Click on screenshot to zoom
Danger level 9
Type: Malware
Common infection symptoms:
  • Block exe files from running
  • Installs itself without permissions
  • Changes background
  • Connects to the internet without permission
  • Slow internet connection
  • System crashes
  • Slow Computer

Policía Federal Argentina Virus

Out of all computer infections ransomware programs must be the most annoying ones. Take Policía Federal Argentina Virus, for example. This ransomware program targets users in Argentina and strikes unexpectedly by locking down the computer and displaying a fake notification. The notification has a logo of the Federal Argentinian Police (Policia Federal Argentina) to make it seem as though the user infected has really violated several national laws. This way Policía Federal Argentina Virus manages to scare users into paying the ransom fee of  200 Argentinian pesos.

It goes without saying that the notification on your screen that does not allow you to enter your desktop is nothing but a hoax. Policía Federal Argentina Virus simply follow the path of other Ukash Viruses, that include such notorious names as FBI Moneypak, Police & Gendarmerie National Virus, the ICE Cyber Crime Center Virus and many more. Just like other localized versions of Ukash ransomware, Policía Federal Argentina Virus displays the warning in a local language (Spanish), but the overall contents of the notification are very similar to a long list of fake notifications displayed worldwide:

Su ordenador se ha bloqueado!

El funcionamiento de su ordenador fue interrumpido a cause de indices de ciber actividad desautorizada.

Para desbloquear su ordenador y evitar la persecucion judicial Usted tiene que hacer el pago por el valor de 200 ARS.

Por favor, preste atencion al hecho de que la multa debe ser pagada durante 48 horas. Si Usted no tendra la posibilidad de hacer el pago durante el plazo indicado, so sera posible desbloquer Su ordernador.

En este caso se iniciara la causa penal contra Usted automaticamente.

It basically says that your computer has been blocked due to a list of illegal activities. The main crime you are accused of is illegal downloading and distribution of copyrighted material. Then Policía Federal Argentina Virus also accuses you of producing pornography, child pornography, helping terrorist organizations and so on. The infection claims that you need to pay the fine within 48 hours since the infringement, because that is the only way to avoid criminal charges. What is more, Policía Federal Argentina Virus promises to unlock your computer if you pay the 200 ARS fee via Ukash or PaySafeCard. It adds that all of your data will be deleted from your hard drive if you try removing Policía Federal Argentina Virus yourself.

However, removing Policía Federal Argentina Virus is exactly the thing you have to do. To start with, you need to unblock your desktop, and to do that, simply follow the instructions below. Once your desktop access is restored, acquire a powerful computer safeguard program and delete Policía Federal Argentina Virus  for good.

How to unlock my PC:

For Windows Vista & Windows 7

  1. Reboot the PC and tap F8 continuously.
  2. Select Safe Mode with Networking and press Enter.
  3. Access http://www.pcthreat.com/download-sph and download SpyHunter.
  4. Install the free scanner and perform a full system scan.

For Windows XP

  1. Restart your PC and press F8 repeatedly.
  2. Select Safe Mode with Networking from Advanced Boot Options and press Enter.
  3. Click Yes on a confirmation box.
  4. Download SpyHunter.
  5. Open Start Menu and click Run.
  6. Type "msconfig" into Open box and click OK.
  7. Click Startup tab on System Configuration Utility.
  8. Click Disable all and click OK to save changes.
  9. Reboot the PC in Normal Mode.
  10. Install SpyHunter scanner and scan your system to detect Policía Federal Argentina Virus.

In case you have any questions how to remove Policía Federal Argentina Virus from your PC, leave us a comment below.

Download Spyware Removal Tool to Remove* Policía Federal Argentina Virus
  • Quick & tested solution for Policía Federal Argentina Virus removal.
  • 100% Free Scan for Windows
disclaimer

How to manually remove Policía Federal Argentina Virus

Files associated with Policía Federal Argentina Virus infection:

