Luxembourg Police scam - Ukash Virus

"Luxembourg Police Cybercriminalite Departement" ransomware - how to unlock your computer?

Luxembourg Police Cybercriminalite Departement ransmoware is jet another security infections from a family called Reveton. It's a deceptive message asking to pay computer users a fine of 100 euro for supposedly made law violations. This ransomware completely locks computer user's screen and states that this was done to stop illegal activity such as watching pornography, downloading copyrighted material etc. Notice that this particular screen locker is using the graphics and the name of Luxembourg Police Cybercriminalite Departement. In reality Luxembourg Police has nothing to do with this ransomware, this message was designed by Cyber criminals which a sole purpose of scaring PC users into paying a non existent fine for something that they haven't done.

Reventon ransomware is infamous for it's localisation capabilities - this security infection detects computer's IP address and presents it's user with a translated version of the deceptive message. Moreover Cyber criminals have added localised graphics to the header of their scam messages. For example if PC users from USA would have got their computers infected with this ransomware, the header of this scam would be changed to FBI graphics and the message would be translated to English language. 

Computer users from Luxembourg shouldn't be scared by this message, it's a scam - no authorities including Luxembourg Police are using such methods (locking the PC user's screen) to collect fines for law infringements. Notice that recently discovered ransomware targeted at PC users from Luxembourg are exploiting the name of Service de Police Judiciaire. You shouldn't pay the fine of 100 euro - if you do you will send your money to Cyber criminals and your PC will remain locked. Most commonly such ransomware infections are being distributed using Trojans, fake software updates, malicious website and fake video codecs downloads. If your computer's screen is locked with such message you should use the provided removal guide to unlock your PC.

Ukash (Smart Voucher Limited) is a legitimate company and it's not related to ransomware viruses - Cyber criminals are using this service to escort money from unsuspecting PC users.

Fake message shown in Luxembourg Police Cybercriminalite Departement scam:

Votre ordinateur a été bloque!
Le fonctionnement de votre ordinateur est arrêté pour les signes de la cyberacdvité défendue. Les v-olations possibles commises sur votre ordinateur: Article 274 - Droit d'auteur Amende ou privation de liberté jusqu'à 4 ans (utilisation ou diffusion des fichiers protégés par le droit d'auteur - films, logiciel) Article 183- Production pornographique Amende ou privation de liberte jusqu'a 2 ans (Utilisation ou diffusion des fichiers pornographiques) Article 184 - Production pornographique avec participation des enfants (jusqu'à Pige de 18 ans( Privation de liberté Jusqu'à 15 ans (utilisation ou diffusion des fichiers pornographiques) Article 104- Vulgarisation du Terrorisme Privation de liberté Jusqu'à 25 ans (Vous avez visite des sites des organisations terroristes) Article 297 - Usage négligent de l'ordinateur ce qui a entrainé des conséquences sérieuses Amende ou privation de fberte jusqu'a 2 ans (Votre ordinateur est infecté par le virus a son tour, a infecté d'autres ordinateurs) Article 108- Jeux de hasard Amende ou privation de liberté jusqu'à 2 ans (Vous avez joué aux jeux de hasard, mais d'après la loi de votre pays le business de hasard est interdit) En vertu de la décision du Gouvernement du 22 août, tous ces délits peuvent être jugés comme conventionnels en cas du paiement de l'amende. La somme de l'amende fait 100 euros. Le paiement doit être produit pendant 48 heures, après la révélation de la v:olabon. Si l'amende n'est pas payée, une action pénale sera automatiquement ouverte contre votre personne.
votre ordinateur sera débloqué après le paiement de l'amende.

Luxembourg Police Cybercriminalite Departement scam removal:

Step 1

During your computer starting process press F8 key on your keyboard multiple times until Windows Advanced Options menu shows up, then select Safe mode with networking from the list and press ENTER.

Step 2

Log in to the account that is infected with Luxembourg Police Cybercriminalite Departement scam. Start your Internet browser and download a legitimate anti-spyware program. Update the anti-spyware software and start a full system scan. Remove all the entries that it detects.

remover for Luxembourg Police Cybercriminalite Departement scam

After completing these steps your computer should be clean, reboot your computer in normal mode.

Alternative Luxembourg Police Cybercriminalite Departement scam removal guide:

If this ransomware blocks your screen when you start your computer in safe mode with networking, try starting your PC in safe mode with command prompt.

1. Start your computer in Safe Mode with Command Prompt - During your computer starting process press F8 key on your keyboard multiple times until Windows Advanced Options menu shows up, then select Safe mode with command prompt from the list and press ENTER.

2. When command prompt mode loads enter the following line: cd restore and press ENTER.

3. Next type this line: rstrui.exe and press ENTER.

4. In the opened window click "Next".

5. Select one of the available restore point and click "Next" (this will restore your computer's system to an earlier time and date, before the ransomware infiltrated your PC).

6. In the opened window click "Yes".

7. After restoring your computer to a previous date download and scan your PC with a recommended anti-spyware software to eliminate any left remnants of Police Cybercriminalite Departement virus.

remover for Luxembourg Police Cybercriminalite Departement scam

If you can't start your computer in safe mode with networking (or with command prompt) you should boot your computer using a rescue disk. Some variants of ransomware disables safe mode making it's removal more complicated. For this step you will need access to another computer. After removing Luxembourg Police Cybercriminalite Departement scam from your PC restart your computer and scan it with a legitimate antispyware software to remove any possibly left remnants of this security infection.

Other tools known to remove Luxembourg Police Cybercriminalite Departement scam:

• iS3 STOPzilla
• Malwarebytes Anti-Malware

Other methods which can be used to eliminate this ransomware infection from your PC:

Remove Police Cybercriminalite Departement virus using a Rescue Disk.

Some malicious software modifies browser settings and disables downloads of spyware and virus removing software. If you have problems downloading anti-spyware software with Internet Explorer, try downloading with Chrome, FireFox, Opera, etc.

If you can't access Internet:

Load your computer in safe mode. Click Start, click Shut down, click Restart, click OK. During your computer starting process press F8 key on your keyboard multiple times until you see Windows Advanced Option menu, then select Safe mode with networking from the list.

Start Task manager. Press ctrl+alt+del (or ctrl+shift+esc) and end task the processes of rogue program. ( if after this procedure you can't access any programs press ctrl+alt+del, click File, select New Task, and type explorer.exe then press OK.

Open Internet explorer, click Tools and select Internet Options. Select Connections, then click LAN settings, if a Use a proxy server for your LAN is checked, un-check it and press OK.

After this procedure you should be able to access Internet. Now you can download anti-spyware software from our "Top spyware removers" section and run a full scan. Download, install and don't forget to update your selected anti-spyware program.

Manual Luxembourg Police Cybercriminalite Departement scam removal:

If you were unable to remove Luxembourg Police Cybercriminalite Departement scam using the steps above, you can use this manual removal instruction. Use it at your own risk. If you don't have strong computer knowledge you could harm your operating system. Be careful and use it only if you are an experienced computer user. (Instructions on how to end processes, remove registry entries...)

End these Luxembourg Police Cybercriminalite Departement scam processes:

random.exe

Delete these Luxembourg Police Cybercriminalite Departement scam files:

%Temp%\<random>.exe
%StartupFolder%\ctfmon.lnk