Severity scale:  

Remove An Garda Siochana virus

removal by Jake Doevan - -   Also known as Ireland’s National Police Service virus, Ukash virus | Type: Ransomware

‘An Garda Siochana' is the latest variant of Police virus that pretends to be sent by Ireland’s National Police Service. Just like Police viruses that were released earlier, this one is also dedicated to a specific region (Ireland) and works on making Irish users believe that they must pay a 'fine' for their illegitimate activity on the Internet. However, you must be sure that all these sayings that you have been illegally watching copyrighted content or spreading malware are displayed for the only reason – to scare you into paying the 'fine'. The biggest problem with ‘An Garda Siochana Ireland’s National Police Service’ ransomware is that it completely locks its victims down so that they can't do anything about it. If you have also been disabled by this virus, keep reading to find ‘An Garda Siochana' removal steps. Note that there are several versions of An Garda Siochana virus spreading on the Internet.


Just like earlier released Police viruses, ‘An Garda Siochana' is also distributed by Trojans that tend to attack poorly protected systems. They may come together with various freeware, spam emails or fake updates and scanners that are usually spread on the Internet. In addition, identically to earlier members of its family, ‘An Garda Siochana Ireland’s National Police Service’ ransomware locks the desktop down and displays a huge warning accusing user that he is involved into illegal activity, such as distribution of copyrighted content, child pornography or is simply using pirated media. Be sure that all these accusations are nothing but invented things that are expected to make you concerned about your computer. In addition, this alert offers for the user to pay a fine through Ukash payment system.


Be sure to ignore ‘An Garda Siochana Ireland’s National Police Service’ virus and don't fall for paying a 'fine' through Ukash! This own't help you to restore access to your locked computer and will lead you only to the money loss. So, if you have been receiving alerts from Ireland's national Police Service, follow these steps helping to unlock your computer and finally remove An Garda Siochana ransomware.

* Flash drive method:

1. Use another machine to download Reimage and update the program.
2. Put it into the USB drive or simple CD.
3. In the meanwhile, reboot your infected machine to Safe Mode with command prompt and stick USB drive in it.
4. Reboot computer infected with An Garda Siochana once more and run a full system scan with Reimage. You can also use SpyHunterCombo Cleaner.

* Users infected with An Garda Siochana virus are allowed to access other accounts on their Windows systems. If one of such accounts has administrator rights, you should be capable to launch anti-malware program.

* Try to deny the Flash to make your ransomware stop function as intended. In order to disable the Flash, go to Macromedia support and select 'Deny': After doing that, run a full system scan with anti-malware program.

* Manual An Garda Siochana virus removal:

  • Reboot you infected PC to 'Safe mode with command prompt' to disable Ukash virus (this should be working with all versions of this threat)
  • Run Regedit
  • Search for WinLogon Entries and write down all the files that are not explorer.exe or blank. Replace them with explorer.exe.
  • Search the registry for these files you have written down and delete the registry keys referencing the files.
  • Reboot and run a full system scan with updated Reimage, SpyHunterCombo Cleaner or Malwarebytes Malwarebytes.
do it now!
Reimage (remover) Happiness
Reimage (remover) Happiness
Compatible with Microsoft Windows Supported versions Compatible with OS X Supported versions
What to do if failed?
If you failed to remove virus damage using Reimage, submit a question to our support team and provide as much details as possible.
Reimage is recommended to remove virus damage. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.
Alternative Software
Different security software includes different virus database. If you didn’t succeed in finding malware with Reimage, try running alternative scan with SpyHunter.
Alternative Software
Different security software includes different virus database. If you didn’t succeed in finding malware with Reimage, try running alternative scan with Combo Cleaner.
An Garda Siochana virus snapshot
An Garda Siochana virus snapshot

About the author

Jake Doevan
Jake Doevan - Computer technology expert

If this free removal guide helped you and you are satisfied with our service, please consider making a donation to keep this service alive. Even a smallest amount will be appreciated.

Contact Jake Doevan
About the company Esolutions

Removal guides in other languages

  1. smurf says:
    October 20th, 2012 at 3:00 am

    I have run spydoctor in safe mode and it found a virus called Pro rat.I executed delete and then re-booted in normal mode.The pc booted up again with the same ukash virus. Now when i re-boot in safe mode again i get a message that spydoctor was disabled.Is the virus able to disable spydoctor.

  2. seire says:
    December 22nd, 2012 at 1:17 pm

    To terminate An Garda Siochana Virus do the following:

    Restart the computer and press F8 before Windows logo appears.
    From System boot menu select Safe Mode with Networking and press Enter.
    When system loads, access the Internet and download SpyHunter.
    Install SpyHunter with the system still in Safe Mode with Networking and remove An Garda Siochana Virus.

    For users with Windows XP:

    Follow the steps above from 1 to 3.
    Click on Start menu and launch RUN.
    Type “msconfig” into the RUN box and press Enter to load System Configuration menu.
    Click on Startup tab and un-check all programs that are set to load automatically. Click OK to save changes and exit the menu.
    Reboot the computer in Normal mode and install SpyHunter.
    Launch SpyHunter and remove An Garda Siochana Virus.
    the above worked perfectly for me on windows xp,,,this virus is also known as ukash ransomware..spyhunter got it no bother ,,,

  3. intelligent person says:
    January 26th, 2013 at 4:31 am

    dont do this.
    dont even try.
    the ransomware loads itself exactly the same even in Safe Mode.

  4. Technician says:
    January 26th, 2013 at 10:23 am

    This is moronic. Spyhunter does a quick scan, tells me i have the UKASH virus and then looks for money off me to remove the virus. Whats the point in using this program?

  5. it tech says:
    January 31st, 2013 at 9:24 am

    hello every1 i have remove this virus before if u cant load in2 your admin account you will have to create a new account using safe mode with command prompt
    When command prompt mode loads enter the following line: net user removevirus /add and press ENTER
    Next enter this line: net localgroup administrators removevirus /add and press ENTER.
    enter this line: shutdown -r and press ENTER.

    this will restart your computer with a new account called remove virus
    enter that account in safe mode with networking
    When system loads, access the Internet and download SpyHunter.
    yes u will have to pay for this after the scan
    and yes this will remove the virus
    any other info needed just msg back

  6. Easy says:
    February 18th, 2013 at 3:18 pm

    This is easy……. No spyware removal progs needed (windows7)
    Boot into safe mode and delete the registry key inthe start up folder

  7. Dermot says:
    May 16th, 2013 at 5:08 am

    Thanks, this worked for me. On my pc it was showing as “msconfig” . initially I renamed it, incase it was an important file that was infected. But then I deleted it. You da man!

  8. John says:
    May 11th, 2013 at 8:32 pm

    I use a user account all the time so I logged into other account and used recovery to step back a day .I had nothing new saved since that point so nothing lost.

  9. Barry says:
    May 19th, 2014 at 1:40 pm

    What about removing it from a mobile devise??

Your opinion regarding An Garda Siochana virus