How to remove ICSPA Virus?

What is ICSPA Virus?

ICSPA Virus is a ransomware program that attacks computer users of several countries using different versions of notifications in different languages. The letters ICSPA stand for International Cyber Security Protection Alliance and it mainly targets computers located in the UK, Ireland, Canada, the United States and Australia. The warning always contains its logo and a name of local police institution or other law authority.Some of the names that come with ICSPA virus message are FBI Cybercrime Division, Metropolitan Police, United Kingdom Police and others.

ICSPA Virus displays a message on the screen of the infected computer saying that you have been using and distributing copyrighted content and this way violated the law of your country. At last you are asked to pay a fine which varies from 100 to 300 euros or dollars most of the time and depending on which country the badware is attacking.

The purpose of ICSPA virus is to get money from computer users by accusing them for violating the law. Again depending on which country you live in, it asks to pay a fine using Ukash, Paysafecard or Moneypak payment systems. You should ignore these accusation and never pay anything what it tells you. No law authority would use such methods to announce about your faults and they would never collect fines using pre-paid cards.

You are highly recommended to remove ICSPA Virus from your computer once you notice its traces on your machine. You can be sure that it’s a badware that is only looking for way to rip off your money. We provide you with remove instructions of ICSPA virus below. Follow these steps to get rid of this ransomware for good:

1. Restart your computer, press F8 while it is restarting
2. Choose safe mode with networking
3. Launch MSConfig
4. Disable startup items rundll32 turning on any application from Application Data;
5. Restart your computer again.
7. Scan with http://www.2-viruses.com/downloads/spyhunter-i.exe to find the file and remove it. Here is a video guide, showing how to do all the steps:

If you cannot use Safe Mode, try rebooting into safe mode with command prompt. Here is how to delete ICSPA virus using this approach:

1. Reboot into safe mode with command prompt. ICSPA virus should not be launched this time.
2. Run regedit. Search for Winlogon.
3. There will be a key labeled Shell under Winlogon. It should refer to Explorer.exe or be blank. If there is something else referring an executable in one of users folders, replace it with explorer.exe.
4. Save changes, reboot to safe mode with networking.
5. Run msconfig and disable all unnecessary startup entries. You should be able to reboot normally.
6. Install and run http://www.2-viruses.com/downloads/spyhunter-i.exe. Scan with it the PC and delete ICSPA virus executables it finds.

Here is a video guide illustrating this virus removal method:

Note, that if each safe mode is blocked and you can not access other user account and run Anti-Malware program scan from there, there is a chance to clean the PC again.
We recommend either using Bootable antivirus CD/USB disk and scanning with it or calling +1-888-334-2444 (USA / CA ) for help.

ICSPA Virus is a Trojan parasite
ICSPA Virus may display fake security & messages
ICSPA Virus may display numerous annoying advertisements
ICSPA Virus may be remotely controlled by a malicious person
ICSPA Virus may spread additional spyware
ICSPA Virus may repair its files, spread or update by itself
ICSPA Virus may prove difficult or impossible to remove
ICSPA Virus violates your privacy and compromises your security

Such Trojans as ICSPA Virus generally infect your system while you are installing a game, opening a picture or playing a video file.

Some Trojans such as ICSPA Virus masquerade themselves as useful freeware programs or plug-ins, but are actually bundled Trojans.

As soon as it infects your system, Trojan ICSPA Virus gives COMPLETE control over your system to a hacker using the Trojan, who may cause serious damage to your system. A Trojan may alter your desktop or add undesirable shortcuts to various commercial and marketing sites; ICSPA Virus is no exception. It may create a backdoor to your system, allowing the hacker to control your system and steal your personal information. Unlike viruses and worms, Trojans like ICSPA Virus do not reproduce by infecting other files nor do they self-replicate and each new victim must run the infected file.