How to remove Bundespolizei virus (ransomware)

andy | January 21, 2013

Bundespolizei, of course, is a well-known law-enforcement organization of Germany that is aimed at protection of rights and freedoms of German residents. Regretfully, hackers actively use its good name as a method of reaching their numerous evil plots. In particular, they use the good name of this agency on ransomware program that they’ve developed to trick and scare users with the bunch of deceitful accusations expressed in the text of the faulty ransomware’s warning.

Bundespolizei ransomware

Ransomware virus infections are becoming more and more widely spread in the world today. They attack many countries, primarily those that are relatively rich and have users that can empty their pockets after being scared. The ransomware contains the fake police warning that says you’ve committed something wrong while surfing the Internet online. Of course, you’ve never committed anything like that, so you have nothing to be worried about. Keep in mind that as soon as you remove this virus infection from your computer you will set your system free from potential virus vulnerability, since the presence of this malware on your system makes your PC easily attackable by other cyber threats.

Removal of Bundespolizei ransomware can be accomplished in two various methods. One is manual whereas the second is automatic. The first, of course, implies additional skills that you should possess with. The second method is partially automatic though. You will still need to undertake some manual steps, even though this process Is quite clear as described below.

Text of the ransomware’s scary warning:

Die offizielle Mitteilung des Bundeskriminalamtes
Achtung!
Ein Vorgang illegaler Aktivitäten wurde erkannt.
Das Betriebssystem wurde im Zusammenhang mit Verstössen gegen die Gesetze der Bundesrepublik Deutschland gesperrt! Es wurde folgender Vertoss festegestellt: Ihre IP Adresse lautet mit dieser IP wurden Seiten mit pornografischen Inhalten, Kinderpornographie, Sodomie und Gewalt gegen Kinder aufgerufen.
Auf Ihrem Computer wurden ebenfalls Videodateien mit pornografischen Inhalten, Elementen von Gewalt und Kinderpornografie festgestellt!
Es wurden auch Emails in Form von Spam, mit terroristischen Hintergründen, verschickt. Diese Sperre des Computers dient dazu, Ihre illegalen Aktivitäten zu unterbinden.

Ransomware unlocking procedure

Note! This tutorial is effective for all GreenDot MoneyPak, Ukash and Paysafecard ransomwares.

  1. Restart your computer and press F8 while it is restarting.
  2. Choose safe mode with networking.
  3. safe mode with networking

  4. Press Start menu and select Run, or press [Win]+R on keyboard.
  5. Run command

  6. Type msconfig
  7. msconfig

  8. Disable startup items rundll32 turning on any application from Application Data.
  9. Restart your system once again.
  10. Scan your system with GridinSoft Trojan Killer to identify file and delete it.

Some versions of these viruses disable all safe modes, but give a short gap that you can use to run anti-malware programs. Then do following:

  1. Reboot normally.
  2. Click Start and choose Run.
  3. Enter the text specified in the quotation below. If malware is loaded, just press Alt+Tab once and keep entering the string blindly then press Enter.
  4. http://trojan-killer.net/download.php

  5. Press Alt+tab and then R (letter) a couple of times. The process of ransomware virus should be killed after you succeed to download, install our recommended software and scan your PC with it.

Download GridinSoft Trojan Killer for thorough system checkup

Leave a comment

*