Click on screenshot to zoom
Danger level 9
Type: Malware
Common infection symptoms:
  • Block exe files from running
  • Installs itself without permissions
  • Changes background
  • Connects to the internet without permission
  • Slow internet connection
  • System crashes
  • Slow Computer

Police & Gendarmerie Nationale virus

To protect yourself from such infections as Police & Gendarmerie Nationale Virus, you have to be very careful while browsing the Internet. This ransomware infection is associated with Cbeplay.P Trojan downloader that enters your system in secret, and then infect it with Police & Gendarmerie Nationale Virus, and other similar programs that pretend they deliver messages from local law enforcement authorities. Police & Gendarmerie Nationale Virus targets users in France. Supposedly the message displayed on your screen is sent by the National Gendarmerie (Gendarmerie Nationale) and the national police office (Police Nationale). The notification is screen-sized and it does not allow you to access your desktop. Therefore, this infection is also called screen-locker.

The users are not allow to access their desktops in order to scare them into believing that they have breached several important French laws, related to copyright and other cyber security. Police & Gendarmerie Nationale Virus is not the only infection that utilizes such scare tactics. For example, the ICE Cyber Crime Center Virus, European Cybercrime Centre Virus, Polizia Penitenziaria Virus and other similar infections also belong to the same group of Ukash Virus family. These ransomware infections are called "Ukash Group" because they make use of alternative payment systems to collect their ransom fees. In case of Police & Gendarmerie Nationale Virus, it uses Ukash and PaySafeCard. It demands the infected users to pay a 100 Euro fine within 24 hours, otherwise there might be legal consequences:

Activité illegal a été révélé!

Opéreations sur les activités illégales ont été détectés sur votre ordinateur.

Votre système d’exploitation a été verrouillé pour cette infraction. Vos actions sont considérées comme illégales en France et á l’Union européenne.

Pour level débloquer l’ordinateur, vous êtes oblige de payer une pénalité de 100 EUR. L’amende doit être confisqué, votre affaire devrait être renvoyée à la cour, et toutes les données de votre ordinateur seront supprimées.

Police & Gendarmerie Nationale virus threatens to send all of your data to the court, so they could initiate a legal case against you. Also, it says that if you try to unlock your computer yourself, all of your data will be formatted. Naturally, none of this is going to happen, because Police & Gendarmerie Nationale virus is by no means related to the French Police, but you have to unlock your computer yourself, if you want to access your desktop. That is so, because the infection has no intention of unblock your desktop. It only wants your money. To unlock the PC and continue with Police & Gendarmerie Nationale virus removal, follow the instructions below.

How to unlock your PC:

For Windows Vista & Windows 7

  1. Reboot the PC and press F8 repeatedly.
  2. Select Safe Mode with Networking and press Enter.
  3. Go to http://www.pcthreat.com/download-sph and download SpyHunter.
  4. Install the program and perform a full system scan.

For Windows XP

  1. Restart your PC and tap F8 key continuously.
  2. Use arrow key to navigate and select Safe Mode with Networking. Hit Enter.
  3. Click Yes when confirmation box appears.
  4. Download SpyHunter.
  5. Open Start Menu and launch Run.
  6. Type "msconfig" into Open box and press Enter.
  7. Select Startup tab on System Configuration Utility.
  8. Click Disable all and click OK to save changes.
  9. Restart your computer in Normal Mode.
  10. Install SpyHunter and continue with a full system scan.

Should you have any questions regarding Police & Gendarmerie Nationale Virus removal, do not hesitate to leave us a comment below.

Download Spyware Removal Tool to Remove* Police & Gendarmerie Nationale virus
  • Quick & tested solution for Police & Gendarmerie Nationale virus removal.
  • 100% Free Scan for Windows
disclaimer

How to manually remove Police & Gendarmerie Nationale virus

Files associated with Police & Gendarmerie Nationale virus infection:

