Abu Dhabi Police GHQ virus removal guide
Abu Dhabi Police GHQ message blocking computer's screen and asking to pay a fine of 100$ (500 AED or 100 Euro) using cashU is a scam. It's a ransomware virus which is created by Cyber criminals with a purpose of tricking unsuspecting PC users from United Arab Emirates into paying a fake fine for supposedly made law violations. The deceptive message which is presented in this ransomware states that one has to pay a fine for watching pornography or using and distributing copyrighted content (videos, music, software etc.). Computer users should understand that none of the authorities (including Abu Dhabi Police GHQ) or organizations around the world are using such computer's screen blocking messages to collect fines for any law violations. Paying this fine of 100$ would equal to sending one's money to Cyber criminals. This particular ransomware virus originates from a family called Urausy and is targeted at PC users from United Arab Emirates, notice that such rogue messages comes localized so PC users from different countries will see different deceptive messages.
Ransomware viruses are capable of determining the location of a PC that they infiltrate by detecting computer's IP address. By determining the location of a PC these messages are presented as if they were send by local authorities, moreover the text used into tricking computer users is translated to local language. For example PC users from USA would see this message as if it was send by FBI Cybercrime Division, and for computer users from Australia this message would be changed to seem that it came from Australian Federal Police.
Another variant of this ransomware virus:
PC users from United Arab Emirates should understand that Abu Dhabi Police GHQ didn't send them this message, it's a total scam which shouldn't be trusted. Most commonly ransomware viruses from Urausy family are being spread using exploit kits which are capable of infiltrating user's PC using found security vulnerabilities. Best way of protecting one's operating system from such deceptive screen locking messages is using legitimate antivirus and anti-spyware software. Notice that keeping one's operating system and all of the installed software (Java, Flash etc.) would also greatly reduce the risk of getting infected with ransomware and other malware. If your PC is already infected with Abu Dhabi Police GHQ virus you should use the provided removal instructions to eliminate this scam from your computer.
Abu Dhabi Police GHQ virus removal:
During your computer starting process press F8 key on your keyboard multiple times until Windows Advanced Options menu shows up, then select Safe mode with networking from the list and press ENTER.
Video showing how to start Windows 7 in "Safe Mode with Networking":
Log in to the account that is infected with Abu Dhabi Police GHQ virus. Start your Internet browser and download a legitimate anti-spyware program. Update the anti-spyware software and start a full system scan. Remove all the entries that it detects.
If you can't start your computer in safe mode with networking, try doing a system restore.
Video showing how to remove ransomware virus using "Safe Mode with Command Prompt" and "System Restore":
1. Start your computer in Safe Mode with Command Prompt - During your computer starting process press F8 key on your keyboard multiple times until Windows Advanced Options menu shows up, then select Safe mode with command prompt from the list and press ENTER.
2. When command prompt mode loads enter the following line: cd restore and press ENTER.
3. Next type this line: rstrui.exe and press ENTER.
4. In the opened window click "Next".
5. Select one of the available restore point and click "Next" (this will restore your computer's system to an earlier time and date, before the ransomware infiltrated your PC).
6. In the opened window click "Yes".
7. After restoring your computer to a previous date download and scan your PC with a recommended anti-spyware software to eliminate any left remnants of Abu Dhabi Police GHQ virus.
If you can't start your computer in safe mode with networking (or with command prompt) you should boot your computer using a rescue disk. Some variants of ransomware disables safe mode making it's removal more complicated. For this step you will need access to another computer. After removing Abu Dhabi Police GHQ virus from your PC restart your computer and scan it with a legitimate antispyware software to remove any possibly left remnants of this security infection.
Other tools known to remove Abu Dhabi Police GHQ virus: