“You Have 72 Hours To Pay The Fine” Alert - How To Remove?

Type: Ransomware

“You have 72 hours to pay the fine” alert is a misleading message that appears on your computer screen very unexpectedly. Your computer is also completely locked at that time and all you see it the message. If you have already heard of the Ukash viruses, you will understand what this message is about without a big explanation. Usually it’s a part of a ransomware program that takes over your computer and blames you for unbelievable things.

There are a few ways to get infected with “You have 72 hours to pay the fine”. Mostly, its creators infect systems through email attachments. Once you click on them, you will definitely get infected. Another way for the badware to get access to the system is over infected websites. Despite how you get it on your computer the consequences are the same for all users.

“You have 72 hours to pay the fine” alert claims that you have been included into distributing pornographic content and this is violating the law. As a results, you are asked to pay a fine in 72 hours and only then your computer will be unlocked. The alert also warns if you do not act under its instructions, you maybe punished even worse that can include imprisonment.

Despite how dangerous “You have 72 hours to pay the fine” alert looks like, it is just a creation by computer hackers designed in order to get money easily. You should never takes this or similar message for granted as you will become a victim of cyber criminals. You have to remove “You have 72 hours to pay the fine” alerts from your computer immediately after its detection. Follow the steps below for the most efficient removal:

1. Restart your computer, press F8 while it is restarting
2. Choose safe mode with networking
3. Launch MSConfig
4. Disable startup items rundll32 turning on any application from Application Data;
5. Restart your computer again.
7. Scan with https://www.2-viruses.com/downloads/spyhunter-i.exe to find the file and remove it. Here is a video guide, showing how to do all the steps:

If you cannot use Safe Mode, try rebooting into safe mode with command prompt, follow these steps:

  1. Reboot into safe mode with command prompt. “You have 72 hours to pay the fine” alert should not be launched this time.
  2. Run regedit. Search for Winlogon.
  3. There will be a key labeled Shell under Winlogon. It should refer to Explorer.exe or be blank. If there is something else referring an executable in one of users folders, replace it with explorer.exe.
  4. Save changes, reboot to safe mode with networking.
  5. Run msconfig and disable all unnecessary startup entries. You should be able to reboot normally.
  6. Install and run https://www.2-viruses.com/downloads/spyhunter-i.exe. Scan with it the PC and delete executables it finds.

Here is a video guide illustrating this virus removal method:

Automatic "You have 72 hours to pay the fine" alert removal tools

Note: Reimage trial provides detection of parasites and assists in their removal for free. You can remove detected files, processes and registry entries yourself or purchase a full version.  We might be affiliated with some of these programs. Full information is available in disclosure

Manual removal


Important Note: Although it is possible to manually remove "You have 72 hours to pay fine" alert, such activity can permanently damage your system if any mistakes are made in the process, as advanced spyware parasites are able to automatically repair themselves if not completely removed. Thus, manual spyware removal is recommended for experienced users only, such as IT specialists or highly qualified system administrators. For other users, we recommend using Reimage or other tools found on 2-viruses.com.


About the author

 - Main Editor

I have started 2-viruses.com in 2007 after wanting to be more or less independent from single security program maker. Since then, we kept working on this site to make internet better and safer place to use.

January 29, 2013 17:48, June 3, 2013 13:46

Leave a Reply

Your email address will not be published. Required fields are marked *