Can the RCMP Virus (Royal Canadian Mounted Police Ukash Scam) lock your computer? How would get a virus stating your looking illegal activities then telling you have to pay 0 CAD. My PC has been blocked by the RCMP Virus (Royal Canadian Mounted Police Ukash Scam). I’ve looked at your website to try to remove it, but am unsuccessful. I’m not an expert on computers. How to unlock your computer from Royal Canadian Mounted Police virus hoax? Is there a RCMP Virus remover? Can you remove that scam from my other computer?

Computer blocked by RCMP Virus (Ukash Scam) and You have to pay $100 CAD to get it unlocked. How to take it off your screen?

The RCMP virus is short for the Royal Canadian Mounted Police virus, which is a computer attack that disguises itself as a legitimate notice from the authorities (International Cyber Security Protection Alliance) and alerts the PC user that their computer has been blocked because they have detected illegal activities from the IP address, such as copyright violations stemming from the illegal download and sharing of copyright files as well as the distribution of SPAM emails and even pornographic content. Like the FBI Scam, Police Cybercrime Investigation Department virus, AFP Ukash virus and PCeU virus, this fake warning screen first pretends to be the Canadian government police and puzzles users think it is real so that they are scared to pay, it says if the computer owner don’t pay $100 CAD within 72 hours, they will be arrested. These are all serious charges and will really open the eyes of the user, making them pay close attention to the warning message details.

The Royal Canadian Mounted Police (RCMP virus) locks the users computer and all of the programs and applications from being accessed. If the user attempts to close out the warning message they will soon realize that it will minimize, and they will not be able to open a new Internet browser window. At this point, the warning message will be taken a bit more seriously and the user might also try to restart the computer, and upon the restart the message will immediately be shown and the computer will be locked again. This will even happen if the PC is restarted in safe mode.

The RCMP virus hackers demand that the user pay a $100 CAD fine in the form of a paysafecard or ukash, which the user can get at local retail stores. This is a pre-paid payment method that instantly transfers the money from the user to the hackers. They select this form of payment as a way to protect the cyber criminal’s identification, as the money cannot be recovered or tracked. While some people might not take the message seriously at first, that soon changes when the virus accesses the webcam and activates it and displays the live feed within the message window and makes a notice that the police are using the webcam in order to identify the users identity. The RCMP virus makes the threat that if the fine is not paid right away that there will be additional fines as well as possible criminal prosecution. You must take it off of your computer as soon as possible.

To save your computer, Live Chat with YooSecurity Expert Now. You can follow the manual removal guide below to get your problem fixed. (For advanced computer users only). If you are not sure what to do to rescue your laptop or desktop, you can get professional tech support with YooSecurity Experts.

Screenshot of RCMP Virus ( Canada Royal Canadian Mounted Police Your Computer Has Been Locked Virus)


RCMP Virus (Royal Canadian Mounted Police International Cyber Security Protection Alliance Ukash Scam) Computer locked Ransomware

RCMP virus

Symptoms or Harmfulness of RCMP Virus (Ukash Scam)

The virus is a complete scam and it was developed as a way to extort money from users by making false claims. The message displayed says that the computer will be unlocked as soon as the payment is verified, and the details of the message can be seen here:

