Canadian Association of Chiefs of Police virus - How to remove?
Canadian Association of Chiefs of Police virus is a ransomware program. It belongs to a group of Ukash payment related viruses that use a name of police to make users trust in what it says. The program is distributed to computers using Trojan viruses, through malicious websites and can basically infect any computer.
Canadian Association of Chiefs of Police virus displays a message that states you have violated a law by illegally using copyrighted content, for example, downloading pirated videos, music files and so on. The application completely blocks your system and doesn’t allow to run any program that you have, not even your Task manager. You won’t be able browse the Internet either. This is a safety measure that Canadian Association of Chiefs of Police virus takes to protect itself from being removed.
The message of this ransomware claims that you have to pay a fine of 100 Canadian dollars for violating law. Since the message is presented as sent by police, many people get scared and they agree to pay a fine just to avoid any troubles with official institutions. Beware that Canadian Association of Chiefs of Police virus has nothing to do with governmental authorities and law and you will only lose your money if you agree to pay. Have a look at how the message originally looks like:
Canadian Association of Chiefs of Police
Ministry of Public Safety Canada
Your computer has been blocked up for safety reasons listed below. You are accused of viewing/storage and/or dissemination of banned pornography (child pornography/zoophilia/rape etc). You have violated World Declaration on non-proliferation of child pornography. You are accused of committing the crime envisaged by Article 161 of Canada criminal law.
Article 161 of Canada criminal law provides for the punishment of deprivation of liberty for terms from 5 to 11 years.
Also, you are suspected of violation of “Copyright and Related rights Law” (downloading of pirated music, video, warez) and of use use and/or dissemination of copyrighted content. Thus, you are suspected of violation of Article 148 of Canada Criminal Law.
Article 148 of Canada criminal law provides for the punishment of deprivation of liberty for terms from 3 to 7 years or 150 to 550 basic amounts fine.
You should never trust this Canadian Association of Chiefs of Police virus message. Remove Canadian Association of Chiefs of Police virus as soon as you detect it on your system. If your computer has more than one user account and not all of them are locked, scan whole PC with anti-malware programs, e.g. Spyhunter, by logging to the account that is not blocked. Another option is to use system restore. If none of these methods worked for you, do the following:
- Restart your computer;
- Press F8 while it is still restarting;
- Choose between safe modes in following order: Safe mode, Safe mode with command prompt
Then follow the guides below:
If your computer runs in Safe mode or Safe mode with networking
- Launch MSConfig.
- Disable startup items rundll32 turning on any application from Application Data;. Note, that these are typical locations for Canadian Association of Chiefs of Police virus but some others might be used.
- Restart the system once again.
- Scan with http://www.2-viruses.com/downloads/spyhunter-i.exe to identify Canadian Association of Chiefs of Police virus files and delete it.
Here is a video showing how to complete the steps:
If your computer runs in Safe mode with command prompt
- Run Regedit.
- Search for WinLogon Entries. Write down all files it references that are not explorer.exe or blank. Replace them with explorer.exe
- Search registry for Canadian Association of Chiefs of Police virus files and delete the registry keys referencing the files
- Try to reboot and scan with Spyhunter.
- If this fails, try doing system restore from safe mode with command prompt (rstrui.exe)
If none of safe modes could be launched
Some versions of Canadian Association of Chiefs of Police virus disable all safe modes, but give a short gap that you can use to run anti-malware programs:
- Reboot normally.
- Enter: http://2-viruses.com/downloads/spyhunter-i.exe . If malware is loaded, just press alt+tab once and keep entering the string blindly. Press Enter.
- Press Alt+tab and then R couple times. Canadian Association of Chiefs of Police virus process should be killed.
Here is a video detailing this approach:
Hitman Pro USB disk
If you did not succeed using any of the methods above, try scanning PC with a bootable USB or DVD disk. These should be able to remove all versions of Canadian Association of Chiefs of Police virus, but will not work if your hard drive is encrypted.
For that, we recommend using Hitman Pro Kickstarter USB.
- Download Hitman Pro on uninfected PC.
- Run Hitman and ask to create Kickstarter USB (option on initial screen)
- When USB ready, reboot infected PC with USB attached and press DEL
- Choose USB as primary boot device.
- Boot normally.
- Run Hitman Pro and http://www.2-viruses.com/downloads/spyhunter-i.exe . One of these programs should detect and remove malware from your PC.