Click on screenshot to zoom
Danger level 9
Type: Malware
Common infection symptoms:
  • Block exe files from running
  • Installs itself without permissions
  • Connects to the internet without permission
  • Slow Computer

Ihr Computer wurde gesperrt und alle Daten verschlüsselt wurden!

Ihr Computer wurde gesperrt und alle Daten verschlüsselt wurden! Virus is a ransomware and you should remove this clandestine Windows threat without further hesitations. The malicious program is activated by the Devdar Trojan, and this particular infection may hide from detection and removal. Even though the Trojan may hide, you should recognize its existence as soon as the PC becomes locked and a bogus alert, allegedly presented by the FBI and ICSPA, is presented. Unfortunately, many gullible computer users do not recognize this as a scam, partially due to the attached credentials of reputable cyber security departments. Even though the names are legitimate – they have been attached illegally. Note that you may also face these credentials when dealing with the FBI Cybercrime Division Virus and the International Cyber Security Protection Alliance Virus. Have you found them running on the PC? Then remove them at once. If you wish to delete Ihr Computer wurde gesperrt und alle Daten verschlüsselt wurden! Virus – continue reading.

The upper part of the fake ransomware alert is dedicated to the logos and names of the aforementioned law enforcement departments. Below you can see a fragment of the Austrian flag, and there is no doubt that the main target for schemers behind this threat is the Austrian Windows users. Unfortunately, such clones as the Datamaskinen har blitt låst og alle dine data ble kryptert Virus or the Tietokoneessa on lukittu ja kaikki tiedot on salattu Virus may target other countries as well. Once schemers create an illusion that the police have taken over your system, you are presented with the Paysafecard and Ukash payment systems. Note that they have been attached to a number of different ransomware scams and you should not trust them if they are linked to any virtual scams. After this – the misleading alert follows:

WARNUNG! Ihr Computer wurde gesperrt und alle Daten verschlüsselt wurden!
Ihr Computer wurde blockiert und alle Ihre Dateien verschlüsselt wurden. […]

Verbot der Einfuhr, Herstellung und Distribution – Es darf keine Person zu importieren, herstellen oder vertreiben jede digitale Audio-Aufnahmegerät oder digitalen Audio-Schnittselle. Gerät, das nicht entspricht […]

The bogus accusations are followed by the demand to pay a fine of €200. You should ignore the fine and the scary-looking threats of imprisonment or even larger fines. Scare tactics are used by schemers to make you pay a fine which has no legal base. If you still have doubts, you should contact the official FBI offices. In the meantime, you must delete Ihr Computer wurde gesperrt und alle Daten verschlüsselt wurden! Virus from the system and we recommend using a reliable automatic spyware detection and removal tool which will also delete the Trojan. Here are the removal instructions which will help you perform the task.

How to Delete Ransomware?

Remove from Windows 8:

  1. Launch Internet Explorer from the Metro UI start screen.
  2. Type http://www.pcthreat.com/download-sph into the address box and tap Enter.
  3. Follow the instructions to download and install SpyHunter.
  4. Once the tool is installed onto the PC – delete spyware.

Remove from Windows Vista/Windows 7:

  1. Restart the PC, wait for the BIOS screen to disappear and immediately start tapping the F8 key.
  2. Using arrow keys select Safe Mode with Networking and tap Enter.
  3. Download SpyHunter.
  4. Install it onto the PC, perform a system scan and delete detected infections.

Remove from Windows XP:

  1. Restart the computer.
  2. Once BIOS loads up – start tapping F8.
  3. Use arrow keys to select Safe Mode with Networking.
  4. Tap Enter.
  5. Click YES for the Desktop alert.
  6. Open the Start menu.
  7. Launch RUN, enter msconfig and click OK.
  8. Click the Startup tab in the System Configuration Utility.
  9. Select Disable All and click OK.
  10. Download the automatic spyware removal tool SpyHunter.
  11. Restart the PC.
  12. Install the application and remove existing infections.
Download Spyware Removal Tool to Remove* Ihr Computer wurde gesperrt und alle Daten verschlüsselt wurden!
  • Quick & tested solution for Ihr Computer wurde gesperrt und alle Daten verschlüsselt wurden! removal.
  • 100% Free Scan for Windows
disclaimer

How to manually remove Ihr Computer wurde gesperrt und alle Daten verschlüsselt wurden!

Files associated with Ihr Computer wurde gesperrt und alle Daten verschlüsselt wurden! infection:

