Severity scale:  
  (99/100)

M.M.A.Δ. virus. How to remove? (Uninstall guide)

removal by Gabriel E. Hall - -   Also known as Ukash virus, Police virus | Type: Ransomware
12

M.M.A.Δ. virus (you can also find it called as Cyprus Police Emergency Response Unit) is a dangerous ransomware, which must be ignored by everyone who sees it on his/hers computer. This program can easily infiltrate computers without any permission asked and additionally initiate various system's changes. You can know that your PC is infected with M.M.A.Δ. virus if you notice that computer's system is blocked by a huge notification telling about various law violations. Such ransomware threats typically report about illegal use of copyrighted content or pornographic material and then ask to pay a fine of €100. Please, ignore this fake notification because it doesn't belong to Cyprus Police or other governmental organization! M.M.A.Δ. virus is clealy used by scammers to swindle the money, so you must remove this threat ASAP.

HOW CAN I GET INFECTED WITH M.M.A.Δ. virus?

M.M.A.Δ. virus can infiltrate your computer with the help of trojan horse. As soon as trojan gets inside, it downloads malicious files that belong to this ransomware and blocks down the system. You can prevent its infiltration and unauthorized system's changes by installing the latest version of Spyhunter or other reputable anti-spyware. If M.M.A.Δ. virus gets inside, it replaces computer's desktop with such warning:

Cyprus Police Emergency Response Unit Virus (M.M.A.Δ.)
ΠΡΟΣΟΧΗ! Ο αποκλεισμός του υπολογιστή σας έχει γίνει για λόγους ασφαλείας, που ρναφέρονται παρακάτω.
Κατηγορήστε για την πφΒολή ! αποθήκευση ή / και την διάδοση των απαγορευμένου υλικού πορνογραφίας (παιδοφιλία ! ζωοφιλία ! Βιασμό και άλλα). 'Εχετε παρσΒιάαει την Παγκόσμια Διακήρυξη για την μη διάδοση της παιδικής πορνογραφίας. Κατηγορήστε για τη διάπραξη του εγκλήματος, που προΒλέπετσι από το άρθρο 161 της ποινικής νομοθεσίας Κυπριακής Δημοκρατίας.
(…)
Το πρόστιμο πρέπει να καταΒληθεί σε διάρκεια 48 ωρών από την στιγμή της παφ8ίααης. Σε 48 ώρες, θα πραγματοποιηθεί η αυτόματη συλλογή δεδομένων σας για την ανάρμοστη συμπεριφορά, και ποινική υπόθεση Θα ανοίξει εναντίον σας. Το ποσό του πρσστίμσυ είναι €100. Με τα κουπόνια PaySafeCard ή Ukash μπορείτε να eπιλύσετε το πρόστιμο. Μόλις τα χρήματα Θα μπούνε στο λογαριασμό του Δημοσίου ταμείου, ο υπολογιστής σας Θα ξεμπλοκάρει σε διάρκεια 24 ωρών.
(…)

Remember, you should never take this notification seriously and pay the fine, which is usually asked at the end of it. In order to start using your PC as always, you must remove M.M.A.Δ. virus from the system.

HOW TO REMOVE M.M.A.Δ. Virus?

When trying to remove M.M.A.Δ. virus, you have to unlock your computer first. In order to get an ability to scan your compromised computer with a decent anti-malware, follow these options:

* Flash drive method:

1. Take another machine and use it to download Reimage or other reputable anti-malware program.
2. Update the program and put into the USB drive or simple CD.
3. In the meanwhile, reboot your infected machine to Safe Mode with command prompt and stick USB drive in it.
4. Reboot computer infected with M.M.A.Δ. virus once more and run a full system scan.

* Users infected with M.M.A.Δ. virus are allowed to access other accounts on their Windows systems. If one of such accounts has administrator rights, you should be capable to launch anti-malware program.

* Try to deny the Flash to make your ransomware stop function as intended. In order to disable the Flash, go to Macromedia support and select 'Deny': http://www.macromedia.com/support/documentation/en/flashplayer/help/help09.html. After doing that, run a full system scan with anti-malware program.

* Manual M.M.A.Δ. virus removal:

  1. Reboot you infected PC to 'Safe mode with command prompt' to disable virus (this should be working with all versions of this threat)
  2. Run Regedit
  3. Search for WinLogon Entries and write down all the files that are not explorer.exe or blank. Replace them with explorer.exe.
  4. Search the registry for these files you have written down and delete the registry keys referencing the files.
  5. Reboot and run a full system scan with updated Reimage to remove remaining virus files.
We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use. By Downloading any provided Anti-spyware software to remove M.M.A.Δ. virus you agree to our privacy policy and agreement of use.
do it now!
Download
Reimage (remover) Happiness
Guarantee
Download
Reimage (remover) Happiness
Guarantee
Compatible with Microsoft Windows Compatible with OS X
What to do if failed?
If you failed to remove infection using Reimage, submit a question to our support team and provide as much details as possible.
Reimage is recommended to uninstall M.M.A.Δ. virus. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

Note: Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manual removal instructions below.

More information about this program can be found in Reimage review.

More information about this program can be found in Reimage review.
Alternate Software
Plumbytes Anti-Malware
We have tested Plumbytes Anti-Malware's efficiency in removing M.M.A.Δ. virus (2013-08-30)
Malwarebytes Anti Malware
We have tested Malwarebytes Anti Malware's efficiency in removing M.M.A.Δ. virus (2013-08-30)
Hitman Pro
We have tested Hitman Pro's efficiency in removing M.M.A.Δ. virus (2013-08-30)
Webroot SecureAnywhere AntiVirus
We have tested Webroot SecureAnywhere AntiVirus's efficiency in removing M.M.A.Δ. virus (2013-08-30)

M.M.A.Δ. virus manual removal:

Kill processes:
[random].exe

Delete files:
[random].exe