Severity scale:  

An Garda Siochana virus. How to remove? (Uninstall guide)

removal by Jake Doevan - -   Also known as Ireland’s National Police Service virus, Ukash virus | Type: Ransomware

‘An Garda Siochana' is the latest variant of Police virus that pretends to be sent by Ireland’s National Police Service. Just like Police viruses that were released earlier, this one is also dedicated to a specific region (Ireland) and works on making Irish users believe that they must pay a 'fine' for their illegitimate activity on the Internet. However, you must be sure that all these sayings that you have been illegally watching copyrighted content or spreading malware are displayed for the only reason – to scare you into paying the 'fine'. The biggest problem with ‘An Garda Siochana Ireland’s National Police Service’ ransomware is that it completely locks its victims down so that they can't do anything about it. If you have also been disabled by this virus, keep reading to find ‘An Garda Siochana' removal steps. Note that there are several versions of An Garda Siochana virus spreading on the Internet.


Just like earlier released Police viruses, ‘An Garda Siochana' is also distributed by Trojans that tend to attack poorly protected systems. They may come together with various freeware, spam emails or fake updates and scanners that are usually spread on the Internet. In addition, identically to earlier members of its family, ‘An Garda Siochana Ireland’s National Police Service’ ransomware locks the desktop down and displays a huge warning accusing user that he is involved into illegal activity, such as distribution of copyrighted content, child pornography or is simply using pirated media. Be sure that all these accusations are nothing but invented things that are expected to make you concerned about your computer. In addition, this alert offers for the user to pay a fine through Ukash payment system.


Be sure to ignore ‘An Garda Siochana Ireland’s National Police Service’ virus and don't fall for paying a 'fine' through Ukash! This own't help you to restore access to your locked computer and will lead you only to the money loss. So, if you have been receiving alerts from Ireland's national Police Service, follow these steps helping to unlock your computer and finally remove An Garda Siochana ransomware.

* Flash drive method:

1. Use another machine to download Reimage and update the program.
2. Put it into the USB drive or simple CD.
3. In the meanwhile, reboot your infected machine to Safe Mode with command prompt and stick USB drive in it.
4. Reboot computer infected with An Garda Siochana once more and run a full system scan with Reimage. You can also use Plumbytes Anti-MalwareWebroot SecureAnywhere AntiVirus.

* Users infected with An Garda Siochana virus are allowed to access other accounts on their Windows systems. If one of such accounts has administrator rights, you should be capable to launch anti-malware program.

* Try to deny the Flash to make your ransomware stop function as intended. In order to disable the Flash, go to Macromedia support and select 'Deny': After doing that, run a full system scan with anti-malware program.

* Manual An Garda Siochana virus removal:

  • Reboot you infected PC to 'Safe mode with command prompt' to disable Ukash virus (this should be working with all versions of this threat)
  • Run Regedit
  • Search for WinLogon Entries and write down all the files that are not explorer.exe or blank. Replace them with explorer.exe.
  • Search the registry for these files you have written down and delete the registry keys referencing the files.
  • Reboot and run a full system scan with updated Reimage, Plumbytes Anti-MalwareWebroot SecureAnywhere AntiVirus or Malwarebytes Anti Malware.
We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use. By Downloading any provided Anti-spyware software to remove An Garda Siochana virus you agree to our privacy policy and agreement of use.
do it now!
Reimage (remover) Happiness
Reimage (remover) Happiness
Compatible with Microsoft Windows Compatible with OS X
What to do if failed?
If you failed to remove infection using Reimage, submit a question to our support team and provide as much details as possible.
Reimage is recommended to uninstall An Garda Siochana virus. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.
More information about this program can be found in Reimage review.
Press mentions on Reimage
An Garda Siochana virus snapshot
An Garda Siochana virus snapshot

About the author

Jake Doevan
Jake Doevan - Computer technology expert

If this free removal guide helped you and you are satisfied with our service, please consider making a donation to keep this service alive. Even a smallest amount will be appreciated.

Contact Jake Doevan
About the company Esolutions

Removal guides in other languages

  • Barry

    What about removing it from a mobile devise??

  • John

    I use a user account all the time so I logged into other account and used recovery to step back a day .I had nothing new saved since that point so nothing lost.

  • Easy

    This is easy……. No spyware removal progs needed (windows7)
    Boot into safe mode and delete the registry key inthe start up folder

    • Dermot

      Thanks, this worked for me. On my pc it was showing as “msconfig” . initially I renamed it, incase it was an important file that was infected. But then I deleted it. You da man!

  • it tech

    hello every1 i have remove this virus before if u cant load in2 your admin account you will have to create a new account using safe mode with command prompt
    When command prompt mode loads enter the following line: net user removevirus /add and press ENTER
    Next enter this line: net localgroup administrators removevirus /add and press ENTER.
    enter this line: shutdown -r and press ENTER.

    this will restart your computer with a new account called remove virus
    enter that account in safe mode with networking
    When system loads, access the Internet and download SpyHunter.
    yes u will have to pay for this after the scan
    and yes this will remove the virus
    any other info needed just msg back

  • Technician

    This is moronic. Spyhunter does a quick scan, tells me i have the UKASH virus and then looks for money off me to remove the virus. Whats the point in using this program?

  • intelligent person

    dont do this.
    dont even try.
    the ransomware loads itself exactly the same even in Safe Mode.

  • seire

    To terminate An Garda Siochana Virus do the following:

    Restart the computer and press F8 before Windows logo appears.
    From System boot menu select Safe Mode with Networking and press Enter.
    When system loads, access the Internet and download SpyHunter.
    Install SpyHunter with the system still in Safe Mode with Networking and remove An Garda Siochana Virus.

    For users with Windows XP:

    Follow the steps above from 1 to 3.
    Click on Start menu and launch RUN.
    Type “msconfig” into the RUN box and press Enter to load System Configuration menu.
    Click on Startup tab and un-check all programs that are set to load automatically. Click OK to save changes and exit the menu.
    Reboot the computer in Normal mode and install SpyHunter.
    Launch SpyHunter and remove An Garda Siochana Virus.
    the above worked perfectly for me on windows xp,,,this virus is also known as ukash ransomware..spyhunter got it no bother ,,,

  • smurf

    I have run spydoctor in safe mode and it found a virus called Pro rat.I executed delete and then re-booted in normal mode.The pc booted up again with the same ukash virus. Now when i re-boot in safe mode again i get a message that spydoctor was disabled.Is the virus able to disable spydoctor.