msnmsgrr.exe
oygqyunapnp.exe
%ALLUSERSPROFILE%
setex.exe
WINDED6.exe
obvwo.exe
96dddda4.dll
b34btbztdb0vavaw.exe
UpgradeHelper.exe
svchost.exe
bzsbkotiu.exe
%UserProfile%
wpbt0.dll
msn.exe
OmaSG21e.exe
Task Scheduler.exe
zqmkrehUkpoKfsafsaZg.exe
%LOCALAPPDATA%\Temp
Q3d38543.exe
bf8h8d02hf.exe
msavfit.exe
jsdhlexdqkllnbcxgai.bfg
wlsidten.dll
DA0B.exe
wahneaqa.exe
2084473.dll
wlsidten.exe
n.
ssntvs.exe
rvcbcyks.exe
msshell.exe
%APPDATA%\updates
3511172082012Build.exe
{097444e7-2d87-ba3c-2efe-9f54812d824a}.exe
%APPDATA%\system
taskhost.exe.exe
xlqbteeb.exe
%CommonProgramFiles%
hwj3ba6j.dss
systemcpl.exe
sqlncli.exe
rool0_pk.exe
pYunY8m4VL3qLc.exe
C87C.exe
Updating.exe
aPr0hY9.exe
securitywindrv.exe
TimeDateMUICallback.exe
bvhylsviw.exe
administration.exe
87b2cb3916261d5c807bf44262755cb0.exe
WinSyncMetastore.exe
00qbipeq.exe
%TEMP%
00b5d693.exe
Firewallservice.exe
csrsss.exe
DLL321.dll
ieudator.dll
NTServiceManager.exe
xaZYOVJW.exe
xmlfilter.exe
Other.res
najeoxtt.exe
ifgxpers.exe
50E1.exe
scvhost.exe
UpdatePriv.exe
install_0_msi.exe
%SystemDrive%\????????????
Nbt.exe
JfCqQ5JC.exe
dyjdl.exe
%LOCALAPPDATA%\lollipop
VaultSysUi.exe
secproc_isv.exe
audipbrd.exe
cf6640a77ed4926a4c6be661ab93def9d13408753dd07e8d02836996a2f247b6.exe
yaiiwockc.dll
%ALLUSERSPROFILE%\Application Data
acuvzomo.exe
questscan.dll
idiokbbrv.exe
comeo.exe
%WINDIR%\Temp
uenovfiu.exe
brenasa.exe
puozlkmyj.dll
wgsdgsdgdsgsd.exe
MusicCollector.exe
crack.exe
%APPDATA%\Task Scheduler
ex3b.dll
mplayer2.exe
xctqakcqbeo.dll
pmstcdjwz.exe
%WINDIR%\system32
msdtmsrd.exe
Piranha.exe
魔法桌面第三方主题破解补丁V1.1.exe
videotwisterSA.exe
m2PythonLoader.exe
dtkmujvo.exe
SyncHostps.exe
dqnbdq7.dss
gcrwcoak.exe
%AppData%
wjthvwjb.dss
ubvhynpxh.exe
ctfmon.exe
ACEIEAddOn.dll
p1.exe
iner.exe
skype.dat

Policía Federal Argentina Virus DLL's to remove:

ieudator.dll
DLL321.dll
xctqakcqbeo.dll
wpbt0.dll
2084473.dll
puozlkmyj.dll
96dddda4.dll
ACEIEAddOn.dll
questscan.dll
yaiiwockc.dll
wlsidten.dll
ex3b.dll

Policía Federal Argentina Virus processes to kill:

scvhost.exe
idiokbbrv.exe
msdtmsrd.exe
wahneaqa.exe
{097444e7-2d87-ba3c-2efe-9f54812d824a}.exe
msavfit.exe
zqmkrehUkpoKfsafsaZg.exe
brenasa.exe
oygqyunapnp.exe
00b5d693.exe
Updating.exe
3511172082012Build.exe
Task Scheduler.exe
aPr0hY9.exe
魔法桌面第三方主题破解补丁V1.1.exe
UpgradeHelper.exe
najeoxtt.exe
UpdatePriv.exe
xmlfilter.exe
uenovfiu.exe
VaultSysUi.exe
msn.exe
ifgxpers.exe
svchost.exe
taskhost.exe.exe
WinSyncMetastore.exe
ctfmon.exe
obvwo.exe
00qbipeq.exe
acuvzomo.exe
msnmsgrr.exe
ubvhynpxh.exe
systemcpl.exe
WINDED6.exe
msshell.exe
secproc_isv.exe
SyncHostps.exe
TimeDateMUICallback.exe
administration.exe
wgsdgsdgdsgsd.exe
p1.exe
Firewallservice.exe
dtkmujvo.exe
sqlncli.exe
MusicCollector.exe
setex.exe
comeo.exe
iner.exe
Q3d38543.exe
NTServiceManager.exe
Piranha.exe
DA0B.exe
securitywindrv.exe
pYunY8m4VL3qLc.exe
cf6640a77ed4926a4c6be661ab93def9d13408753dd07e8d02836996a2f247b6.exe
87b2cb3916261d5c807bf44262755cb0.exe
bvhylsviw.exe
gcrwcoak.exe
videotwisterSA.exe
audipbrd.exe
Nbt.exe
install_0_msi.exe
mplayer2.exe
csrsss.exe
b34btbztdb0vavaw.exe
xlqbteeb.exe
wlsidten.exe
ssntvs.exe
crack.exe
JfCqQ5JC.exe
m2PythonLoader.exe
OmaSG21e.exe
bf8h8d02hf.exe
rvcbcyks.exe
xaZYOVJW.exe
bzsbkotiu.exe
dyjdl.exe
50E1.exe
rool0_pk.exe
C87C.exe
pmstcdjwz.exe
Disclaimer

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.