Danger level 9
Type: Malware
Common infection symptoms:
  • Block exe files from running
  • Installs itself without permissions
  • Connects to the internet without permission
  • System crashes
  • Annoying Pop-up's
  • Slow Computer

L’accès à votre ordinateur a été fermé Virus

L’accès à votre ordinateur a été fermé Virus is a ransomware program that can infect operating Windows systems located in France. The program has been researched to lock down a computer, remove all administrative privileges and ask money under the false pretense of a fictitious GEMA investigation. The infection is presented via a notification that appears on the screen when the computer is locked. The bogus alert will be used to convince you that you have been noticed to break cyber security laws which have led up to your system’s lock-down and fine payment demands. Even though your PC’s paralysis is highly irritating, you should not think that this is the most that cyber criminals could do. In fact, if you do not remove L’accès à votre ordinateur a été fermé Virus from the operating system now, soon enough schemers could open backdoors for much more dangerous malware that are capable of digital theft.

The information that is attached to the bogus screen-locking warning looks like this:

Sur votre ordinateur il y avait des chansons qui ont ete telechargees illegalement (“piratage”).
Lorsque vous avez fait un téléchargement des chansons qui ont été polycopies, cela est egalement une infraction penale conformément au §106 de la loi Droit d’auteur.
L’accès à votre ordinateur a été fermé! […]
Pour débloquer et pour d’autres actes, qui ont été le résultat d’une violation de la loi, vous devez à payer une amende – 100 €.

Windows users living outside of France could recognize the misleading accusations, because they have been repeated in a number of different Ukash viruses. Such malicious ransomware infections as Attention! L'ordinateur a été verrouillé!, Votre Ordinateur Est Bloqué Virus, Gendarmerie Nationale Virus and Office Central de Lutte contre la Criminalité virus are French variations of the Ukash (or Paysafecard) virus. This notable umbrella name has been attached to the faction because cyber criminals have used Ukash and Paysafecard money transfer systems in all of their scams. To say the least, this is not a factor determining the legitimacy of the accusations or supposed GEMA investigation. As a matter of fact, the national authorities have nothing to do with the illicit processes executed within your computer, and getting L’accès à votre ordinateur a été fermé Virus removed is extremely important.

All operating Windows systems need to be protected by reliable, effective, automatic threat removal and system protection tools, like SpyHunter. Follow the instructions that will help you delete L’accès à votre ordinateur a été fermé Virus, scan the computer for potentially running Trojans and protect Windows against further attacks.

Windows Vista and Windows 7:

1. Restart the computer using the power button.
2. Immediately after the information about Windows (BIOS screen) disappears, keep tapping the F8 button found on your keyboard.
3. Once Advanced Boot Options menu appears, select Safe Mode with Networking using the arrow keys on the keyboard. Hit Enter.
4. When the system loads up, launch a browser, go to http://www.pcthreat.com/download-sph and download SpyHunter.
5. Install the application to have malware removed.

Windows XP:

1. Restart the computer. Use the power button if you cannot execute the task from the desktop.
2. After the BIOS screen disappears, continuously hit F8 on your keyboard. This will help you access Windows Advanced Options Menu.
3. Using arrow keys on the keyboard select Safe Mode with Networking.
4. Hit Enter on the keyboard to boot the system.
5. Click on the Start menu.
6. Launch RUN.
7. Type in “msconfig” and click OK. This will launch System Configuration Utility.
8. Click on the Startup tab and then the Disable All button. Apply the changes and exit the program.
9. Download SpyHunter using the link provided in previous instructions.
10. Restart the computer normally.
11. Install SpyHunter and have the virus deleted immediately.

Download Spyware Removal Tool to Remove* L’accès à votre ordinateur a été fermé Virus
  • Quick & tested solution for L’accès à votre ordinateur a été fermé Virus removal.
  • 100% Free Scan for Windows
disclaimer

How to manually remove L’accès à votre ordinateur a été fermé Virus

Files associated with L’accès à votre ordinateur a été fermé Virus infection:

