Severity scale:  

Homeland Security virus. How to remove? (Uninstall guide)

by ,
Also known as Ukash virus, Police virus | Type: Ransomware | Tags: Ukash
SpyHunter is a tool to detect malware. You need to purchase full version to remove infections.
More information about SpyHunter and steps to uninstall.

Homeland Security virus (can also be called as U.S. Department of Homeland Security virus) is dangerous ransomware, which belongs to cyber criminals. They have already became famous for their extremely dangerous Ukash parasites, such as FBI virus, FBI Cybercrime Division virus, FBI Moneypak virus and many other ones. While it may seem that they all attack USA, you should be aware that there are hundreds of similar threats that are spread in Europe and other regions. 

So, when having Homeland Security virus on your computer, you should never think that its owner is a real U.S. Department. In reality, this program is used as a tool to extort the money from unaware PC users, That's why it is designed to block the whole system down as soon as it gets inside it and additionally show a misleading alert asking o pay the fine for malicious user's activities on the Internet. U.S. Department of Homeland Security virus will report about downloading and distributing pirated content, spreading spam, visiting malicious websites and similar activities. No matter that it looks trustworthy, you should never pay this fine of 300 dollars because this won't unblock your computer. You have to remove Homeland Security virus for that.

HOW CAN I GET INFECTED Homeland Security virus? 

Just like its forerunners, Homeland Security virus is distributed by Trojan.LockScreen. This dangerous infections uses security vulnerabilities for getting inside undetected. Additionally, it blocks the whole system down and downloads those files that are needed for this ransomware. Once it is done, U.S. Department of Homeland Security virus gets ability to start its dirty campaign against the user. It replaces the desktop with a huge notification, which reports about various law violations detected. If you think that rebooting to Safe Mode/Safe Mode with Networking will help you to unblock your machine, you shouldn't because this ransomware doesn't allow these things. It only shows its fake alert on the desktop:

U.S. Department of Homeland Security
National Cyber Security Division
This computer has been blocked
Article 184. Pornography involving childrenImprisonment for the term of up to 10-15 years(The use or distribution of pornography material)
Artticle 171. CopyrightImprisonment for the term of up to 2-5 years. (The use or sharing copyrighted files)
Article 113. The use of unlicensed softwareImprisonment for the term of up to 2 years (The use of unlicensed software)
To unlock the computer you are obliged to pay a fine of $300. You must pay the fine through MoneyPAK.
You have 48 hours to pay the fine. If the fine has not been paid, you will become the subject of criminal prosecution without the right to pay the fine.
The Department for the Fight Against Cyberactivity will confiscate your computer and take You to Court.

Please, stay away from this scam because you will lose your money and won't have your computer unblocked! For that, you have to ignore a misleading alert that belongs to Homeland Security virus and remove this scam ASAP.

HOW TO REMOVE Homeland Security virus?

When infected with Ukash parasites, the main task you have to do is to unblock the system. For that, we recommend trying to set the PC's date to the previous one If this hasn't been helpful with you, use these steps:

Flash drive method:

1. Take another machine and use it to download SpyHunter, STOPzilla or other reputable anti-malware program.
2. Update the program and put into the USB drive or simple CD.
3. In the meanwhile, reboot your infected machine to Safe Mode with command prompt and stick USB drive in it.
4. Reboot computer infected with Homeland Security virus once more and run a full system scan.

* Users infected with these ransomware threats are allowed to access other accounts on their Windows systems. If one of such accounts has administrator rights, you should be capable to launch anti-malware program.

*   Try to deny the Flash to make your ransomware stop function as intended. In order to disable the Flash, go to Macromedia support and select 'Deny': After doing that, run a full system scan with anti-malware program.

* Manual  Homeland Security virus removal (special skills needed!):

  1. Reboot you infected PC to 'Safe mode with command prompt' to disable thisI virus (this should be working with all versions of this threat)
  2. Run Regedit
  3. Search for WinLogon Entries and write down all the files that are not explorer.exe or blank. Replace them with explorer.exe.
  4. Search the registry for these files you have written down and delete the registry keys referencing the files.
  5. Reboot and run a full system scan with updated SpyHunter to remove remaining files. We also recommend STOPzilla and Malwarebytes Anti Malware.

Besides, you can also follow this removal video, which explains how to remove Ukash viruses:


It might be that we are affiliated with any of our recommended products. Full disclosure can be found in our Agreement of Use.
By downloading any of provided Anti-spyware software you agree with our Privacy Policy and Agreement of Use.
remover for Homeland Security virus
Compatible with OS X
Webroot SecureAnywhere AntiVirus is recommended remover to uninstall Homeland Security virus. You should confirm using free trial that it detects current version of parasite.
Not using OS X? Download a remover for Windows.
Do it now!
remover for Homeland Security virus Happiness
Compatible with Microsoft Microsoft Windows logo
SpyHunter is recommended to uninstall Homeland Security virus. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of SpyHunter malware removal tool. More information about this program can be found in SpyHunter review. If you decided to select another anti-spyware, uninstall SpyHunter from your computer.
more than 40.000.000 downloads!
What to do if failed? If you failed to remove infection using Webroot SecureAnywhere AntiVirus SpyHunter, read here how to submit a support ticket or submit a question to our support team and provide as much details as possible.
Alternate Software
We are testing STOPzilla's efficiency (2013-09-24 05:54)
Malwarebytes Anti Malware
We are testing Malwarebytes Anti Malware's efficiency (2013-09-24 05:54)
XoftSpySE Anti Spyware
We are testing XoftSpySE Anti Spyware's efficiency (2013-09-24 05:54)
Defender Pro Ultimate
Homeland Security virus screenshot
Homeland Security virus snapshot

Homeland Security virus manual removal

Kill processes:
[random characters].exe
Delete files:

Geolocation of Homeland Security virus

Map reveals the prevalence of Homeland Security virus. Countries and regions that have been affected the most are: United States.

Removal guides in other languages

Information updated:

Comments on Homeland Security virus

el pelon
how much time does someone have til this virus hit hard where it would let the os work
Adam G
This virus popped up the first and only time when I downloaded and installed Ad Block Plus.
I got this one our lap top playing you tube Minions Clips so its not just at Porn sites
I could go around the virus screen by clicking start icon (with windows), accessing Control Panel, and programs. By doing this, I neutralized the virus from taking over my Desktop. From there I could use the system regularly and was able to restore the system to date before the virus emerged the first time. After that I run my McAfee for full scanning.
Came home from work and my son had got this homeland security virus on our computer. When I rebooted I got the start taskbar for a brief moment before the page took over my entire screen. I clicked on the task bar and then went to shut down before it appeared on my screen. It then ask me if I wanted to force shut down and I canceled and the start menu remained on my screen. At that point I was able to do a system restore and got rid of it. Then I promptly grounded my son from the computer for getting on porn sites.
I am trying to download spyhunter to a thumb drive but I do not get the option of save as so it downloads to my c drive. When I tried to copy to the thumb from the C drive, it didnt copy the exe file only the int file. Any suggestions? I can only sign onto my laptop using safe mode by command without it rebooting. Once I do that, I do not know what command to put in.

Post a comment

Attention: Use this form only if you have additional information about a parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.

Home page Name


(All fields are required)
Like us on Facebook