Royal Canadian Mounted Police
International Cyber Security Protection Alliance
ATTENTION! Your PC is blocked due to at least one of the reasons specified below.
You have been violating ‘Copyright and Related Rights Law o (Video, Music, Software) and illegally using or distributing copyrighted content, thus infringing Article 128 of the Criminal Code of Canada.
Article 128 of the Criminal Code provides for a fine of 200 to 500 minimal wages or a deprivation of liberty for 2 to 8 years.
You have been viewing or distributing prohibited Pornographic content (Child Porno, Zoophilia and etc). Thus violating Article 202 of the Criminal Code of Canada.
Article 202 of the Criminal Code provides for a deprivation of liberty for four to 12 years. Illegal access to computer data has been initiated from your PC, or you have been…
Article 208 of the Criminal Code provides for a fine of up to CAD $100,000 and/or a deprivation of liberty for 4 to 9 years.
Illegal access has been initiated from your PC without your knowledge or consent, your PC may be infected by malware. thus you are violating the law On Neglectful Use of Personal Computer.
Article 210 of the Criminal Code provides for a fine of CAD 02,000 to CAD $8,000.
Spam distribution or other unlawful advertising has been effected from your PC as a profit-seeking activity or without your knowledge, your PC may be infected by malware. Article 212 of the Criminal Code provides for a fine of up to CAD $250,000 and a deprivation of liberty of up to 6 years. In case this activity has been effected without your knowledge, you fall under the above mentioned article 210 of the Criminal Code of Canada.
Your personality and address are currently being identified, a criminal case is going to be initiated against you under one or more articles specified above within the next 72 hours.
Pursuant to the amendment to the Criminal Code of Great Canada of February 04, 2013, this law infringement (if it is not repeated – first time) may be considered as conditional in case you pay the fine to the State.
Fines may only be paid within 72 hours after the infringement. As soon as 72 hours elapse, the possibility to pay the fine expires, and a criminal case is initiated against you automatically within the next 72 hours! The amount of fine is CAD $100. You can pay a fine Ukash or PaySafeCard.
When you pay the fine, your PC will get unlocked in 1 to 72 hours after the money is put into the State’s account.
Since your PC is unlocked, you will be given 7 days to correct all violations. In case all violations are not corrected after 7 working days, your PC will be blocked again, and a criminal case will be initiated against you automatically under one or more articles specified above.

Best Way to Remove RCMP Virus (Ukash Scam) Efficiently

Currently, no anti-virus can help you unlock your computer and get rid of RCMP Virus (Ukash Scam) ransomware, so manual removal with expertise is necessary. This is a good way to detect threats and remove all stuff and make your computer green. You can follow the step by step guide as below:

Before all you people who are going to get in safe mode with networking or safe mode with command prompt, you need to keep hitting F8 key, where is the key?


Step A: Restart computer in safe mode with networking. To do this, just need to press F8 key constantly before the system is started like this(For Windows XP, Windows Vista and Windows 7), to boot in safe mode with networking in Windows 8, click here to review more details:

safe mode with networking

Step B: Press Ctrl+Alt+Del keys to open the Task manager to stop the progress of RCMP Virus (Ukash Scam). Because the name will be changed fast, it will be show with different name.

Step C: Delete all the files related to RCMP Virus (Ukash Scam) Malware.

%CommonStartMenu%\Programs\Royal Canadian Mounted Police.lnk
%Desktop%\Royal Canadian Mounted Police.lnk

Step D: Delete registry entries of RCMP Virus ukash scam created in computer system.

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Regedit32
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bisp.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\init.exe
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegedit” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegistryTools” = 0

By the way: It is fake Canadian Police virus scam. Manually remove Royal Canadian Mounted Police Virus is a rather difficult work, if you are not a professional computer expert. We recommend you to get YooCare/ YooSecurity online service 24/7 in time. This is the real fastest and safe way to remove it.

Video Guide to Remove RCMP Virus Royal Canadian Mounted Police Ukash Scam


Now, the RCMP virus is spread in a variety of ways. The majority of users that become infected with this attack get it from visiting malicious websites that contain download files that are shared between users. These include audio files, video files, as well as programs and applications. Users on these sites click on links carelessly and a single click on a link that contains the RCMP virus can infect the PC.  Once it is installed the virus will begin to change the system settings and set it to lock the computer and display the message. Even if the payment is made the computer will remain locked. If a user is tricked into paying the ransom fee they will soon find out that they have been scammed when the computer remains locked. To unlock the computer the virus needs to be removed from the system, and we suggest this be done manually in order to get rid of all the files linked to the RCMP virus.

Special tips: Spending a lot of time fixing your computer with no success? Don’t want to get things worse, please contact PC experts now to unlock your computer and remove RCMP Virus (Ukash Scam) safely and completely.

Published by Tony Shepherd & last updated on January 13, 2014 6:57 am

Leave a Reply