DotFab Blog » Malware Removal»How to Remove CashU Virus?( Lock Screen Removal Guide)

How to Remove CashU Virus?( Lock Screen Removal Guide)


A page that asks you to pay Ucash code freezes your computer screen when you start it? You may be freaked out by this ransomware infection? Don’t be tricked by the bogus message it delievers and read more in this post to follow the step by step ransomware removal guide to get rid of the CashU pc lockup virus infection once and for all.


What is CashU Virus?


You may hear about the destructive impact of the notorious ransomware infections like the FBI Moneypak virus. Then, this CashU virus is also similar to that, categorized as ransomware, also referred as computer blocked virus, pc lockup virus, pc lock screen virus, etc, which targets at Arabian users. Actually the CashU virus assembles series of “computer blocked” viruses, created cyber crooks for online scams.

Once infected, your computer desktop will totally freezes by a fake message in name of local police and other aurthers related instead when you open the OS. The message claims that your computer is blocked from any operation because that your computer was used illegally and may have been involved in the distribution of illegal media files, malware and or illegal pornography such as child porn, or zoophilia. Thus you are asked to pay a fine via CashU withint a period, generally ranging from 36 hours to 72 hours, in order to enable yourself to be jail-free. To make you believe that, the bogus message also detects your IP address and even claims to have the camera records. Can you believe it? Is there any legal authority functions this way? Definitely no. Any person who have ration may check the information from the offical party first and absolutely the consequence is that this is part of the online scams and this is a computer virus.  So obviously, you can never trust such notification from a lock screen whatever it says to you and if you come across this, you can just follow the step by step removal guide offered below to get rid of the infection thoroughly upon sight. If any question, feel free to contact us.


 A screenshot of a CashU virus infection



Often the CashU virus is distributed via hacked websites or the attachment of the spam email. You’d better be careful about that and it is always wise to take precaution when you are visiting pages online or opening a link or attachment in an email sended by some unfamiliar person.


How to Remove CashU virus (Ransomware Removal Guide)


  • Method 1: Remove the CashU virus using System Restore
  • Method 2: Remove the CashU virus using Anvi Rescue Disk


Method 1: Remove CashU virus using System Restore


Restore in windows safe mode with command prompt


1. Restart your computer.


2. Repeatedly press F8 upon the opening of the boot menu to enter Windows in “Safe Mode with Command Prompt”.




3. Type “explorer” when the Command Prompt appears and press Enter.




Note: In some cases during infections of malware and viruses you only have 2-3 seconds to do this. In other cases if it doesn’t work during the given seconds, viruses such as the FBI MoneyPak ransomware virus will not allow you to type “explorer” anymore.


4. Once Windows Explorer shows up browse Win XP: C:\windows\system32\restore\rstrui.exe or Win Vista/Seven: C:\windows\system32\rstrui.exe, then press Enter.




5. When such a window appears, click next.




6. Choose a restore point from the list, then click next.




7. At last click finish to complete the restore.




Method 2: Remove CashU virus using Anvi Rescue Disk in several seconds


If your computer is totally blocked from even safe mode running, then you can remove it this way.

Below is a vedio of ransomware removal using Anvi Rescue Disk for your reference.

1> Download the Anvi Rescue Disk iso image file Rescue.iso and the USB disk production tool BootUsb.exe from Anvisoft official site.


Direct download link:


Please kindly note that Rescue.iso is a large file download; please be patient while it downloads.


2> Record Anvi Rescue Disk iso image to USB drive. You can also record the iso image to a CD/DVD. We will introduce the steps to record iso image to a CD/DVD in following guide.


Connect USB to computer. You’d better backup your important data and format your USB drive before use it to record the iso image.


Locate your download folder and double-clicking on BootUsb.exe to start it. And then click “Choose File” button to browser into your download folder and select Rescue.iso file as your source file.




Select the path of USB drive, such as Drive H:


Click “Start Burning” to start the burn of USB Rescue Disk boot drive.


Please close BootUsb.exe tool after you successfully burn the file to USB drive when you get following message.




Now, you have bootable Anvi Rescue Disk to repair your computer.


Alternative Option


You can also record Anvi Rescue Disk iso image to a DV/DVD. Any CD/DVD record software is fine for burn iso image. If you don’t have any, you can download and install Nero Burning ROM and ImgBurn. Here we will use Nero Burning ROM for demonstration purpose.


Please open and start Nero Burning ROM and select Burn Image from the drop-down menu of the Recorder.




Locate your download folder and select Rescue.iso file as your source file and then click Open button.




Click Burn button to start record the iso image. After a few minutes, you will have a bootable Anvi Rescue Disk to repair your computer.




3>Restart your computer and configure your computer to boot from USB drive/DV/DVD that recorded Anvi Rescue Disk. Basically, you can use F8 to load USB boot menu.


For different motherboard, you may need to use the Delete or F2, F11 keys, to load the BIOS menu. Normally, the information how to enter the BIOS menu is displayed on the screen at the start of the OS boot.




The keys F1, F8, F10, F12 might be used for some motherboards, as well as the following key


  • • Ctrl+Esc
  • • Ctrl+Ins
  • • Ctrl+Alt
  • • Ctrl+Alt+Esc
  • • Ctrl+Alt+Enter
  • • Ctrl+Alt+Del
  • • Ctrl+Alt+Ins
  • • Ctrl+Alt+S


If you can enter Boot Menu directly then simply select your CD/DVD-ROM as your 1st boot device.


If you can’t enter Boot Menu directly then simply use Delete key to enter BIOS menu. Select Boot from the main BIOS menu and then select Boot Device Priority. After that, set USB drive or CD/DVD-ROM as your 1st Boot Device. Save changes and exist BIOS menu.


4> After that let’s boot your computer from Anvi Rescue Disk.


Restart your computer. After restart, a message will appear on the screen: press any key to enter the menu. So, press Enter or any other key to load the Anvi Rescue Disk


please selected your preferred language and press Enter to continue.




5>Now you are in the mini Operating system, please double click Rescue tool to start Anvi Rescue Disk.




6> Make sure that your computer is connected to network connection before you run a scan on your computer. If you fail to connect your computer to Internet, please check the tutorial on network configuration in this article:Remove Ransomware using Anvi Rescue Disk-Network Troubleshooting Tips




7> Scan and detect the malware




After you install the program, please open it, switch to scan tab and run a full scan by clicking the “Scan Computer” button in the middle of the program to detect and kill CashU malware or virus.


8>Clicking “Fix Now” to Remove the detected threat by Anvi Rescue Disk.




9> Fix the registry error


Switch to Repair tab. Scan and fix the registry error with the “Repair” module of Anvi Rescue Disk.




Step10> Now your computer should be clean and rescued from the virus infection. Please restart your computer into the normal Windows mode.


For any question, please feel free to send your email to us below.


  • Anna

    same problem as ryan and alex. Everytime I start to scan my computer, it will scan for about 30 seconds then says failed to connect to cloud server, but I am connected to internet.