Severity scale:  
  (99/100)

All activities of this computer have been recorded. How to remove? (Uninstall guide)

removal by Lucia Danes - -   Also known as Ukash virus, Police virus | Type: Ransomware
12

'All activities of this computer have been recorded' is a fake alert that should never be trusted. No matter that it may look for you that it belongs to FBI or other governmental authority, in reality it was created by hackers who seek to steal the money from unaware PC users. For making people give their money away, this virus shows a huge warning message, which claims ‘All Activities of this Computer Have Been Recorded. All your files are encrypted. Don't try to unlock your computer.’ Besides, it reports about various law violations and claims that because of that you have to pay a fine of $100. $200 or $300 via Moneypak payment system. Remember, paying the fine won't help you to get rid of this ransomware. For that, you have to remove 'All activities of this computer have been recorded' virus from the system.

HOW CAN MY COMPUTER GET INFECTED WITH 'All activities of this computer have been recorded'?

Identically to FBI virus, 'All activities of this computer have been recorded' virus displays its fake message as soon as it infiltrates computer. For that, it uses trojan horse, which can be downloaded with fake update, fake software, infected email's attachment and similar downloads. Of course, in order to prevent infiltration of such trojan you have to make sure that you have updated anti-spyware installed on your computer. If you see a huge warning message, which claims that you were viewing copyrighted content, pornographic material and spreading malware, you must ignore it because it's nothing but a scam that seeks to swindle the money from you. In most of the cases, it looks like that:

All activities of this computer have been recorded
All your files are encrypted. Do not try to unlock your computer!
Your browser has been blocked due to at least one of the reasons specified below.

In order to remove 'All activities of this computer have been recorded', follow this guide:

HOW TO REMOVE 'All activities of this computer have been recorded'?

If you see 'All activities of this computer have been recorded' alert on your computer's desktop, you are seriously infected. For unlocking the system and eliminating this virus, follow these instructions:

  1. Reboot your infected computer.
  2. Click Start -> Run and enter http://www.2-spyware.com/download/hunter.exe (if your are blocked by ransomware, press alt+tab and continue entering this address)
  3. A warning that belongs to ransomware may show up again. In this case, press Alt+Tab and “R” as much as needed.
  4. Install anti-malware and run a full system scan to remove malicious files from the system.

Manual 'All activities of this computer have been recorded' removal:

  1. Reboot you infected PC to 'Safe mode with command prompt' to disable thisI virus (this should be working with all versions of this threat)
  2. Run Regedit
  3. Search for WinLogon Entries and write down all the files that are not explorer.exe or blank. Replace them with explorer.exe.
  4. Search the registry for these files you have written down and delete the registry keys referencing the files.
  5. Reboot and run a full system scan with updated Reimage, Plumbytes Anti-MalwareWebroot SecureAnywhere AntiVirus or Malwarebytes Anti Malware.

Flash drive method:

1. Take another machine and use it to download Reimage or other reputable anti-malware program.
2. Update the program and put into the USB drive or simple CD.
3. In the meanwhile, reboot your infected machine to Safe Mode with command prompt and stick USB drive in it.
4. Reboot computer infected with 'All activities of this computer have been recorded' virus once more and run a full system scan.

* Users infected with these ransomware threats are allowed to access other accounts on their Windows systems. If one of such accounts has administrator rights, you should be capable to launch anti-malware program.

* Try to deny the Flash to make your ransomware stop function as intended. In order to disable the Flash, go to Macromedia support and select 'Deny': http://www.macromedia.com/support/documentation/en/flashplayer/help/help09.html. After doing that, run a full system scan with anti-malware program.

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use. By Downloading any provided Anti-spyware software to remove All activities of this computer have been recorded you agree to our privacy policy and agreement of use.
do it now!
Download
Reimage (remover) Happiness
Guarantee
Download
Reimage (remover) Happiness
Guarantee
Compatible with Microsoft Windows Compatible with OS X
What to do if failed?
If you failed to remove infection using Reimage, submit a question to our support team and provide as much details as possible.
Reimage is recommended to uninstall All activities of this computer have been recorded. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

Note: Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manual removal instructions below.

More information about this program can be found in Reimage review.

More information about this program can be found in Reimage review.
Alternate Software
Plumbytes Anti-Malware
We have tested Plumbytes Anti-Malware's efficiency in removing All activities of this computer have been recorded (2013-10-30)
Malwarebytes Anti Malware
We have tested Malwarebytes Anti Malware's efficiency in removing All activities of this computer have been recorded (2013-10-30)
Hitman Pro
We have tested Hitman Pro's efficiency in removing All activities of this computer have been recorded (2013-10-30)
Webroot SecureAnywhere AntiVirus
We have tested Webroot SecureAnywhere AntiVirus's efficiency in removing All activities of this computer have been recorded (2013-10-30)
All activities of this computer have been recorded snapshot
All activities of this computer have been recorded snapshot

All activities of this computer have been recorded manual removal:

Kill processes:
[random].exe

Delete files:
[random].exe

Removal guides in other languages