Policia (Police) Federal Argentina (Argentine) (PFA) Ukash Virus

Policia Federal Argentina (PFA) Ukash Virus - how to eliminate this scam?

Policia Federal Argentina message which blocks computer user's desktop and asks to pay a fine of 200 ARS is a ransomware virus which shouldn't be trusted. It's a scam developed by Cyber criminals, PFA ransomware main goal is to escort money from unsuspecting PC users. There are several ransowmare families which target computer users from Argentina - Raxm and Urausy (screenshots below). Computer users should understand that none of the real authorities around the world are collecting fines for any law violations by locking PC user's screen, this message is a cleverly designed scam which exploits the names of local authorities.

Notice that ransomware infections are localised and can change their user's interface according to the location of the computer that they infiltrate. For example if this ransomware virus infiltrated a PC located in USA, the fake message would be changed to make it appear as if it was send by FBI Cyber Division or simply FBI (text would be translated to English language). PC users from Argentina should understand that such messages from PFA is a total scam and paying the fine when asked by one equals to sending one's 200 ARS to Cyber criminals.

Policia Federal Argentina doesn't have anything to do with these messages, if you see such message on your computer's screen you can be sure that your PC is infected with a ransowmare virus. Most commonly such malware infects user's computers using found security vulnerabilities, Trojans and drive-by downloads. To protect one's computer from such malicious messages one should use legitimate antivirus and anti-spyware software, moreover be sure to download software updates and video codecs only from legitimate sources. Don't use Ukash or PaySafeCard to pay this fake fine, use the provided removal guide to eliminate this scam from your computer.

Fake message presented in Policia Federal Argentina Ukash virus:

Policia Federal Argentina

¡ATENCIÓN! Su OP (ordenador) está bloqueado debido a al menos una de las razones especificadas siguientes. Usted ha violado derecho de autor y los derechos conexos (vídeo, música, software) y ha utilizado de una manera ilegal con la distribución de contenido los derechos de autor, infringiendo asi el artículo 128 del Criminal Codo de la República de Argentina.
El articulo 128 del Criminal Code prevé una multa 200 a 500 de los salarios mínimos o la privación de la libertad de 208  años.
Usted ha visto o distribuido el contenido prohibido pornográfico (pomo infantil/Zoofilia y etc), violando asi el articulo 202 del Criminal Codo de la República de Argentina. El articulo 202 del Criminal Codo prevé la privación de la libertad de 4 a 12 años.
El acceso ilegal al contenido prohibido se ha iniciado desde su OP (ordenador), o usted habla sido...
El artículo 208 del Criminal Codo prevé una multa hasta ARS 5300,000 (Peso) y/o la privación de la libertad de 4 a 9 años.
El acceso ilegal se ha iniciado desde su OP (ordenador) sin su conocimiento o consentimiento, su OP puede ser infectado por malware, por eso usted está violando la ley sobre el «Uso negligente de un OP (ordenador) personal>. El artículo 210 del Criminal Codo prevé una multa de ARS 56,000 (Peso) a ARS 524,000 (Peso).
La distribución de spam o una otra publicidad ilicita se ha efectuado desde su OP (ordenador) como una actividad con fines de lucro o sin su conocimiento, su OP (ordenador) puede ser infectado por malware.
El articulo 212 del Criminal Code prevé una multa hasta ARS 5750,000 (Peso) y una privación de la libertad hasta 6 años. En caso de que esta actividad se ha realizado sin su conocimiento, usted se cae en el mencionado artículo 210 del Criminal Codo de la República de Argentina.
Su personalidad y la dirección están siendo identificadas, un caso criminal va a ser lanzado en su contra en conformidad con uno o varios artículos mencionados dentro de las próximas 72 horas.
En conformidad con la enmienda al Criminal Code de la República de Argentina del 04 de Febrero 2013, esta infracción de la ley (si no se repite - la primera vez) puede ser considerada como condicional en caso de que usted paga la multa al Estado.
Las multas deben solamente ser pagadas durante 72 horas después de la infracción. Tan pronto como 72 horas transcurren, su posibilidad de pagar la multa será expirada, asi, un proceso penal será automáticamente iniciado en su contra durante las próximas 72 horas! El importe de ta multa es de ARS $200 (Peso) o USD $50 (US Dólar). Usted puede pagar- esta multa por PaySafeCard o Ukash.
Cuando usted paga la multa, su OP (ordenador) será debloqueado durante de 1 a 72 horas después de que el dinero arriba en la cuenta del Estado.