najeoxtt.exe
{097444e7-2d87-ba3c-2efe-9f54812d824a}.exe
n.
msshell.exe
3511172082012Build.exe
2084473.dll
Other.res
pmstcdjwz.exe
MusicCollector.exe
wgsdgsdgdsgsd.exe
Updating.exe
NTServiceManager.exe
WinSyncMetastore.exe
bvhylsviw.exe
wjthvwjb.dss
dyjdl.exe
SyncHostps.exe
rool0_pk.exe
ssntvs.exe
WINDED6.exe
%APPDATA%\updates
cf6640a77ed4926a4c6be661ab93def9d13408753dd07e8d02836996a2f247b6.exe
brenasa.exe
rvcbcyks.exe
%ALLUSERSPROFILE%
%TEMP%
ubvhynpxh.exe
bzsbkotiu.exe
taskhost.exe.exe
87b2cb3916261d5c807bf44262755cb0.exe
%UserProfile%
%ALLUSERSPROFILE%\Application Data
%AppData%
bf8h8d02hf.exe
crack.exe
pYunY8m4VL3qLc.exe
魔法桌面第三方主题破解补丁V1.1.exe
questscan.dll
zqmkrehUkpoKfsafsaZg.exe
OmaSG21e.exe
dqnbdq7.dss
C87C.exe
aPr0hY9.exe
DLL321.dll
%LOCALAPPDATA%\Temp
ifgxpers.exe
VaultSysUi.exe
00qbipeq.exe
ex3b.dll
wlsidten.exe
Firewallservice.exe
m2PythonLoader.exe
xlqbteeb.exe
svchost.exe
UpdatePriv.exe
msnmsgrr.exe
hwj3ba6j.dss
videotwisterSA.exe
ctfmon.exe
acuvzomo.exe
skype.dat
50E1.exe
Piranha.exe
%WINDIR%\Temp
setex.exe
96dddda4.dll
p1.exe
install_0_msi.exe
00b5d693.exe
wlsidten.dll
yaiiwockc.dll
secproc_isv.exe
%SystemDrive%\????????????
%LOCALAPPDATA%\lollipop
%WINDIR%\system32
scvhost.exe
Q3d38543.exe
comeo.exe
Nbt.exe
xmlfilter.exe
securitywindrv.exe
TimeDateMUICallback.exe
wahneaqa.exe
b34btbztdb0vavaw.exe
ieudator.dll
gcrwcoak.exe
msavfit.exe
JfCqQ5JC.exe
idiokbbrv.exe
uenovfiu.exe
dtkmujvo.exe
ACEIEAddOn.dll
iner.exe
systemcpl.exe
audipbrd.exe
xctqakcqbeo.dll
msn.exe
sqlncli.exe
%APPDATA%\Task Scheduler
xaZYOVJW.exe
administration.exe
mplayer2.exe
obvwo.exe
csrsss.exe
wpbt0.dll
jsdhlexdqkllnbcxgai.bfg
%CommonProgramFiles%
DA0B.exe
Task Scheduler.exe
msdtmsrd.exe
UpgradeHelper.exe
oygqyunapnp.exe
%APPDATA%\system
puozlkmyj.dll

Police & Gendarmerie Nationale virus DLL's to remove:

2084473.dll
puozlkmyj.dll
wpbt0.dll
ieudator.dll
DLL321.dll
yaiiwockc.dll
wlsidten.dll
ACEIEAddOn.dll
ex3b.dll
96dddda4.dll
questscan.dll
xctqakcqbeo.dll

Police & Gendarmerie Nationale virus processes to kill:

WinSyncMetastore.exe
install_0_msi.exe
msavfit.exe
xlqbteeb.exe
xaZYOVJW.exe
pmstcdjwz.exe
administration.exe
b34btbztdb0vavaw.exe
xmlfilter.exe
cf6640a77ed4926a4c6be661ab93def9d13408753dd07e8d02836996a2f247b6.exe
87b2cb3916261d5c807bf44262755cb0.exe
NTServiceManager.exe
Nbt.exe
Task Scheduler.exe
mplayer2.exe
bvhylsviw.exe
scvhost.exe
audipbrd.exe
pYunY8m4VL3qLc.exe
Q3d38543.exe
setex.exe
secproc_isv.exe
oygqyunapnp.exe
ifgxpers.exe
msdtmsrd.exe
obvwo.exe
rvcbcyks.exe
zqmkrehUkpoKfsafsaZg.exe
JfCqQ5JC.exe
VaultSysUi.exe
crack.exe
dtkmujvo.exe
videotwisterSA.exe
Updating.exe
svchost.exe
aPr0hY9.exe
C87C.exe
wlsidten.exe
WINDED6.exe
sqlncli.exe
bzsbkotiu.exe
50E1.exe
acuvzomo.exe
3511172082012Build.exe
ubvhynpxh.exe
SyncHostps.exe
MusicCollector.exe
魔法桌面第三方主题破解补丁V1.1.exe
ctfmon.exe
Piranha.exe
comeo.exe
OmaSG21e.exe
najeoxtt.exe
TimeDateMUICallback.exe
systemcpl.exe
rool0_pk.exe
p1.exe
msnmsgrr.exe
UpgradeHelper.exe
msn.exe
msshell.exe
securitywindrv.exe
Firewallservice.exe
csrsss.exe
idiokbbrv.exe
UpdatePriv.exe
wahneaqa.exe
iner.exe
taskhost.exe.exe
m2PythonLoader.exe
00b5d693.exe
uenovfiu.exe
gcrwcoak.exe
{097444e7-2d87-ba3c-2efe-9f54812d824a}.exe
wgsdgsdgdsgsd.exe
ssntvs.exe
DA0B.exe
dyjdl.exe
bf8h8d02hf.exe
brenasa.exe
00qbipeq.exe
Disclaimer

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.