Click on screenshot to zoom
Danger level 9
Type: Malware
Common infection symptoms:
  • Block exe files from running
  • Installs itself without permissions
  • Changes background
  • Connects to the internet without permission
  • Slow internet connection
  • System crashes
  • Annoying Pop-up's
  • Slow Computer

Bundesnachrichtendienst Virus

Bundesnachrichtendienst Virus is a malicious computer infection which falls into the ransomware category. Just like all the other infections from the same group, Bundesnachrichtendienst Virus locks you out of your computer without a single warning by displaying a fake notification which was supposedly sent by BundesNachrichtenDienst (Federal Intelligence Service). This makes user think that he or she has done something illegal, but it is only a scam devised to make you spend your money for nothing. Remove BundesNachrichtenDienst from your computer once you restore your desktop access and then make sure that no other dangerous infections are present in your system.

If you are wondering how BundesNachrichtenDienst gets into your computer, there might be more than a few answers. In general, just like with GVU Virus, Europol Virus, Bundespolizei Virus and other Ukash infections intended for the German market, this ransomware program is distributed by Urausy Trojan. The Trojan infection may be hiding in a pornography website behind pop-up advertisements, or in a fake updater file which is forced upon you in order to “update” particular software you have not updated for a while (that is one of the reasons why it is important to keep all of your programs updated).

Either way, once BundesNachrichtenDienst gets in, it successfully locks you out of your PC and then displays a threatening notification which gives you only 48 hours to pay up the “fine”:

WARNUNG! Zugang von Ihrem persönlichen Computer wurde vorläufig aus den unten aufelisteten Gründen gesperrt.
Die Strafe soll von Ihnen innerhalb von 48 Stunden nach der Verletzung bezahlt werden. Sobald die 48 Stunden vergangen sind, weden innerhalb weiteren 48 Stunden alle Informationen über Sie automatisch gesammelt, und Sie werden strafrechtlich verfolgt.
Die Größe der feinen beträgt €100 Euro.
Sie können mit Hilfe PaySafeCard zahlen.

Bundesnachrichtendienst Virus says that you have been involved in viewing and distributing copyrighted material illegally, as well as storing child pornography, bestiality and other illegal material. For that you may face up to 8 years in jail, but you can avoid the criminal sentence if you pay a 100 Euro fine within 48 hours via PaySafeCard alternative payment system.

When users are threatened with criminal charges they are more bound to pay up the fine no matter how ridiculous it would all sound. After all, you could check the credibility of such message very easily just by contacting your local law enforcement authorities office. Then you would be clearly told that Bundesnachrichtendienst Virus is a fake.

However, even though the message displayed by Bundesnachrichtendienst Virus is not real, your computer is still infected with malware. You need to unlock your PC and then get yourself a legitimate antimalware tool that will help you remove Bundesnachrichtendienst Virus automatically along with Trojans and other malicious threats that most likely reside in the depths of the system. Make use of the instructions below to get your desktop back, and do not hesitate to contact us by leaving a comment in the box below, if you need any help with Bundesnachrichtendienst Virus’s removal.

How to restore desktop access

Windows 8

  1. Press Windows key and metro GUI will open up.
  2. Move mouse cursor to the bottom right of the screen.
  3. Click Settings on Charms bar and select Change PC Settings.
  4. Go to General and under Advanced Settings click Start Now.
  5. Select Troubleshot and press Advanced Options.
  6. Access Startup settings and click Restart.
  7. Press F5 to select Safe Mode with Networking.
  8. Go to http://www.pcthreat.com/download-sph and install SpyHunter.
  9. Scan your PC.

Windows Vista & Windows 7

  1. Restart the computer and press F8 several times when BIOS screen disappears.
  2. When Advanced Boot Options menu shows up, select Safe Mode with Networking and press Enter.
  3. Access http://www.pcthreat.com/download-sph and download SpyHunter.
  4. Install the program and run a full system scan.

Windows XP

  1. Follow the steps 1 and 2 above.
  2. Click Yes on a confirmation dialog box.
  3. Download SpyHunter.
  4. Open Start menu and click Run.
  5. Type “msconfig” into the Open box and click OK.
  6. Select Startup tab on System Configuration Utility.
  7. Uncheck all the programs on the list and click OK.
  8. Restart the PC in Normal Mode.
  9. Install SpyHunter and scan the PC.
Download Spyware Removal Tool to Remove* Bundesnachrichtendienst Virus
  • Quick & tested solution for Bundesnachrichtendienst Virus removal.
  • 100% Free Scan for Windows
disclaimer

