Click on screenshot to zoom
Danger level 9
Type: Malware
Common infection symptoms:
  • Block exe files from running
  • Installs itself without permissions
  • Changes background
  • Connects to the internet without permission
  • Slow internet connection
  • System crashes
  • Slow Computer

Police & Gendarmerie Nationale virus

To protect yourself from such infections as Police & Gendarmerie Nationale Virus, you have to be very careful while browsing the Internet. This ransomware infection is associated with Cbeplay.P Trojan downloader that enters your system in secret, and then infect it with Police & Gendarmerie Nationale Virus, and other similar programs that pretend they deliver messages from local law enforcement authorities. Police & Gendarmerie Nationale Virus targets users in France. Supposedly the message displayed on your screen is sent by the National Gendarmerie (Gendarmerie Nationale) and the national police office (Police Nationale). The notification is screen-sized and it does not allow you to access your desktop. Therefore, this infection is also called screen-locker.

The users are not allow to access their desktops in order to scare them into believing that they have breached several important French laws, related to copyright and other cyber security. Police & Gendarmerie Nationale Virus is not the only infection that utilizes such scare tactics. For example, the ICE Cyber Crime Center Virus, European Cybercrime Centre Virus, Polizia Penitenziaria Virus and other similar infections also belong to the same group of Ukash Virus family. These ransomware infections are called "Ukash Group" because they make use of alternative payment systems to collect their ransom fees. In case of Police & Gendarmerie Nationale Virus, it uses Ukash and PaySafeCard. It demands the infected users to pay a 100 Euro fine within 24 hours, otherwise there might be legal consequences:

Activité illegal a été révélé!

Opéreations sur les activités illégales ont été détectés sur votre ordinateur.

Votre système d’exploitation a été verrouillé pour cette infraction. Vos actions sont considérées comme illégales en France et á l’Union européenne.

Pour level débloquer l’ordinateur, vous êtes oblige de payer une pénalité de 100 EUR. L’amende doit être confisqué, votre affaire devrait être renvoyée à la cour, et toutes les données de votre ordinateur seront supprimées.

Police & Gendarmerie Nationale virus threatens to send all of your data to the court, so they could initiate a legal case against you. Also, it says that if you try to unlock your computer yourself, all of your data will be formatted. Naturally, none of this is going to happen, because Police & Gendarmerie Nationale virus is by no means related to the French Police, but you have to unlock your computer yourself, if you want to access your desktop. That is so, because the infection has no intention of unblock your desktop. It only wants your money. To unlock the PC and continue with Police & Gendarmerie Nationale virus removal, follow the instructions below.

How to unlock your PC:

For Windows Vista & Windows 7

  1. Reboot the PC and press F8 repeatedly.
  2. Select Safe Mode with Networking and press Enter.
  3. Go to http://www.pcthreat.com/download-sph and download SpyHunter.
  4. Install the program and perform a full system scan.

For Windows XP

  1. Restart your PC and tap F8 key continuously.
  2. Use arrow key to navigate and select Safe Mode with Networking. Hit Enter.
  3. Click Yes when confirmation box appears.
  4. Download SpyHunter.
  5. Open Start Menu and launch Run.
  6. Type "msconfig" into Open box and press Enter.
  7. Select Startup tab on System Configuration Utility.
  8. Click Disable all and click OK to save changes.
  9. Restart your computer in Normal Mode.
  10. Install SpyHunter and continue with a full system scan.

Should you have any questions regarding Police & Gendarmerie Nationale Virus removal, do not hesitate to leave us a comment below.

Download Spyware Removal Tool to Remove* Police & Gendarmerie Nationale virus
  • Quick & tested solution for Police & Gendarmerie Nationale virus removal.
  • 100% Free Scan for Windows
disclaimer

How to manually remove Police & Gendarmerie Nationale virus

Files associated with Police & Gendarmerie Nationale virus infection:

