Click on screenshot to zoom
Danger level 9
Type: Malware
Common infection symptoms:
  • Block exe files from running
  • Installs itself without permissions
  • Changes background
  • Connects to the internet without permission
  • Slow internet connection
  • System crashes
  • Slow Computer

Police & Gendarmerie Nationale virus

To protect yourself from such infections as Police & Gendarmerie Nationale Virus, you have to be very careful while browsing the Internet. This ransomware infection is associated with Cbeplay.P Trojan downloader that enters your system in secret, and then infect it with Police & Gendarmerie Nationale Virus, and other similar programs that pretend they deliver messages from local law enforcement authorities. Police & Gendarmerie Nationale Virus targets users in France. Supposedly the message displayed on your screen is sent by the National Gendarmerie (Gendarmerie Nationale) and the national police office (Police Nationale). The notification is screen-sized and it does not allow you to access your desktop. Therefore, this infection is also called screen-locker.

The users are not allow to access their desktops in order to scare them into believing that they have breached several important French laws, related to copyright and other cyber security. Police & Gendarmerie Nationale Virus is not the only infection that utilizes such scare tactics. For example, the ICE Cyber Crime Center Virus, European Cybercrime Centre Virus, Polizia Penitenziaria Virus and other similar infections also belong to the same group of Ukash Virus family. These ransomware infections are called "Ukash Group" because they make use of alternative payment systems to collect their ransom fees. In case of Police & Gendarmerie Nationale Virus, it uses Ukash and PaySafeCard. It demands the infected users to pay a 100 Euro fine within 24 hours, otherwise there might be legal consequences:

Activité illegal a été révélé!

Opéreations sur les activités illégales ont été détectés sur votre ordinateur.

Votre système d’exploitation a été verrouillé pour cette infraction. Vos actions sont considérées comme illégales en France et á l’Union européenne.

Pour level débloquer l’ordinateur, vous êtes oblige de payer une pénalité de 100 EUR. L’amende doit être confisqué, votre affaire devrait être renvoyée à la cour, et toutes les données de votre ordinateur seront supprimées.

Police & Gendarmerie Nationale virus threatens to send all of your data to the court, so they could initiate a legal case against you. Also, it says that if you try to unlock your computer yourself, all of your data will be formatted. Naturally, none of this is going to happen, because Police & Gendarmerie Nationale virus is by no means related to the French Police, but you have to unlock your computer yourself, if you want to access your desktop. That is so, because the infection has no intention of unblock your desktop. It only wants your money. To unlock the PC and continue with Police & Gendarmerie Nationale virus removal, follow the instructions below.

How to unlock your PC:

For Windows Vista & Windows 7

  1. Reboot the PC and press F8 repeatedly.
  2. Select Safe Mode with Networking and press Enter.
  3. Go to http://www.pcthreat.com/download-sph and download SpyHunter.
  4. Install the program and perform a full system scan.

For Windows XP

  1. Restart your PC and tap F8 key continuously.
  2. Use arrow key to navigate and select Safe Mode with Networking. Hit Enter.
  3. Click Yes when confirmation box appears.
  4. Download SpyHunter.
  5. Open Start Menu and launch Run.
  6. Type "msconfig" into Open box and press Enter.
  7. Select Startup tab on System Configuration Utility.
  8. Click Disable all and click OK to save changes.
  9. Restart your computer in Normal Mode.
  10. Install SpyHunter and continue with a full system scan.

Should you have any questions regarding Police & Gendarmerie Nationale Virus removal, do not hesitate to leave us a comment below.

Download Spyware Removal Tool to Remove* Police & Gendarmerie Nationale virus
  • Quick & tested solution for Police & Gendarmerie Nationale virus removal.
  • 100% Free Scan for Windows
disclaimer

How to manually remove Police & Gendarmerie Nationale virus

Files associated with Police & Gendarmerie Nationale virus infection:

