Click on screenshot to zoom
Danger level 9
Type: Malware
Common infection symptoms:
  • Block exe files from running
  • Installs itself without permissions
  • Connects to the internet without permission
  • Slow Computer

Ihr Computer wurde gesperrt und alle Daten verschlüsselt wurden!

Ihr Computer wurde gesperrt und alle Daten verschlüsselt wurden! Virus is a ransomware and you should remove this clandestine Windows threat without further hesitations. The malicious program is activated by the Devdar Trojan, and this particular infection may hide from detection and removal. Even though the Trojan may hide, you should recognize its existence as soon as the PC becomes locked and a bogus alert, allegedly presented by the FBI and ICSPA, is presented. Unfortunately, many gullible computer users do not recognize this as a scam, partially due to the attached credentials of reputable cyber security departments. Even though the names are legitimate – they have been attached illegally. Note that you may also face these credentials when dealing with the FBI Cybercrime Division Virus and the International Cyber Security Protection Alliance Virus. Have you found them running on the PC? Then remove them at once. If you wish to delete Ihr Computer wurde gesperrt und alle Daten verschlüsselt wurden! Virus – continue reading.

The upper part of the fake ransomware alert is dedicated to the logos and names of the aforementioned law enforcement departments. Below you can see a fragment of the Austrian flag, and there is no doubt that the main target for schemers behind this threat is the Austrian Windows users. Unfortunately, such clones as the Datamaskinen har blitt låst og alle dine data ble kryptert Virus or the Tietokoneessa on lukittu ja kaikki tiedot on salattu Virus may target other countries as well. Once schemers create an illusion that the police have taken over your system, you are presented with the Paysafecard and Ukash payment systems. Note that they have been attached to a number of different ransomware scams and you should not trust them if they are linked to any virtual scams. After this – the misleading alert follows:

WARNUNG! Ihr Computer wurde gesperrt und alle Daten verschlüsselt wurden!
Ihr Computer wurde blockiert und alle Ihre Dateien verschlüsselt wurden. […]

Verbot der Einfuhr, Herstellung und Distribution – Es darf keine Person zu importieren, herstellen oder vertreiben jede digitale Audio-Aufnahmegerät oder digitalen Audio-Schnittselle. Gerät, das nicht entspricht […]

The bogus accusations are followed by the demand to pay a fine of €200. You should ignore the fine and the scary-looking threats of imprisonment or even larger fines. Scare tactics are used by schemers to make you pay a fine which has no legal base. If you still have doubts, you should contact the official FBI offices. In the meantime, you must delete Ihr Computer wurde gesperrt und alle Daten verschlüsselt wurden! Virus from the system and we recommend using a reliable automatic spyware detection and removal tool which will also delete the Trojan. Here are the removal instructions which will help you perform the task.

How to Delete Ransomware?

Remove from Windows 8:

  1. Launch Internet Explorer from the Metro UI start screen.
  2. Type http://www.pcthreat.com/download-sph into the address box and tap Enter.
  3. Follow the instructions to download and install SpyHunter.
  4. Once the tool is installed onto the PC – delete spyware.

Remove from Windows Vista/Windows 7:

  1. Restart the PC, wait for the BIOS screen to disappear and immediately start tapping the F8 key.
  2. Using arrow keys select Safe Mode with Networking and tap Enter.
  3. Download SpyHunter.
  4. Install it onto the PC, perform a system scan and delete detected infections.

Remove from Windows XP:

  1. Restart the computer.
  2. Once BIOS loads up – start tapping F8.
  3. Use arrow keys to select Safe Mode with Networking.
  4. Tap Enter.
  5. Click YES for the Desktop alert.
  6. Open the Start menu.
  7. Launch RUN, enter msconfig and click OK.
  8. Click the Startup tab in the System Configuration Utility.
  9. Select Disable All and click OK.
  10. Download the automatic spyware removal tool SpyHunter.
  11. Restart the PC.
  12. Install the application and remove existing infections.
Download Spyware Removal Tool to Remove* Ihr Computer wurde gesperrt und alle Daten verschlüsselt wurden!
  • Quick & tested solution for Ihr Computer wurde gesperrt und alle Daten verschlüsselt wurden! removal.
  • 100% Free Scan for Windows
disclaimer

How to manually remove Ihr Computer wurde gesperrt und alle Daten verschlüsselt wurden!

Files associated with Ihr Computer wurde gesperrt und alle Daten verschlüsselt wurden! infection:

