Remove Royal Canadian Mounted Police Virus (RCMP)

What is a Royal Canadian Mounted Police trojan/virus?

The Royal Canadian Mounted Police Virus is a 'ransomware' or 'scareware' that targets Canadian PCs and displays an alert claiming that your system has been locked as a consequence of "child pornography" or "illegal music downloading". Royal Canadian Mounted Police Virus's pop-up or wallpaper insists that you pay fine of $100 via a Ukash payment service provider so their computers can be unfrozen or unlocked. The scam is a variation of an online extortion that involves ransom ware. Even if the fee is paid by a credit card, the scammers rarely unlock the computer. The Toronto RCMP has been receiving a lot of reports about this cyber crime. These types of messages, known as Ransomware or Scareware, are intended to cause shock and anxiety making victims respond by sending money quickly.

Where did this come from?

This virus is targeting Canadian users, mostly infected via websites. It threatens users for violating law and one of the government organizations or RCMP Police has lock your PC. The message is completely fake. None of Government of any country that we know lock PC for violating copyright law. So do not panic.

Once infected, in some cases, the virus will exploit the Java or Flash vulnerabilities to load the malicious code. Your web cam will be taken control to threaten you by showing your face or capture a photo.

Possible Solution (RCMP Virus Removal)

Power down the Royal Canadian Mounted Police Virus infected computer and wait for 30 Seconds before you turn on.

Now please turn ON the computer and immediately keep hitting F8 until you see WINDOWS ADVANCED OPTIONS MENU.

Select SAFE MODE

When you see the desktop, press WINDOWS KEY + R.

Enter rstrui.exe in the text box.

Use the System Restore to restore back to the earlier restore point BEFORE the infection. Restart the computer. Once the computer restarted, your computer should be cleaned without the RCMP pop-up.

Note: This trojan has various type. If you experienced the same problem in Safe Mode, your computer's boot sector may be infected and required further assistance.

Please contact us for additional solutions.