Severity scale:  

Lebanon Police virus. How to remove? (Uninstall guide)

removal by Jake Doevan - -   Also known as CashU virus, Police virus, Ukash virus | Type: Ransomware

Lebanon Police virus is dangerous ransomware, which belongs to the group of CashU virus or Ukash virus. Typically to other ransomware threats, it blocks computer's system down as soon as it gets inside it, and shows a bogus notification instead of typical victim's desktop cover. All this activity makes you find yourself in a completely annoying situation because you won't be capable to get on the Internet or use your programs and files. As its name suggests, Lebanon Police virus attacks only Lebanese Republic and pretends to be from the Lebanon Police Department. It reports about various law violations and additionally asks to pay the fine of 100 euro in order to unblock the system. However, this authority has never been relying on such methods when trying to punish PC users for the distribution of pornographic material, SPAM and copyrighted content. Please, ignore this threat and remove Lebanon Police virus from the system.

HOW CAN I GET INFECTED WITH Lebanon Police virus?

Lebanon Police virus is spread via spam, fake updates and infected programs, so you should always ignore emails that were sent by unknown sources and download only official software or updates. Besides, there are lots of illegal websites that are filled with infected pop-up ads also leading to the infiltration of this virus. Please, stay away from them as well. As soon as this ransomware gets inside its target PC, it immediately locks its victim out of his/hers applications and Internet connection. Instead of that, it shows a huge warning, which requires paying the fine for illegal Internet activities, suchas the use of pornographic material or distribution of copyrighted content. Beware that many PC users have already been tricked into paying a non-existing fine of 100 EURO. However, this doesn't help to unblock the system as well. Instead of giving your money for scammers, you should ignore Lebanon Police virus and eliminate its files from the system.


When infected with Lebanon virus or any other Ukash/CashU virus, the main thing you have to do is to unblock the system. For that, we recommend trying to set the PC's date to the previous date or use one of these methods:

Flash drive method:

1. Take another machine and use it to download Reimage, Malwarebytes MalwarebytesCombo Cleaner or other reputable anti-malware program.
2. Update the program and put into the USB drive or simple CD.
3. In the meanwhile, reboot your infected machine to Safe Mode with command prompt and stick USB drive in it.
4. Reboot computer infected with Lebanon Police virus once more and run a full system scan.

* Users infected with this ransomware threats are allowed to access other accounts on their Windows systems. If one of such accounts has administrator rights, you should be capable to launch anti-malware program.

* Try to deny the Flash to make your ransomware stop function as intended. In order to disable the Flash, go to Macromedia support and select 'Deny': After doing that, run a full system scan with anti-malware program.

* Manual Lebanon Police virus removal:

  1. Reboot you infected PC to 'Safe mode with command prompt' to disable thisI virus (this should be working with all versions of this threat)
  2. Run Regedit
  3. Search for WinLogon Entries and write down all the files that are not explorer.exe or blank. Replace them with explorer.exe.
  4. Search the registry for these files you have written down and delete the registry keys referencing the files.
  5. Reboot and run a full system scan with updated Reimage to remove remaining files. We also recommend Malwarebytes MalwarebytesCombo Cleaner and Plumbytes Anti-MalwareMalwarebytes Malwarebytes.
do it now!
Reimage (remover) Happiness
Reimage (remover) Happiness
Compatible with Microsoft Windows Supported versions Compatible with OS X Supported versions
What to do if failed?
If you failed to remove virus damage using Reimage, submit a question to our support team and provide as much details as possible.
Reimage is recommended to remove virus damage. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.
Alternative Software
Different security software includes different virus database. If you didn’t succeed in finding malware with Reimage, try running alternative scan with Malwarebytes.
Alternative Software
Different security software includes different virus database. If you didn’t succeed in finding malware with Reimage, try running alternative scan with Combo Cleaner.

About the author

Jake Doevan
Jake Doevan - Computer technology expert

If this free removal guide helped you and you are satisfied with our service, please consider making a donation to keep this service alive. Even a smallest amount will be appreciated.

Contact Jake Doevan
About the company Esolutions

Removal guides in other languages