Firewallservice.exe
50E1.exe
svchost.exe
bf8h8d02hf.exe
install_0_msi.exe
Nbt.exe
videotwisterSA.exe
csrsss.exe
DA0B.exe
bvhylsviw.exe
%ALLUSERSPROFILE%\Application Data
Task Scheduler.exe
msdtmsrd.exe
sqlncli.exe
VaultSysUi.exe
rool0_pk.exe
msshell.exe
msavfit.exe
cf6640a77ed4926a4c6be661ab93def9d13408753dd07e8d02836996a2f247b6.exe
ifgxpers.exe
xctqakcqbeo.dll
WINDED6.exe
ubvhynpxh.exe
audipbrd.exe
TimeDateMUICallback.exe
魔法桌面第三方主题破解补丁V1.1.exe
xmlfilter.exe
%APPDATA%\system
administration.exe
scvhost.exe
msn.exe
MusicCollector.exe
%SystemDrive%\????????????
secproc_isv.exe
SyncHostps.exe
C87C.exe
gcrwcoak.exe
puozlkmyj.dll
wahneaqa.exe
systemcpl.exe
dyjdl.exe
securitywindrv.exe
NTServiceManager.exe
dqnbdq7.dss
acuvzomo.exe
ssntvs.exe
oygqyunapnp.exe
00qbipeq.exe
mplayer2.exe
xlqbteeb.exe
crack.exe
Q3d38543.exe
yaiiwockc.dll
DLL321.dll
pmstcdjwz.exe
%WINDIR%\system32
bzsbkotiu.exe
%UserProfile%
%LOCALAPPDATA%\Temp
3511172082012Build.exe
OmaSG21e.exe
ACEIEAddOn.dll
ieudator.dll
wgsdgsdgdsgsd.exe
aPr0hY9.exe
00b5d693.exe
87b2cb3916261d5c807bf44262755cb0.exe
skype.dat
wpbt0.dll
%CommonProgramFiles%
hwj3ba6j.dss
questscan.dll
obvwo.exe
%LOCALAPPDATA%\lollipop
%APPDATA%\updates
%WINDIR%\Temp
JfCqQ5JC.exe
%APPDATA%\Task Scheduler
ctfmon.exe
n.
ex3b.dll
zqmkrehUkpoKfsafsaZg.exe
%TEMP%
2084473.dll
b34btbztdb0vavaw.exe
%ALLUSERSPROFILE%
brenasa.exe
iner.exe
WinSyncMetastore.exe
m2PythonLoader.exe
UpdatePriv.exe
dtkmujvo.exe
idiokbbrv.exe
Other.res
rvcbcyks.exe
{097444e7-2d87-ba3c-2efe-9f54812d824a}.exe
wjthvwjb.dss
Updating.exe
UpgradeHelper.exe
Piranha.exe
p1.exe
comeo.exe
96dddda4.dll
xaZYOVJW.exe
wlsidten.dll
wlsidten.exe
setex.exe
%AppData%
pYunY8m4VL3qLc.exe
najeoxtt.exe
taskhost.exe.exe
jsdhlexdqkllnbcxgai.bfg
uenovfiu.exe
msnmsgrr.exe

Ihr Computer wurde gesperrt und alle Daten verschlüsselt wurden! DLL's to remove:

2084473.dll
yaiiwockc.dll
questscan.dll
puozlkmyj.dll
96dddda4.dll
DLL321.dll
ex3b.dll
xctqakcqbeo.dll
ACEIEAddOn.dll
ieudator.dll
wpbt0.dll
wlsidten.dll

Ihr Computer wurde gesperrt und alle Daten verschlüsselt wurden! processes to kill:

msdtmsrd.exe
Q3d38543.exe
WinSyncMetastore.exe
comeo.exe
crack.exe
m2PythonLoader.exe
C87C.exe
gcrwcoak.exe
msshell.exe
systemcpl.exe
rvcbcyks.exe
wlsidten.exe
svchost.exe
xmlfilter.exe
msnmsgrr.exe
install_0_msi.exe
bvhylsviw.exe
audipbrd.exe
VaultSysUi.exe
SyncHostps.exe
brenasa.exe
MusicCollector.exe
videotwisterSA.exe
{097444e7-2d87-ba3c-2efe-9f54812d824a}.exe
87b2cb3916261d5c807bf44262755cb0.exe
secproc_isv.exe
najeoxtt.exe
msn.exe
iner.exe
Firewallservice.exe
ubvhynpxh.exe
acuvzomo.exe
csrsss.exe
cf6640a77ed4926a4c6be661ab93def9d13408753dd07e8d02836996a2f247b6.exe
wgsdgsdgdsgsd.exe
ssntvs.exe
DA0B.exe
dtkmujvo.exe
p1.exe
ifgxpers.exe
obvwo.exe
administration.exe
OmaSG21e.exe
aPr0hY9.exe
oygqyunapnp.exe
dyjdl.exe
idiokbbrv.exe
WINDED6.exe
bf8h8d02hf.exe
uenovfiu.exe
securitywindrv.exe
wahneaqa.exe
3511172082012Build.exe
UpdatePriv.exe
xaZYOVJW.exe
50E1.exe
b34btbztdb0vavaw.exe
rool0_pk.exe
zqmkrehUkpoKfsafsaZg.exe
ctfmon.exe
pmstcdjwz.exe
bzsbkotiu.exe
Task Scheduler.exe
00b5d693.exe
NTServiceManager.exe
xlqbteeb.exe
TimeDateMUICallback.exe
setex.exe
Nbt.exe
taskhost.exe.exe
sqlncli.exe
Updating.exe
JfCqQ5JC.exe
pYunY8m4VL3qLc.exe
00qbipeq.exe
scvhost.exe
魔法桌面第三方主题破解补丁V1.1.exe
Piranha.exe
UpgradeHelper.exe
msavfit.exe
mplayer2.exe
Disclaimer

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.