Click on screenshot to zoom
Danger level 9
Type: Malware
Common infection symptoms:
  • Installs itself without permissions
  • Changes background
  • Connects to the internet without permission

Gobierno de España Virus

When you get infected with ransomware programs the most important thing is not to panic. Gobierno de España Virus is one of those ransomware applications that deny desktop access and then display a fake security notification across your screen saying that you have violated several national laws and therefore your computer has been blocked. However, the real reason why you cannot access your desktop is money – Gobierno de España Virus intends to steal your money by making you pay a non-existent fine. Rather than doing what the infection expects of you, you need to remove Gobierno de España Virus from your computer right now.

Luckily, we know exactly what to expect of Gobierno de España Virus, because it is not the first infection from Ukash Virus group. Other ransomware programs that have targeted computer users in Spain include Grupo de Delitos Telemáticos virus, Cuerpo National de Policía virus, Dirección General de la Policía Virus and other similar infections. Most of them are distributed by such Trojans as Urausy, Revoyem, Reveton and others. However, it is also possible for a ransomware program to be distributed by a rootkit. Therefore, even if you unlock your computer, it is important to scan the system with a powerful antimalware program in order to terminate all the dangerous threats hiding inside your PC.

Therefore, you should not be taken by surprise, when the following notification appears on your screen:

La actividad de su ordenador fue detenido a causa de la ciberactividad no autorizada.

En caso intent de desbloqueo por su propia iniciativa todos su datos seron formateados. Todos los ficheros, videos, fotos, documentos en su ordenador seron eliminados.

Para desbloquear el ordenador y evitar otras consecuencias juridicas debe pagar la multa por el valoc de 100 EUR.

As you can perfectly see, Gobierno de España Virus tries to convince you that you have been involved in illegal activity. Although the list of legal articles you have supposedly violated is not presented in the example, the infection claims that you have been involved in child pornography distribution, terrorism promotion, credit card fraud and many other things that usually would end up in a serious criminal case. When a user is threatened and scared he is more likely to transfer the 100 EUR “fine” via Ukash or PaySafeCard alternative payment systems.

Nevertheless, it should be obvious that paying the money will not solve your problem. Not to mention that Gobierno de España Virus will not unlock your computer. You need to restore your desktop access yourself. To do that, refer to the instructions below. Afterwards, once you get your desktop back, install a licensed antimalware program and run a full system scan to detect and terminate all the other possible infections.

How to unlock my PC

Windows 8

  1. Press Windows key and metro GUI will open.
  2. Move mouse cursor to the bottom right and click Settings on Charms bar.
  3. Go to Change PC Settings and select General.
  4. Select Start Now under Advanced Startup and go to Troubleshoot.
  5. Click Advanced Options and go to Startup Settings. Press Restart.
  6. Press F5 to choose Safe Mode with Networking.
  7. Access http://www.pcthreat.com/download-sph and install SpyHunter.
  8. Run a full system scan.

Windows Vista & Windows 7

  1. Restart your PC and tap F8 until Advanced Boot Options menu appears.
  2. Use arrow keys to navigate and select Safe Mode with Networking. Press Enter.
  3. Go to http://www.pcthreat.com/download-sph and download SpyHunter.
  4. Install the program and scan your computer.

Windows XP

  1. Follow the steps 1 and 2 above.
  2. Click Yes on a confirmation box.
  3. Download SpyHunter from http://www.pcthreat.com/download-sph
  4. Open Start menu and click Run.
  5. Enter “msconfig” into Open box and click OK.
  6. Select Startup tab on System Configuration Utility.
  7. Click Disable all and press OK.
  8. Reboot the PC in Normal Mode.
  9. Install SpyHunter and scan your system.

In case you have any trouble restoring your desktop access and removing Gobierno de España Virus, leave a comment below.

Download Spyware Removal Tool to Remove* Gobierno de España Virus
  • Quick & tested solution for Gobierno de España Virus removal.
  • 100% Free Scan for Windows
disclaimer

How to manually remove Gobierno de España Virus

Files associated with Gobierno de España Virus infection:

