Australian Communications and Media Authority virus (removal help)

If you think your computer got locked by Australian Communications and Media Authority (ACMA) it’s not time to panic yet. The good news is that this warning is not associated at all with AFP Crime Commission (ACC), Royal Australian Corps of Military Police or Interpol. None of this law enforcement agencies has anything to do with this scary alert that suddenly appeared on your PC and occupied the entire screen area. What you see instead is a virus infection categorized as ransomware, i.e. the locker that disables the screen of the attacked system and asks for a ransom to be paid by user to unlock it. If this computer virus penetrated into your workstation please continue reading the rest of the article to find out how to remove this scam and unlock your screen.

Australian Communications and Media Authority scam
Australian Communications and Media Authority ransomware

The Australian Communications and Media Authority (ACMA) ransomware is a part of a large family of screen lockers known as Urausy. This is a brand new design of Urausy malware which has begun attacking PCs since the beginning of July 2013. The same virus file produces plenty of variations of ransomware depending on the country where the targeted PC is located.

With the July 2013 Urausy sample attacking Australia, the fake alert supposedly coming from Australian Communications and Media Authority has in mind to prompt users into paying the fake fine that amounts to AUD $100. No doubt, this is not a fine at all but rather a ransom which in case of successful payment goes directly into the pockets of cyber frauds, the authors of ACMA scam.

How are users prompted to pay this fake fine (ransom)? The locker begins quoting various articles of the Australian legislation and begins accusing users of violating them. Here is the extract from the text of scary yet fake ACMA warning:

Australian Communications and Media Authority (ACMA)
AFP. Crime Commission (ACC)
Royal Australian Corps of Military Police
Interpol
Attention!
Your computer has been blocked for safety reasons listed below.
You are accused of viewing/storage and/or dissemination of banned pornography (child pornography/zoophilia/rape etc). You have violated World Declaration on non-proliferation of child pornography. You are accused of committing the crime envisaged by Article 161 of Commonwealth of Australia criminal law.
Article 161 of Commonwealth of Australia criminal law provides for the punishment of deprivation of liberty for terms from 5 to 11 years.
Also, you are suspected of violation of “Copyright and Related rights Law” (downloading of pirated music, video, warez) and of use use and/or dissemination of copyrighted content. Thus, you are suspected of violation of Article 148 of Commonwealth of Australia Criminal Law.
Article 148 of Commonwealth of Australia criminal law provides for the punishment of deprivation of liberty for terms from 3 to 7 years or 150 to 550 basic amounts fine.
It was from your computer, that unauthorized access had been stolen to information of State importance and to data closed for public Internet access.
The penalty set must be paid in course of 48 hours as of the breach. On expiration of the term, 48 hours that follow will be used for automatic collection of data on yourself and your misconduct, and criminal case will be opened against you.
Amount of fine is AUD $100. You can pay a fine Ukash vouchers.
As soon as the money arrives to the Treasury account, your computer will be unblocked in course of 24 hours.
Then in 7 day term you should remedy the breaches associated with your computer. Otherwise your computer will be blocked up again and criminal case will be opened against yourself (with no option to pay fine).

Australian users are instructed by the crooks to pay the ransom in the amount of AUD $100 within 48 hours.Otherwise the scary alert says that criminal proceedings will be initiated against user who is the owner of the locked computer. The crooks promise to unlock the PC within 24 hours in case users pay this ransom, however, there’s no any guarantee on the part of hacker that they will keep their promises.

Paying AUD $100 as a ransom through Ukash payment system (voucher) is surely a serious mistake. Regretfully, some have users have been tremendously scared by this fake ACMA warning and paid this ransom. As a result, they simply wasted their funds which will never be refunded by online frauds. And, by the way, why should anyone be scared with this fake Australian Communications and Media Authority alert if he/she has never committed any of such crimes? Why should you worry about these faulty ACMA accusations if you have never done anything illegal? Even if you have done some of such horrible sins through your computer, remember that there’s something more scary then Australian Communications and Media Authority, AFP Crime Commission (ACC), Royal Australian Corps of Military Police or Interpol. What is this, you wonder? Truly, it is far more frustrating to stand before the judgement throne of God with heart that has not repented of sins. Indeed, sins like pornography (child pornography/zoophilia/rape etc.) damage your heart and destroy your soul, and God can see those things people do in secret (unlike ACMA). So, be not scared with this fake Australian Communications and Media Authority warning (virus). Instead, fear God and follow His commands! Repent in your sins and live a holy and righteous life that glorifies His name.

If your system got locked with Australian Communications and Media Authority ransomware virus infection please follow the guidelines below to unlock your computer. If this information has been of help please share it among your relatives and friends who might have the same kind of computer infection.

Recommended ransomware removal solution:

  1. Restart your computer into Safe Mode with Networking. To do it, keep hitting F8 key repeatedly, before Windows OS starts booting.
  2. Select your operating system and the account that got locked with ransomware.
  3. When Windows launches in Safe Mode with Networking, use “Win + R” hotkey combination to open Windows Explorer.
  4. In the address line insert the text “https://www.system-tips.net/download.php
  5. Click “OK”.
  6. Download, install, update and run Plumbytes Anti-Malware.
  7. Malware removal tool
  8. Scan your computer with Anti-Malware and remove all detected threats.
  9. Restart your computer.
  10. Share this information with your friends on Facebook and other social networks.

Similar removal video at YouTube:

So, we do recommend you to try the above method initially. Then, if it does not work, try these other guides below. It is probable that these other methods will be effective solutions to fix your problem. If this information has been helpful to you please share it with other friends of yours.

Alternative removal guides to remove ransomware from your computer:

  1. Ransomware removal in Safe Mode with Networking – https://www.system-tips.net/ransomware-removal-in-safe-mode-with-networking/
  2. Removal of ransomware that modifies “Shell” registry entry – https://www.system-tips.net/remove-ransomware-that-modifies-shell-registry-entry/
  3. Removal of ransomware that replaces explorer.exe file – https://www.system-tips.net/ransomware-that-replaces-explorer-exe-file-guide-to-unlock/

Optional ransomware removal through System Restore:

https://www.system-tips.net/how-to-unlock-computer-though-system-restore-restore-point/

Optional similar virus removal video guide (through System Restore method):

Important! If the above-mentioned guidelines didn’t help you unlock your PC, use this guide as a final solution – http://www.bleepingcomputer.com/virus-removal/remove-your-computer-has-been-locked-ransomware