TimeDateMUICallback.exe
skype.dat
OmaSG21e.exe
scvhost.exe
WINDED6.exe
%AppData%
%APPDATA%\Task Scheduler
rool0_pk.exe
wjthvwjb.dss
%ALLUSERSPROFILE%
uenovfiu.exe
C87C.exe
taskhost.exe.exe
ssntvs.exe
dtkmujvo.exe
securitywindrv.exe
obvwo.exe
DLL321.dll
gcrwcoak.exe
00qbipeq.exe
JfCqQ5JC.exe
jsdhlexdqkllnbcxgai.bfg
2084473.dll
comeo.exe
Piranha.exe
wlsidten.dll
bf8h8d02hf.exe
pYunY8m4VL3qLc.exe
msshell.exe
%WINDIR%\system32
brenasa.exe
m2PythonLoader.exe
najeoxtt.exe
%UserProfile%
魔法桌面第三方主题破解补丁V1.1.exe
wlsidten.exe
videotwisterSA.exe
ctfmon.exe
DA0B.exe
secproc_isv.exe
yaiiwockc.dll
%TEMP%
%LOCALAPPDATA%\Temp
hwj3ba6j.dss
xlqbteeb.exe
questscan.dll
96dddda4.dll
3511172082012Build.exe
NTServiceManager.exe
ubvhynpxh.exe
Firewallservice.exe
msnmsgrr.exe
Other.res
UpgradeHelper.exe
WinSyncMetastore.exe
bvhylsviw.exe
iner.exe
wahneaqa.exe
b34btbztdb0vavaw.exe
idiokbbrv.exe
%LOCALAPPDATA%\lollipop
puozlkmyj.dll
ex3b.dll
svchost.exe
{097444e7-2d87-ba3c-2efe-9f54812d824a}.exe
install_0_msi.exe
pmstcdjwz.exe
rvcbcyks.exe
ieudator.dll
ACEIEAddOn.dll
87b2cb3916261d5c807bf44262755cb0.exe
%APPDATA%\system
SyncHostps.exe
acuvzomo.exe
sqlncli.exe
00b5d693.exe
xaZYOVJW.exe
p1.exe
Q3d38543.exe
n.
UpdatePriv.exe
Nbt.exe
msavfit.exe
cf6640a77ed4926a4c6be661ab93def9d13408753dd07e8d02836996a2f247b6.exe
Updating.exe
audipbrd.exe
xctqakcqbeo.dll
%CommonProgramFiles%
dyjdl.exe
%WINDIR%\Temp
csrsss.exe
VaultSysUi.exe
xmlfilter.exe
wpbt0.dll
systemcpl.exe
dqnbdq7.dss
%SystemDrive%\????????????
zqmkrehUkpoKfsafsaZg.exe
msdtmsrd.exe
wgsdgsdgdsgsd.exe
crack.exe
administration.exe
MusicCollector.exe
ifgxpers.exe
aPr0hY9.exe
msn.exe
mplayer2.exe
%APPDATA%\updates
50E1.exe
%ALLUSERSPROFILE%\Application Data
Task Scheduler.exe
bzsbkotiu.exe
oygqyunapnp.exe
setex.exe

L’accès à votre ordinateur a été fermé Virus DLL's to remove:

ACEIEAddOn.dll
96dddda4.dll
wlsidten.dll
ieudator.dll
DLL321.dll
questscan.dll
yaiiwockc.dll
ex3b.dll
xctqakcqbeo.dll
wpbt0.dll
puozlkmyj.dll
2084473.dll

L’accès à votre ordinateur a été fermé Virus processes to kill:

msavfit.exe
wlsidten.exe
3511172082012Build.exe
obvwo.exe
xmlfilter.exe
videotwisterSA.exe
b34btbztdb0vavaw.exe
xaZYOVJW.exe
wgsdgsdgdsgsd.exe
najeoxtt.exe
Updating.exe
UpgradeHelper.exe
taskhost.exe.exe
p1.exe
msshell.exe
zqmkrehUkpoKfsafsaZg.exe
gcrwcoak.exe
87b2cb3916261d5c807bf44262755cb0.exe
dtkmujvo.exe
audipbrd.exe
brenasa.exe
csrsss.exe
ctfmon.exe
systemcpl.exe
wahneaqa.exe
aPr0hY9.exe
ubvhynpxh.exe
idiokbbrv.exe
Firewallservice.exe
install_0_msi.exe
pmstcdjwz.exe
00qbipeq.exe
UpdatePriv.exe
DA0B.exe
Q3d38543.exe
魔法桌面第三方主题破解补丁V1.1.exe
WinSyncMetastore.exe
cf6640a77ed4926a4c6be661ab93def9d13408753dd07e8d02836996a2f247b6.exe
pYunY8m4VL3qLc.exe
uenovfiu.exe
m2PythonLoader.exe
VaultSysUi.exe
rvcbcyks.exe
OmaSG21e.exe
bzsbkotiu.exe
msn.exe
scvhost.exe
msnmsgrr.exe
comeo.exe
administration.exe
acuvzomo.exe
xlqbteeb.exe
Nbt.exe
ssntvs.exe
{097444e7-2d87-ba3c-2efe-9f54812d824a}.exe
50E1.exe
WINDED6.exe
securitywindrv.exe
mplayer2.exe
dyjdl.exe
iner.exe
Task Scheduler.exe
crack.exe
oygqyunapnp.exe
svchost.exe
Piranha.exe
secproc_isv.exe
SyncHostps.exe
bf8h8d02hf.exe
00b5d693.exe
setex.exe
msdtmsrd.exe
C87C.exe
sqlncli.exe
rool0_pk.exe
JfCqQ5JC.exe
TimeDateMUICallback.exe
bvhylsviw.exe
MusicCollector.exe
ifgxpers.exe
NTServiceManager.exe
Disclaimer

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.