Ireland's National Police Service (An Garda Siochana) Scam - Ukash Virus

How to remove Ireland's National Police Service scam and unblock your computer?

Ireland's National Police Service is another screen locker scam that is distributed by Cyber criminals. This ransomware is targeting computer users from Ireland. Most commonly such infections are spread using Trojans and misleading websites which exploits your computer's security vulnerabilities. After infiltrating your computer this ransomware will completely block your desktop with a message stating that you have to pay a fine of 100 euro for watching child pornography, storing pirated content etc.

Notice that none of the authorities are using such screen lockers to collect fines for any illegal activities, this message it a scam created by Internet criminals who are hoping that you will fall for this trickery and you will send the Ukash codes for them. In reality this fine doesn't exist and Ireland's National Police Service doesn't collect fines using screen lockers. You should ignore this message and don't pay the imaginary fine to Cyber criminals.

Ireland's National Police Service is just one of many ransomware variants that are infecting Internet users all over the world, for example computer users from USA are being targeted by rogue FBI ransomware. To prevent such security infections from infiltrating your PC you should use a legitimate antivirus and antispyware programs, also you should update your operating system and all of your installed programs.

Fake message shown in Ireland's National Police Service screen lock:

Irelands National Police Service
Your computer is locked
Your computer has been locked by the automated information control system (AICS)
What is the reason?
This could be due to one of the following reasons:
1. Your computer has been used to view banned Web sites
2. Your computer has been used to view Web site containing child pornography.
3. Your computer has been used to illicit information exchange
4. Your computer has been used for storing/viewing pirated content
What should I do?
According to "Information Security and Control Act (ISCA) 2012", you are required to pay a fine of 100 euro. For the convenience of paying the fine we provide a secure payment gateway for Ukash Vouchers. You need to buy Ukash voucher(s) for sum 100 euro and enter the 19 (sometimes 16) digit code written on the voucher to the secure payment form, then press "Submit Code" button to send the code. What will happen after I submit the code? Once the Ukash voucher code is verified by our system your computer will be immediately unlocked. If you want to pay a fine using two codes of 50 euro each - you should enter the first code, after receiving confirmation, the second code. What if I have problems? If for any reason you can not pay the fine through a secure payment form, you will need to send an e-mail to This e-mail address is being protected from spambots. You need JavaScript enabled to view it , stating your IP address and Ukash voucher code (19 digits or 16 digits) of total sum 100 euro. Once the code is verified by our system your computer will be immediately unlocked.

Ireland's National Police Service computer lock removal:

Step 1

During your computer starting process press F8 key on your keyboard multiple times until Windows Advanced Options menu shows up, then select Safe mode with networking from the list and press ENTER.

Step 2

Log in to the account that is infected with Ireland's National Police Service virus. Start your Internet browser and download a legitimate anti-spyware program. Update the anti-spyware software and start a full system scan. Remove all the entries that it detects.

remover for Ireland's National Police Service ransomware

Can't boot in Safe Mode with Networking? (Ireland's National Police Service virus blocks Safe Mode with Networking)

If you have more than one user account in your operating system - please log-in to the clean account and download the recommended anti-spyware software, install it and run a full system scan, remove all the security infections it will detect, however if you have only one user account please follow this guide (this guide will show you how to create a new user account using safe mode with command prompt - using this newly created user account you will be able to remove An Garda Siochana ransomware).

If Ireland's National Police Service virus also blocks your operating system's Safe Mode with Networking follow these removal instructions:

1. Start your computer in Safe Mode with Command Prompt - During your computer starting process press F8 key on your keyboard multiple times until Windows Advanced Options menu shows up, then select Safe mode with command prompt from the list and press ENTER.

2. When command prompt mode loads enter the following line: net user removevirus /add and press ENTER.

3. Next enter this line: net localgroup administrators removevirus /add and press ENTER.

4. Finnaly enter this line: shutdown -r and press ENTER.

5. Wait for your computer to restart,  then boot your PC in Normal Mode and login to the newly created user account ("removevirus"). This account won't be affected by the ransomware infection and you will be able to download and install recommended anti-spyware software to eliminate this virus from your computer.

6. Download and install recommended anti-spyware software to eliminate this ransomware infection from your computer:

remover for Ireland's National Police Service virus

Alternative Ireland's National Police Service scam removal guide:

If this ransomware blocks your screen when you start your computer in safe mode with networking, try starting your PC in safe mode with command prompt.

1. Start your computer in Safe Mode with Command Prompt - During your computer starting process press F8 key on your keyboard multiple times until Windows Advanced Options menu shows up, then select Safe mode with command prompt from the list and press ENTER.

2. When command prompt mode loads enter the following line: cd restore and press ENTER.

3. Next type this line: rstrui.exe and press ENTER.

4. In the opened window click "Next".

5. Select one of the available restore point and click "Next" (this will restore your computer's system to an earlier time and date, before the ransomware infiltrated your PC).

6. In the opened window click "Yes".

7. After restoring your computer to a previous date download and scan your PC with a recommended anti-spyware software to eliminate any left remnants of Ireland's National Police Service virus.

remover for Ireland's National Police Service scam

If you can't start your computer in safe mode with networking (or with command prompt) you should boot your computer using a rescue disk. Some variants of ransomware disables safe mode making it's removal more complicated. For this step you will need access to another computer. After removing Ireland's National Police Service scam from your PC restart your computer and scan it with a legitimate antispyware software to remove any possibly left remnants of this security infection.

Other tools known to remove Ireland's National Police Service screen lock:

• iS3 STOPzilla
• Malwarebytes Anti-Malware

Other methods which can be used to eliminate this ransomware infection from your PC:

Remove Ireland's National Police Service virus using a Rescue Disk.

Some malicious software modifies browser settings and disables downloads of spyware and virus removing software. If you have problems downloading anti-spyware software with Internet Explorer, try downloading with Chrome, FireFox, Opera, etc.

If you can't access Internet:

Load your computer in safe mode. Click Start, click Shut down, click Restart, click OK. During your computer starting process press F8 key on your keyboard multiple times until you see Windows Advanced Option menu, then select Safe mode with networking from the list.

Start Task manager. Press ctrl+alt+del (or ctrl+shift+esc) and end task the processes of rogue program. ( if after this procedure you can't access any programs press ctrl+alt+del, click File, select New Task, and type explorer.exe then press OK.

Open Internet explorer, click Tools and select Internet Options. Select Connections, then click LAN settings, if a Use a proxy server for your LAN is checked, un-check it and press OK.

After this procedure you should be able to access Internet. Now you can download anti-spyware software from our "Top spyware removers" section and run a full scan. Download, install and don't forget to update your selected anti-spyware program.

Manual Ireland's National Police Service scam removal:

If you were unable to remove Ireland's National Police Service screen lock using the steps above, you can use this manual removal instruction. Use it at your own risk. If you don't have strong computer knowledge you could harm your operating system. Be careful and use it only if you are an experienced computer user. (Instructions on how to end processes, remove registry entries...)

End these Ireland's National Police Service screen lock processes:

random.exe

Delete these Ireland's National Police Service screen lock files:

%Temp%\<random>.exe
%StartupFolder%\ctfmon.lnk

If you continue to have problems removing this ransomware try booting your computer using a rescue disk.