“How to remove AFP virus” this question has been asked thound times by Windows users worldwide. It is a kind of ransomware which is the part of ransomware family we have seen over the years. The full name of AFP Virus is: Australian Federal Police Ukash locked scam. AFP Virus pretends to be from the Australian police and states that your computer has been blocked due to it being involved with the distribution of pornographic material, SPAM and copyrighted content. Here, we invite the PC Security expert who is from YooSecurity Ltd ( guides.yoosecurity.com) to show you how to remove the AFP virus manually. Follow the instructions in this article, you can easily remove Australian Federal Police Ukash Virus and have no need to pay for PC store.

AFP Australian Federal Police
Attention!
Your PC is blocked due to at least one of the reasons specified below. You have been violating “Copyright and Related Rights Law” (Video, Music, Software) and illegally using or distributing copyrighted content, thus infringing Article 128 of the Criminal Code of Australia. Article 128 of the Criminal Code provides for a fine of 2 to 5 hundred minimal wages or a deprivation of liberty for 2 to 8 years.
You have been viewing or distributing prohibited Pornographic content (Child Porn/Zoophillia anr etc.) Thus violating article 202 of the Criminal Code of Australia.
Article 202 of the Criminal Code provides for a deprivation of liberty for 4 to 12 years. Illegal access to computer has been initiated from your PC, or you have been… Article 208 of the Criminal Code provides for a fine of up to AUD $100,000 and/or a deprivation of liberty for 4 to 9 years.
Illegal access has been initiated from your PC without your knowledge or consent, your PC may be infected by malware, thus you are violating the law On Neglectful Use of Personal Computer. Article 210 of the Criminal Code provides for a fine of AUD $2,000 to AUD $8,00.

If you send the money to them and hope they will realease your computer, you are absolutely wrong! They will never unblock your computer and keep asking you for the money. Australian Federal Police virus is generated by hackers who want to cheat your money by blocking your computer. You should know that hackers are changing their mind nowadays and being more tricky to scam PC users. When you receive the warning message from the so call Federal Police, don’t be so perturbed because if you really violate the law the police will not only send you the warning letter but will have a call with and visit you. If you are not sure with the issue, you also can call the locate police station and they will explain everyhting for you. This virus is quite similar with Royal Canadian Mounted Police Ukash virus scam which is also scam PC users’s money with the warning message.

Now, let’s see how to remove Australian Federal Police virus manually.

Step 1. Power down the Australian Federal Police (AFP) Ukash virus infected computer and wait for 30 Seconds before you turn on.

Step 2. Press and hold the F8 key as your computer restarts.Please keep in mind that you need to press the F8 key before the Windows start-up logo appears.
Note: With some computers, if you press and hold a key as the computer is booting you will get a stuck key message. If this occurs, instead of pressing and holding the “F8 key”, tap the “F8 key” continuously until you get the Advanced Boot Options screen.

Step 3. Press Ctrl+Alt+Del keys to open the Task manager to stop the progress of Australian Federal Police Malware. Because the name will be changed fast, it will be show with different name.

Step 4. Delete the AFP virus files:

%UserProfile%\Desktop\[Australian Federal Police (AFP) Ukash virus].lnk
%AppData%\Protector-[rnd].exe
%AppData%\Inspector-[rnd].exe
%appdata%\[random].exe
%temp%\[random].exe
%Documents and Settings%\[UserName]\Desktop\[random].lnk
%Program Files%\[Australian Federal Police (AFP) Ukash virus]
%CommonStartMenu%\Programs\[Australian Federal Police (AFP) Ukash virus].lnk
%Documents and Settings%\[UserName]\Application Data\[random].exe
%Documents and Settings%\All Users\Application Data\[Australian Federal Police (AFP) Ukash virus]
%Documents and Settings%\All Users\Start Menu\Programs\[Australian Federal Police (AFP) Ukash virus]

Step 5. Go to the registry editor and remove the registry entries:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\
HKEY_CURRENT_USER\Software\Australian Federal Police (AFP) Ukash virus
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run ‘Inspector’
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\[Random].exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Australian Federal Police (AFP) Ukash virus
HKEY_CURRENT_USER \Software\Microsoft\Windows\CurrentVersion\Policies\System ‘DisableTaskMgr’ = 0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\protector.exe

Okay, now please reboot your computer and you will find the AFP Virus has been removed from your computer successfully.

External resources:
http://en.wikipedia.org/wiki/Virus_hoax
http://guides.yoosecurity.com/how-remove-fbi-moneypak-virus-malware-that-blocked-pc-asks-for-payment-100-dollars/