mode with Command Prompt

2. When Command Prompt mode loads, enter the following line: cd restore and press ENTER.

system restore using command prompt type cd restore

3. Next, type this line: rstrui.exe and press ENTER.

system restore using command prompt rstrui.exe

4. In the opened window, click "Next".

restore system files and settings

5. Select one of the available restore points and click "Next" (this will restore your computer's system to an earlier time and date, prior to the ransomware infiltrating your PC).

select a restore point

6. In the opened window, click "Yes".

run system restore

7. After restoring your computer to a previous date, download and scan your PC with recommended malware removal software to eliminate any remnants of Ireland's National Police Service virus.

remover for Ireland's National Police Service scam

By downloading any software listed on this website you agree to our Privacy Policy and Terms of Use. We are affiliated with anti-virus and anti-spyware software listed on this site. All the products we recommend were carefully tested and approved by our technicians as being one of the most effective solutions for removing this threat.
If you need assistance removing Ireland's National Police Service Virus, give us a call 24/7:
1-877-484-8393

If you cannot start your computer in Safe Mode with Networking (or with Command Prompt),boot your computer using a rescue disk. Some variants of ransomware disable Safe Mode, making its removal more complicated. For this step, you need access to another computer. After removing Ireland's National Police Service scam from your PC, restart your computer and scan it with legitimate antispyware software to remove any possible remnants of this security infection.

Other tools known to remove Ireland's National Police Service screen lock:

Other methods which can be used to eliminate this ransomware infection from your PC:

Remove Ireland's National Police Service virus using a Rescue Disk.

About the author:

I am passionate about computer security and technology. I have an experience of 10 years working in various companies related to computer technical issue solving and Internet security. I have been working as an editor for pcrisk.com since 2010.

Follow me on Google+ to stay informed about the latest online security threats.

Our malware removal guides are free. However, if you want to support us you can send us a donation.