hwj3ba6j.dss
yaiiwockc.dll
Nbt.exe
najeoxtt.exe
jsdhlexdqkllnbcxgai.bfg
%ALLUSERSPROFILE%
securitywindrv.exe
wjthvwjb.dss
uenovfiu.exe
wpbt0.dll
%LOCALAPPDATA%\Temp
p1.exe
acuvzomo.exe
NTServiceManager.exe
ifgxpers.exe
C87C.exe
zqmkrehUkpoKfsafsaZg.exe
ssntvs.exe
svchost.exe
setex.exe
m2PythonLoader.exe
50E1.exe
ubvhynpxh.exe
skype.dat
%AppData%
%APPDATA%\system
questscan.dll
VaultSysUi.exe
{097444e7-2d87-ba3c-2efe-9f54812d824a}.exe
msdtmsrd.exe
ex3b.dll
videotwisterSA.exe
sqlncli.exe
crack.exe
wlsidten.exe
%WINDIR%\Temp
dtkmujvo.exe
administration.exe
rool0_pk.exe
n.
00b5d693.exe
wahneaqa.exe
87b2cb3916261d5c807bf44262755cb0.exe
Updating.exe
SyncHostps.exe
OmaSG21e.exe
dyjdl.exe
魔法桌面第三方主题破解补丁V1.1.exe
obvwo.exe
oygqyunapnp.exe
aPr0hY9.exe
bvhylsviw.exe
mplayer2.exe
%UserProfile%
bf8h8d02hf.exe
install_0_msi.exe
UpdatePriv.exe
taskhost.exe.exe
%LOCALAPPDATA%\lollipop
systemcpl.exe
%TEMP%
%WINDIR%\system32
wgsdgsdgdsgsd.exe
%SystemDrive%\????????????
msavfit.exe
wlsidten.dll
xaZYOVJW.exe
Other.res
Piranha.exe
%CommonProgramFiles%
secproc_isv.exe
3511172082012Build.exe
Task Scheduler.exe
iner.exe
DA0B.exe
comeo.exe
Firewallservice.exe
pYunY8m4VL3qLc.exe
gcrwcoak.exe
TimeDateMUICallback.exe
JfCqQ5JC.exe
%APPDATA%\updates
b34btbztdb0vavaw.exe
bzsbkotiu.exe
2084473.dll
DLL321.dll
msn.exe
WINDED6.exe
MusicCollector.exe
dqnbdq7.dss
msnmsgrr.exe
idiokbbrv.exe
96dddda4.dll
WinSyncMetastore.exe
cf6640a77ed4926a4c6be661ab93def9d13408753dd07e8d02836996a2f247b6.exe
Q3d38543.exe
csrsss.exe
brenasa.exe
%ALLUSERSPROFILE%\Application Data
xctqakcqbeo.dll
xmlfilter.exe
puozlkmyj.dll
audipbrd.exe
ieudator.dll
%APPDATA%\Task Scheduler
ctfmon.exe
00qbipeq.exe
msshell.exe
xlqbteeb.exe
rvcbcyks.exe
scvhost.exe
pmstcdjwz.exe
ACEIEAddOn.dll
UpgradeHelper.exe

Gobierno de España Virus DLL's to remove:

ACEIEAddOn.dll
DLL321.dll
ieudator.dll
questscan.dll
ex3b.dll
yaiiwockc.dll
2084473.dll
puozlkmyj.dll
96dddda4.dll
wlsidten.dll
xctqakcqbeo.dll
wpbt0.dll

Gobierno de España Virus processes to kill:

VaultSysUi.exe
crack.exe
taskhost.exe.exe
msavfit.exe
audipbrd.exe
pmstcdjwz.exe
魔法桌面第三方主题破解补丁V1.1.exe
brenasa.exe
zqmkrehUkpoKfsafsaZg.exe
gcrwcoak.exe
aPr0hY9.exe
UpdatePriv.exe
p1.exe
rool0_pk.exe
najeoxtt.exe
msshell.exe
Task Scheduler.exe
m2PythonLoader.exe
iner.exe
acuvzomo.exe
ssntvs.exe
3511172082012Build.exe
UpgradeHelper.exe
OmaSG21e.exe
comeo.exe
WINDED6.exe
xlqbteeb.exe
MusicCollector.exe
msn.exe
Updating.exe
wlsidten.exe
obvwo.exe
JfCqQ5JC.exe
50E1.exe
oygqyunapnp.exe
videotwisterSA.exe
wgsdgsdgdsgsd.exe
SyncHostps.exe
NTServiceManager.exe
administration.exe
dtkmujvo.exe
install_0_msi.exe
Nbt.exe
setex.exe
C87C.exe
Firewallservice.exe
svchost.exe
scvhost.exe
ctfmon.exe
uenovfiu.exe
xmlfilter.exe
secproc_isv.exe
sqlncli.exe
securitywindrv.exe
cf6640a77ed4926a4c6be661ab93def9d13408753dd07e8d02836996a2f247b6.exe
87b2cb3916261d5c807bf44262755cb0.exe
Q3d38543.exe
rvcbcyks.exe
00b5d693.exe
WinSyncMetastore.exe
ubvhynpxh.exe
bzsbkotiu.exe
00qbipeq.exe
bf8h8d02hf.exe
ifgxpers.exe
msdtmsrd.exe
TimeDateMUICallback.exe
mplayer2.exe
pYunY8m4VL3qLc.exe
bvhylsviw.exe
DA0B.exe
Piranha.exe
wahneaqa.exe
b34btbztdb0vavaw.exe
{097444e7-2d87-ba3c-2efe-9f54812d824a}.exe
xaZYOVJW.exe
msnmsgrr.exe
idiokbbrv.exe
systemcpl.exe
csrsss.exe
dyjdl.exe
Disclaimer

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.