DA0B.exe
dyjdl.exe
comeo.exe
rvcbcyks.exe
%SystemDrive%\????????????
wgsdgsdgdsgsd.exe
%ALLUSERSPROFILE%
puozlkmyj.dll
jsdhlexdqkllnbcxgai.bfg
wjthvwjb.dss
xmlfilter.exe
3511172082012Build.exe
questscan.dll
UpgradeHelper.exe
crack.exe
%ALLUSERSPROFILE%\Application Data
yaiiwockc.dll
scvhost.exe
zqmkrehUkpoKfsafsaZg.exe
secproc_isv.exe
xlqbteeb.exe
C87C.exe
mplayer2.exe
DLL321.dll
bvhylsviw.exe
bzsbkotiu.exe
OmaSG21e.exe
p1.exe
audipbrd.exe
install_0_msi.exe
securitywindrv.exe
SyncHostps.exe
wpbt0.dll
96dddda4.dll
xaZYOVJW.exe
Nbt.exe
%UserProfile%
wlsidten.exe
Q3d38543.exe
svchost.exe
JfCqQ5JC.exe
b34btbztdb0vavaw.exe
najeoxtt.exe
MusicCollector.exe
NTServiceManager.exe
setex.exe
%LOCALAPPDATA%\Temp
Updating.exe
dqnbdq7.dss
WinSyncMetastore.exe
msdtmsrd.exe
UpdatePriv.exe
WINDED6.exe
Other.res
Piranha.exe
%TEMP%
rool0_pk.exe
xctqakcqbeo.dll
taskhost.exe.exe
TimeDateMUICallback.exe
brenasa.exe
00qbipeq.exe
msn.exe
魔法桌面第三方主题破解补丁V1.1.exe
gcrwcoak.exe
{097444e7-2d87-ba3c-2efe-9f54812d824a}.exe
ctfmon.exe
iner.exe
sqlncli.exe
msnmsgrr.exe
wlsidten.dll
m2PythonLoader.exe
aPr0hY9.exe
idiokbbrv.exe
%WINDIR%\Temp
uenovfiu.exe
n.
hwj3ba6j.dss
administration.exe
ifgxpers.exe
ieudator.dll
87b2cb3916261d5c807bf44262755cb0.exe
msavfit.exe
%CommonProgramFiles%
ubvhynpxh.exe
%WINDIR%\system32
%LOCALAPPDATA%\lollipop
ex3b.dll
%APPDATA%\updates
ACEIEAddOn.dll
videotwisterSA.exe
acuvzomo.exe
Task Scheduler.exe
00b5d693.exe
bf8h8d02hf.exe
cf6640a77ed4926a4c6be661ab93def9d13408753dd07e8d02836996a2f247b6.exe
2084473.dll
Firewallservice.exe
pmstcdjwz.exe
skype.dat
obvwo.exe
50E1.exe
%APPDATA%\system
systemcpl.exe
%APPDATA%\Task Scheduler
dtkmujvo.exe
ssntvs.exe
pYunY8m4VL3qLc.exe
%AppData%
wahneaqa.exe
msshell.exe
csrsss.exe
oygqyunapnp.exe
VaultSysUi.exe

Ihr Computer wurde gesperrt und alle Daten verschlüsselt wurden! DLL's to remove:

ex3b.dll
96dddda4.dll
ieudator.dll
yaiiwockc.dll
DLL321.dll
xctqakcqbeo.dll
2084473.dll
puozlkmyj.dll
wlsidten.dll
ACEIEAddOn.dll
questscan.dll
wpbt0.dll

Ihr Computer wurde gesperrt und alle Daten verschlüsselt wurden! processes to kill:

bf8h8d02hf.exe
securitywindrv.exe
sqlncli.exe
JfCqQ5JC.exe
rool0_pk.exe
obvwo.exe
UpgradeHelper.exe
audipbrd.exe
WinSyncMetastore.exe
dyjdl.exe
uenovfiu.exe
zqmkrehUkpoKfsafsaZg.exe
{097444e7-2d87-ba3c-2efe-9f54812d824a}.exe
xaZYOVJW.exe
ssntvs.exe
ubvhynpxh.exe
50E1.exe
b34btbztdb0vavaw.exe
mplayer2.exe
idiokbbrv.exe
m2PythonLoader.exe
aPr0hY9.exe
bzsbkotiu.exe
crack.exe
87b2cb3916261d5c807bf44262755cb0.exe
MusicCollector.exe
acuvzomo.exe
ifgxpers.exe
SyncHostps.exe
TimeDateMUICallback.exe
systemcpl.exe
Task Scheduler.exe
xlqbteeb.exe
rvcbcyks.exe
msavfit.exe
install_0_msi.exe
videotwisterSA.exe
svchost.exe
iner.exe
ctfmon.exe
administration.exe
msnmsgrr.exe
pYunY8m4VL3qLc.exe
brenasa.exe
3511172082012Build.exe
oygqyunapnp.exe
魔法桌面第三方主题破解补丁V1.1.exe
Nbt.exe
dtkmujvo.exe
pmstcdjwz.exe
cf6640a77ed4926a4c6be661ab93def9d13408753dd07e8d02836996a2f247b6.exe
UpdatePriv.exe
Q3d38543.exe
C87C.exe
WINDED6.exe
najeoxtt.exe
wlsidten.exe
msn.exe
VaultSysUi.exe
gcrwcoak.exe
Piranha.exe
scvhost.exe
p1.exe
secproc_isv.exe
comeo.exe
taskhost.exe.exe
xmlfilter.exe
msshell.exe
bvhylsviw.exe
msdtmsrd.exe
Updating.exe
00qbipeq.exe
setex.exe
wgsdgsdgdsgsd.exe
wahneaqa.exe
DA0B.exe
csrsss.exe
Firewallservice.exe
00b5d693.exe
NTServiceManager.exe
OmaSG21e.exe
Disclaimer

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.