cf6640a77ed4926a4c6be661ab93def9d13408753dd07e8d02836996a2f247b6.exe
xmlfilter.exe
SyncHostps.exe
xaZYOVJW.exe
%UserProfile%
n.
mplayer2.exe
msdtmsrd.exe
ex3b.dll
pmstcdjwz.exe
xlqbteeb.exe
bzsbkotiu.exe
wpbt0.dll
acuvzomo.exe
idiokbbrv.exe
JfCqQ5JC.exe
%WINDIR%\Temp
wjthvwjb.dss
skype.dat
msavfit.exe
%TEMP%
96dddda4.dll
%ALLUSERSPROFILE%\Application Data
securitywindrv.exe
87b2cb3916261d5c807bf44262755cb0.exe
aPr0hY9.exe
audipbrd.exe
comeo.exe
videotwisterSA.exe
b34btbztdb0vavaw.exe
%SystemDrive%\????????????
gcrwcoak.exe
00qbipeq.exe
scvhost.exe
Task Scheduler.exe
puozlkmyj.dll
svchost.exe
TimeDateMUICallback.exe
%LOCALAPPDATA%\lollipop
crack.exe
m2PythonLoader.exe
systemcpl.exe
ifgxpers.exe
%APPDATA%\Task Scheduler
ctfmon.exe
msn.exe
wahneaqa.exe
%CommonProgramFiles%
%WINDIR%\system32
2084473.dll
p1.exe
00b5d693.exe
setex.exe
pYunY8m4VL3qLc.exe
questscan.dll
Nbt.exe
Firewallservice.exe
魔法桌面第三方主题破解补丁V1.1.exe
msnmsgrr.exe
NTServiceManager.exe
VaultSysUi.exe
ACEIEAddOn.dll
sqlncli.exe
dqnbdq7.dss
install_0_msi.exe
brenasa.exe
obvwo.exe
DLL321.dll
%LOCALAPPDATA%\Temp
oygqyunapnp.exe
najeoxtt.exe
Piranha.exe
msshell.exe
secproc_isv.exe
taskhost.exe.exe
UpdatePriv.exe
jsdhlexdqkllnbcxgai.bfg
ssntvs.exe
Q3d38543.exe
bvhylsviw.exe
rool0_pk.exe
Other.res
dyjdl.exe
ubvhynpxh.exe
wgsdgsdgdsgsd.exe
zqmkrehUkpoKfsafsaZg.exe
%ALLUSERSPROFILE%
UpgradeHelper.exe
WinSyncMetastore.exe
administration.exe
uenovfiu.exe
Updating.exe
iner.exe
C87C.exe
rvcbcyks.exe
%APPDATA%\updates
%AppData%
wlsidten.exe
dtkmujvo.exe
ieudator.dll
DA0B.exe
OmaSG21e.exe
csrsss.exe
hwj3ba6j.dss
wlsidten.dll
50E1.exe
%APPDATA%\system
yaiiwockc.dll
3511172082012Build.exe
bf8h8d02hf.exe
xctqakcqbeo.dll
{097444e7-2d87-ba3c-2efe-9f54812d824a}.exe
MusicCollector.exe
WINDED6.exe

Police & Gendarmerie Nationale virus DLL's to remove:

96dddda4.dll
xctqakcqbeo.dll
ieudator.dll
ACEIEAddOn.dll
ex3b.dll
yaiiwockc.dll
questscan.dll
2084473.dll
wpbt0.dll
wlsidten.dll
DLL321.dll
puozlkmyj.dll

Police & Gendarmerie Nationale virus processes to kill:

systemcpl.exe
xaZYOVJW.exe
install_0_msi.exe
DA0B.exe
msavfit.exe
gcrwcoak.exe
ctfmon.exe
UpdatePriv.exe
JfCqQ5JC.exe
00qbipeq.exe
3511172082012Build.exe
wahneaqa.exe
msn.exe
Nbt.exe
csrsss.exe
iner.exe
sqlncli.exe
taskhost.exe.exe
videotwisterSA.exe
cf6640a77ed4926a4c6be661ab93def9d13408753dd07e8d02836996a2f247b6.exe
secproc_isv.exe
OmaSG21e.exe
dyjdl.exe
ssntvs.exe
aPr0hY9.exe
wlsidten.exe
SyncHostps.exe
ubvhynpxh.exe
comeo.exe
obvwo.exe
oygqyunapnp.exe
rvcbcyks.exe
mplayer2.exe
m2PythonLoader.exe
bvhylsviw.exe
idiokbbrv.exe
msdtmsrd.exe
00b5d693.exe
securitywindrv.exe
50E1.exe
ifgxpers.exe
rool0_pk.exe
pmstcdjwz.exe
b34btbztdb0vavaw.exe
VaultSysUi.exe
{097444e7-2d87-ba3c-2efe-9f54812d824a}.exe
bf8h8d02hf.exe
wgsdgsdgdsgsd.exe
TimeDateMUICallback.exe
dtkmujvo.exe
MusicCollector.exe
WINDED6.exe
crack.exe
svchost.exe
xmlfilter.exe
audipbrd.exe
brenasa.exe
C87C.exe
administration.exe
acuvzomo.exe
p1.exe
setex.exe
魔法桌面第三方主题破解补丁V1.1.exe
Firewallservice.exe
msshell.exe
87b2cb3916261d5c807bf44262755cb0.exe
Q3d38543.exe
WinSyncMetastore.exe
UpgradeHelper.exe
Updating.exe
uenovfiu.exe
xlqbteeb.exe
pYunY8m4VL3qLc.exe
zqmkrehUkpoKfsafsaZg.exe
Task Scheduler.exe
scvhost.exe
Piranha.exe
najeoxtt.exe
NTServiceManager.exe
msnmsgrr.exe
bzsbkotiu.exe
Disclaimer

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.