How to manually remove Bundesnachrichtendienst Virus

Files associated with Bundesnachrichtendienst Virus infection:

iner.exe
%WINDIR%\system32
96dddda4.dll
ctfmon.exe
JfCqQ5JC.exe
rool0_pk.exe
VaultSysUi.exe
audipbrd.exe
ACEIEAddOn.dll
Task Scheduler.exe
mplayer2.exe
crack.exe
wjthvwjb.dss
msshell.exe
msn.exe
comeo.exe
videotwisterSA.exe
bzsbkotiu.exe
idiokbbrv.exe
SyncHostps.exe
xmlfilter.exe
%ALLUSERSPROFILE%\Application Data
wgsdgsdgdsgsd.exe
DLL321.dll
%APPDATA%\Task Scheduler
m2PythonLoader.exe
87b2cb3916261d5c807bf44262755cb0.exe
bvhylsviw.exe
rvcbcyks.exe
%SystemDrive%\????????????
TimeDateMUICallback.exe
Other.res
aPr0hY9.exe
msnmsgrr.exe
Updating.exe
zqmkrehUkpoKfsafsaZg.exe
setex.exe
dyjdl.exe
xlqbteeb.exe
skype.dat
3511172082012Build.exe
%TEMP%
bf8h8d02hf.exe
WINDED6.exe
00qbipeq.exe
魔法桌面第三方主题破解补丁V1.1.exe
xaZYOVJW.exe
install_0_msi.exe
%ALLUSERSPROFILE%
UpgradeHelper.exe
jsdhlexdqkllnbcxgai.bfg
csrsss.exe
cf6640a77ed4926a4c6be661ab93def9d13408753dd07e8d02836996a2f247b6.exe
uenovfiu.exe
%AppData%
gcrwcoak.exe
dqnbdq7.dss
ex3b.dll
C87C.exe
%WINDIR%\Temp
wlsidten.dll
50E1.exe
{097444e7-2d87-ba3c-2efe-9f54812d824a}.exe
DA0B.exe
obvwo.exe
msdtmsrd.exe
scvhost.exe
secproc_isv.exe
xctqakcqbeo.dll
Firewallservice.exe
najeoxtt.exe
hwj3ba6j.dss
OmaSG21e.exe
n.
MusicCollector.exe
pYunY8m4VL3qLc.exe
sqlncli.exe
%APPDATA%\updates
00b5d693.exe
wpbt0.dll
securitywindrv.exe
Nbt.exe
2084473.dll
administration.exe
systemcpl.exe
UpdatePriv.exe
%UserProfile%
acuvzomo.exe
puozlkmyj.dll
%APPDATA%\system
p1.exe
%LOCALAPPDATA%\Temp
ieudator.dll
yaiiwockc.dll
Piranha.exe
oygqyunapnp.exe
Q3d38543.exe
taskhost.exe.exe
%LOCALAPPDATA%\lollipop
svchost.exe
ubvhynpxh.exe
brenasa.exe
wlsidten.exe
wahneaqa.exe
questscan.dll
%CommonProgramFiles%
ssntvs.exe
b34btbztdb0vavaw.exe
NTServiceManager.exe
msavfit.exe
pmstcdjwz.exe
ifgxpers.exe
dtkmujvo.exe
WinSyncMetastore.exe

Bundesnachrichtendienst Virus DLL's to remove:

puozlkmyj.dll
questscan.dll
DLL321.dll
wlsidten.dll
yaiiwockc.dll
ACEIEAddOn.dll
96dddda4.dll
ieudator.dll
wpbt0.dll
xctqakcqbeo.dll
2084473.dll
ex3b.dll

Bundesnachrichtendienst Virus processes to kill:

Firewallservice.exe
50E1.exe
Updating.exe
administration.exe
secproc_isv.exe
p1.exe
scvhost.exe
bvhylsviw.exe
wahneaqa.exe
Q3d38543.exe
systemcpl.exe
MusicCollector.exe
C87C.exe
Piranha.exe
gcrwcoak.exe
WinSyncMetastore.exe
xaZYOVJW.exe
rvcbcyks.exe
UpdatePriv.exe
UpgradeHelper.exe
crack.exe
brenasa.exe
pmstcdjwz.exe
mplayer2.exe
Task Scheduler.exe
ssntvs.exe
pYunY8m4VL3qLc.exe
xmlfilter.exe
svchost.exe
SyncHostps.exe
comeo.exe
msdtmsrd.exe
魔法桌面第三方主题破解补丁V1.1.exe
oygqyunapnp.exe
ifgxpers.exe
idiokbbrv.exe
VaultSysUi.exe
wlsidten.exe
msavfit.exe
securitywindrv.exe
bf8h8d02hf.exe
00b5d693.exe
00qbipeq.exe
NTServiceManager.exe
msshell.exe
csrsss.exe
bzsbkotiu.exe
xlqbteeb.exe
87b2cb3916261d5c807bf44262755cb0.exe
iner.exe
3511172082012Build.exe
rool0_pk.exe
dyjdl.exe
obvwo.exe
ubvhynpxh.exe
b34btbztdb0vavaw.exe
acuvzomo.exe
m2PythonLoader.exe
setex.exe
OmaSG21e.exe
taskhost.exe.exe
DA0B.exe
sqlncli.exe
najeoxtt.exe
Nbt.exe
aPr0hY9.exe
msnmsgrr.exe
{097444e7-2d87-ba3c-2efe-9f54812d824a}.exe
ctfmon.exe
TimeDateMUICallback.exe
videotwisterSA.exe
dtkmujvo.exe
msn.exe
audipbrd.exe
cf6640a77ed4926a4c6be661ab93def9d13408753dd07e8d02836996a2f247b6.exe
JfCqQ5JC.exe
uenovfiu.exe
wgsdgsdgdsgsd.exe
WINDED6.exe
zqmkrehUkpoKfsafsaZg.exe
install_0_msi.exe
Disclaimer

Comments

  1. chris Jan 14, 2015

    Got this guy on my Samsung Tab 3. How do I get it off? Chrisxomigi4002@yahoo.com

    Thsnk you

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.