DotFab Blog » Malware Removal»Remove Royal Canadian Mounted Police Virus on Mac Browser (Ransomware Removal Guide)

Remove Royal Canadian Mounted Police Virus on Mac Browser (Ransomware Removal Guide)

 

Royal Canadian Mounted Police virus comes up to block Mac browser in the wake of FBI your browser has been locked virus and Europol your browser has been locked virus on Mac. Read more here to find a way out for this Royal Canadian Mounted Police virus removal on Mac.

 

If you see a warning on Safari saying that “All activities of this computer have been recorded. All your files are encrypted. Don’t try to unlock your computer!” under the name of Canadian Mounted Police, then you are facing the Royal Canadian Mounted Police virus, categorized as ransomware, or computer blocked virus.

However, unlike the previous version of Royal Canadian Mounted Police virus targeting on Windows system, this Royal Canadian Mounted Police virus on Mac actually just locks the web browser like Safari and the solution is much simpler. If you are trapped in such a scam under the name of Royal Canadian Mounted Police virus now, follow below removal guide to get your computer clean.

 

Symptoms

 

Once infected, your default web browser on Mac would show a pop up locker saying that “All activities of this computer have been recorded. All your files are encrypted. Don’t try to unlock your computer!” in the name of Royal Canadian Mounted Police, the screenshot of the browser locker is:

Royal-Canadian-Mounted-Police-Mac-OS-X-virus

 

and the full text of the scam warning shows as:

Royal Canadian Mounted Police
All activities of this computer have been recorded.All your files are encrypted. Don’t try to unlock your computer!
Your browser has been blocked due at least one of the reasons specified below.

You have been subjected to violation of Copyright and Related Rights Law (Video, Music, Software) and illegally using or distributing copyrighted contents, thus infringing Article 1, Section 8, Clause 8, also known as the Copyright of the Criminal Code of Canda. Article 1, Section 8, Cause 8of the Criminal Code provides for a fine of two to five hundred minimal wages or a deprivation of liberty for two to eight years.
You have been viewing or distributing prohibited Pornographic content (Child Porno photos and etc were found on your computer). Thus violating article 202 of the Criminal Code of Canda, Article 202 of the Criminal Code provides for a deprivation of liberty for four to twelve years.
Illegal access has been initiated from your PC with ought your knowledge or consent, your PC may be infected by malware, thus you are violating the law on Neglectful Use of Personal Computer. Articles 210 of the Criminal Code provides for a fine up to 100,000 CAD and/or deprivation of liberty for four to nine years. Pursuant to the amendment of Criminal Code of Canda of May 28, 2011, this law infringement (if it is not repeated – first time) may be considered as conditional in case you pay the fine of the States.
To unlock your computer and to avoid other legal consequences, you are obligated to pay a release fee of $300. Payable through GUkash (you have to purchase Ukash or Paysafecard card. load it with $300 and enter the code). You can buy the code at any shop or gas station. Ukash is available at the stores nationwide.
When you pay the fine, your browser will be unblocked in 3 to 12 hours after the money is put into the States’s account. Please note: Fine may only be paid within 12 hours. As soon as 12 hours elapse, the possibility to pay the fine expires. All PC data will be detained and criminal procedures will be initiated against you if the fine is not paid.

Under no circumstances should you take this fake warning serious and fulfill the payment. What you should do is just to ignore the locker and follow below removal guide to get rid of it thoroughly.

 

Distribution & Precaution

 

Like many other ransomware infections, this virus can be distributed through malicious websites, pirated software bundling, spam email and infected shared files and so on.

So to prevent such kind of infection, you’d better take below measures:

1. keep system and installed software timely updated

2. Use caution when clicking links to webpages

3. use caution with attachments and file transfers

4. Avoiding downloading pirated software

5. Use strong passwords

6. Protect yourself from social engineering attacks

 

Good to Know

However, if you encounter such Your Browser has been locked warning on Windows system, then the situation may be different a lot and you may need to try below provided ransomware removal guide for windows OS.

The screenshot of Royal Canadian Mounted Police lock screen(removal guide) on Windows. Be attentive.

Royal-Canadian-Mounted-Police-virus

 

Moreover, such virus has spread across worldwide and currently with different versions in different target countries all around the world. The list of imitated institutions is also quite long. It’s includes: the German Federal Police GEMA (Germany’s performance rights organization), the Swiss “Federal Department of Justice and Police” The Spanish Police the Dutch Police, Metropolitan Police Virus (Mainly targets English Users), AFP Crime Commission virus mainly targets users from Australia, etc.

 

How to Remove Royal Canadian Mounted Police Virus on Mac’s Safari (Ransomware Removal Guide) 

 

It is much easier to do with the Royal Canadian Mounted Police virus on Mac, which is just based on Javascript and CSS. You can manually remove it for free by following below instructions.

You can either quit your safari program or just reset it to default in order to get rid of this seemingly scaring but nothing Royal Canadian Mounted Police virus on Safari. Below we recommend you reset your safari to default settings in order to heal the browser settings and get rid of the infection.

Step 1. On the safari, click on Settings icon and then select reset safari…

reset safari

 

Step 2. Then, there will open a window shown as below image, click Reset button to reset Safari to default settings.

reset Safari 2

Step 3. Restart Safari to check and that’s it.

 

 

  • mcteague

    now the virus has a pop-up that prevents you from doing anything except paying. if you attempt to access the safari drop down menu, a full screen pop-up appears that prevents you from actually enacting the reset. same for system preferences access. this seems new. any thoughts?

    • AJW12345

      I got a similar notice yesterday. Just go to the apple icon in the top left corner and force quit safari. Seemed to work fine!