%WINDIR%\system32
xctqakcqbeo.dll
OmaSG21e.exe
aPr0hY9.exe
msavfit.exe
Firewallservice.exe
bvhylsviw.exe
ACEIEAddOn.dll
Updating.exe
dtkmujvo.exe
%TEMP%
%WINDIR%\Temp
acuvzomo.exe
wgsdgsdgdsgsd.exe
NTServiceManager.exe
msn.exe
UpgradeHelper.exe
xmlfilter.exe
gcrwcoak.exe
puozlkmyj.dll
WinSyncMetastore.exe
m2PythonLoader.exe
ctfmon.exe
00qbipeq.exe
%LOCALAPPDATA%\Temp
%APPDATA%\updates
scvhost.exe
魔法桌面第三方主题破解补丁V1.1.exe
pYunY8m4VL3qLc.exe
rool0_pk.exe
%ALLUSERSPROFILE%
secproc_isv.exe
install_0_msi.exe
skype.dat
rvcbcyks.exe
b34btbztdb0vavaw.exe
hwj3ba6j.dss
obvwo.exe
n.
brenasa.exe
administration.exe
C87C.exe
DLL321.dll
UpdatePriv.exe
pmstcdjwz.exe
wlsidten.exe
svchost.exe
ssntvs.exe
crack.exe
00b5d693.exe
Q3d38543.exe
jsdhlexdqkllnbcxgai.bfg
Task Scheduler.exe
2084473.dll
msnmsgrr.exe
wjthvwjb.dss
SyncHostps.exe
%APPDATA%\Task Scheduler
50E1.exe
audipbrd.exe
ubvhynpxh.exe
yaiiwockc.dll
%LOCALAPPDATA%\lollipop
uenovfiu.exe
Nbt.exe
cf6640a77ed4926a4c6be661ab93def9d13408753dd07e8d02836996a2f247b6.exe
%APPDATA%\system
Other.res
sqlncli.exe
MusicCollector.exe
ex3b.dll
ieudator.dll
%CommonProgramFiles%
xlqbteeb.exe
%SystemDrive%\????????????
dqnbdq7.dss
wpbt0.dll
96dddda4.dll
WINDED6.exe
msdtmsrd.exe
taskhost.exe.exe
comeo.exe
%AppData%
JfCqQ5JC.exe
csrsss.exe
ifgxpers.exe
bzsbkotiu.exe
iner.exe
systemcpl.exe
idiokbbrv.exe
zqmkrehUkpoKfsafsaZg.exe
{097444e7-2d87-ba3c-2efe-9f54812d824a}.exe
setex.exe
%UserProfile%
p1.exe
xaZYOVJW.exe
videotwisterSA.exe
najeoxtt.exe
securitywindrv.exe
Piranha.exe
87b2cb3916261d5c807bf44262755cb0.exe
3511172082012Build.exe
bf8h8d02hf.exe
wlsidten.dll
VaultSysUi.exe
dyjdl.exe
DA0B.exe
TimeDateMUICallback.exe
%ALLUSERSPROFILE%\Application Data
oygqyunapnp.exe
msshell.exe
wahneaqa.exe
mplayer2.exe
questscan.dll

Police & Gendarmerie Nationale virus DLL's to remove:

DLL321.dll
wlsidten.dll
xctqakcqbeo.dll
wpbt0.dll
puozlkmyj.dll
yaiiwockc.dll
questscan.dll
ACEIEAddOn.dll
2084473.dll
ieudator.dll
ex3b.dll
96dddda4.dll

Police & Gendarmerie Nationale virus processes to kill:

VaultSysUi.exe
dtkmujvo.exe
svchost.exe
50E1.exe
ssntvs.exe
WinSyncMetastore.exe
SyncHostps.exe
00qbipeq.exe
TimeDateMUICallback.exe
JfCqQ5JC.exe
{097444e7-2d87-ba3c-2efe-9f54812d824a}.exe
comeo.exe
m2PythonLoader.exe
zqmkrehUkpoKfsafsaZg.exe
cf6640a77ed4926a4c6be661ab93def9d13408753dd07e8d02836996a2f247b6.exe
MusicCollector.exe
msnmsgrr.exe
videotwisterSA.exe
obvwo.exe
wgsdgsdgdsgsd.exe
xmlfilter.exe
brenasa.exe
systemcpl.exe
taskhost.exe.exe
Task Scheduler.exe
ifgxpers.exe
acuvzomo.exe
00b5d693.exe
gcrwcoak.exe
administration.exe
bvhylsviw.exe
UpgradeHelper.exe
魔法桌面第三方主题破解补丁V1.1.exe
p1.exe
ubvhynpxh.exe
oygqyunapnp.exe
crack.exe
bf8h8d02hf.exe
mplayer2.exe
Q3d38543.exe
Updating.exe
Firewallservice.exe
pYunY8m4VL3qLc.exe
rool0_pk.exe
sqlncli.exe
audipbrd.exe
msdtmsrd.exe
wahneaqa.exe
secproc_isv.exe
ctfmon.exe
87b2cb3916261d5c807bf44262755cb0.exe
DA0B.exe
install_0_msi.exe
xlqbteeb.exe
iner.exe
3511172082012Build.exe
securitywindrv.exe
Nbt.exe
msavfit.exe
NTServiceManager.exe
msn.exe
WINDED6.exe
C87C.exe
dyjdl.exe
najeoxtt.exe
pmstcdjwz.exe
b34btbztdb0vavaw.exe
rvcbcyks.exe
wlsidten.exe
uenovfiu.exe
Piranha.exe
csrsss.exe
bzsbkotiu.exe
scvhost.exe
xaZYOVJW.exe
setex.exe
UpdatePriv.exe
msshell.exe
idiokbbrv.exe
aPr0hY9.exe
OmaSG21e.exe
Disclaimer

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.