Policia Federal Argentina Ukash virus removal:

Step 1

During your computer starting process press F8 key on your keyboard multiple times until Windows Advanced Options menu shows up, then select Safe mode with networking from the list and press ENTER.

Step 2

Log in to the account that is infected with Policia Federal Argentina Ukash virus. Start your Internet browser and download a legitimate anti-spyware program. Update the anti-spyware software and start a full system scan. Remove all the entries that it detects.

remover for Policia Federal Argentina Ukash virus

If you can't start your computer in safe mode with networking, try doing a system restore.

1. Start your computer in Safe Mode with Command Prompt - During your computer starting process press F8 key on your keyboard multiple times until Windows Advanced Options menu shows up, then select Safe mode with command prompt from the list and press ENTER.

2. When command prompt mode loads enter the following line: cd restore and press ENTER.

3. Next type this line: rstrui.exe and press ENTER.

4. In the opened window click "Next".

5. Select one of the available restore point and click "Next" (this will restore your computer's system to an earlier time and date, before the ransomware infiltrated your PC).

6. In the opened window click "Yes".

7. After restoring your computer to a previous date download and scan your PC with a recommended anti-spyware software to eliminate any left remnants of Policia Federal Argentina Ukash virus.

If you can't start your computer in safe mode with networking (or with command prompt) you should boot your computer using a rescue disk. Some variants of ransomware disables safe mode making it's removal more complicated. For this step you will need access to another computer. After removing Policia Federal Argentina Ukash virus from your PC restart your computer and scan it with a legitimate antispyware software to remove any possibly left remnants of this security infection.

Other tools known to remove Policia Federal Argentina Ukash virus:

• iS3 STOPzilla
• Malwarebytes Anti-Malware

Some malicious software modifies browser settings and disables downloads of spyware and virus removing software. If you have problems downloading anti-spyware software with Internet Explorer, try downloading with Chrome, FireFox, Opera, etc.

If you can't access Internet:

Load your computer in safe mode. Click Start, click Shut down, click Restart, click OK. During your computer starting process press F8 key on your keyboard multiple times until you see Windows Advanced Option menu, then select Safe mode with networking from the list.

Start Task manager. Press ctrl+alt+del (or ctrl+shift+esc) and end task the processes of rogue program. ( if after this procedure you can't access any programs press ctrl+alt+del, click File, select New Task, and type explorer.exe then press OK.

Open Internet explorer, click Tools and select Internet Options. Select Connections, then click LAN settings, if a Use a proxy server for your LAN is checked, un-check it and press OK.

After this procedure you should be able to access Internet. Now you can download anti-spyware software from our "Top spyware removers" section and run a full scan. Download, install and don't forget to update your selected anti-spyware program.

Manual Policia Federal Argentina Ukash virus removal:

If you were unable to remove Policia Federal Argentina Ukash virus using the steps above, you can use this manual removal instruction. Use it at your own risk. If you don't have strong computer knowledge you could harm your operating system. Be careful and use it only if you are an experienced computer user. (Instructions on how to end processes, remove registry entries...)

End these Policia Federal Argentina Ukash virus processes:

random.exe

Delete these Policia Federal Argentina Ukash virus files:

%Temp%\<random>.exe
%StartupFolder%\ctfmon.lnk