Severity scale:  

Virus Bundespolizei. How to remove? (Uninstall guide)

removal by Jake Doevan - -   Also known as Bundespolizei Ukash virus, Bundespolizei ransomware | Type: Ransomware

Virus Bundespolizei is a German ransomware that should never be trusted no matter what it claims or does. As soon as this virus gets inside the system, it displays a large alert titled: “BUNDESPOLIZEI Achtung! Ein Vorgang illegaler Aktivitaten wurde erkannt” what can be translated to something like German Federal Police caught you violating various laws. In order to look more trustworthy, Virus Bundespolizei displays your IP address on this alert and locks the system completely down. The reason of doing all this unwanted activity is really simple – Virus Bundespolizei seeks to convince its victims to pay a 100 euro fine in exchange for the unlock code. However, this ransomware should never be trusted no matter what it claims because it seeks only to get your money and credit card details. If you have also been infected with Virus Bundespolizei, ignore its alert because it claims completely misleading information. Keep in mind that legitimate organizations, such as Federal Police, don't warn their victims in such way and don't lock their computers.

Virus Bundespolizei distribution ways:

Virus Bundespolizei is usually installed with a help of trojan horses that comes together with spam emails or from the hacked websites that spread such viruses. This infiltration is noticed by the victim only when he is completely locked down and displayed a large alert stating that you have been watching porn and doing other illegal activities while browsing the Web. In addition, this alert offers to pay a fine if you want to unlock your machine through Ukash or Paysafecard systems. However, you are highly recommended to ignore this alert and remove Virus Bundespolizei from your computer.

Virus Bundespolizei removal guide:

When trying to remove Virus Bundespolizei, you may find yourself completely disabled from doing that. However, running a full system scan with reputable anti-malware tool, such as Malwarebytes MalwarebytesCombo Cleaner or Reimage will help you to fix your computer. You just need to follow these steps:

1. Take another machine and use it to download Reimage or other reputable anti-malware program.

2. Update the program and put into the USB drive or simple CD.

3. In the meanwhile, reboot your infected machine to Safe Mode with command prompt and stick USB drive in it.

4. Reboot computer infected with FBI ransomware once more and run a full system scan.

UPDATE: You can also use these options to remove Bundespolizei virus from your computer:

* Users infected with ransomware viruses are allowed to access other accounts on their Windows systems. If one of such accounts has administrator rights, you should be capable to launch anti-malware program.

* Try to deny the Flash to make your ransomware stop function as intended. In order to disable the Flash, go to Macromedia support and select 'Deny': After doing that, run a full system scan with anti-malware program.

* Manual Bundespolizei virus removal (special skills needed!):

  • Reboot you infected PC to 'Safe mode with command prompt' to disable Ukash virus (this should be working with all versions of this threat)
  • Run Regedit
  • Search for WinLogon Entries and write down all the files that are not explorer.exe or blank. Replace them with explorer.exe.
  • Search the registry for these files you have written down and delete the registry keys referencing the files.
  • Reboot and run a full system scan with updated Reimage to remove remaining virus files.
do it now!
Reimage (remover) Happiness
Reimage (remover) Happiness
Compatible with Microsoft Windows Supported versions Compatible with OS X Supported versions
What to do if failed?
If you failed to remove virus damage using Reimage, submit a question to our support team and provide as much details as possible.
Reimage is recommended to remove virus damage. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.
Alternative Software
Different security software includes different virus database. If you didn’t succeed in finding malware with Reimage, try running alternative scan with Malwarebytes.
Alternative Software
Different security software includes different virus database. If you didn’t succeed in finding malware with Reimage, try running alternative scan with Combo Cleaner.
Virus Bundespolizei snapshot
Virus Bundespolizei snapshotVirus Bundespolizei snapshotVirus Bundespolizei snapshotVirus Bundespolizei snapshot

About the author

Jake Doevan
Jake Doevan - Computer technology expert

If this free removal guide helped you and you are satisfied with our service, please consider making a donation to keep this service alive. Even a smallest amount will be appreciated.

Contact Jake Doevan
About the company Esolutions

Removal guides in other languages

  1. Red87 says:
    October 25th, 2012 at 1:19 pm

    I ran into this yesterday when someone brought their computer in to be fixed. Of note is that in addition to the IP and locked “Bundespolizei” screen with payment options, it had disabled the use of all removeable media and to the hard drive itself through Windows Explorer. Even when in safe mode you could not access any drives through explorer and would give errors saying the device could not be found, though the screen lock would not take effect in safe mode. When using an admin command prompt to navigate the folders were able to be accessed just fine and this was the only way I could find the delete the relevant files since access was blocked through explorer. It had installed itself into C:ProgramData(random text string). After deletion and a malwarebytes scan it came up clean and we couldnt find any remnants.

Your opinion regarding Virus Bundespolizei