Europol Interpol Virus
Written by Tomas Meskauskas
Damage level: Severe
Europol Interpol "Ihr Internet Service Provider blockiert" virus - how to unlock your computer?
Europol Interpol message "Ihr Internet Service Provider blockiert" which blocks computer's screen and accuses computer users of watching child pornography is a scam - it's a ransomware virus which is created by Cyber criminals. The main purpose of this scam is tricking unsuspecting PC users into paying a fake fine of 100 Euro using PaySafeCard - what makes this ransomware virus especially rogue is the fact that it displays various child porn related images on the infected computer. This particular screen blocking message originates from a family of ransomware called Revoyem and is targeted at PC users from Germany.
Computer users should understand that none of real authorities including Europol and Interpol and using such screen blocking messages to collect fines for any law violations - if you see such message on your computer you can be sure that your operating system has been infected with a ransomware virus - paying the fine of 100 Euro would equal to sending one's money to Cyber criminals. Cyber criminals are exploiting various names of authorities around the world and using legitimate pre-paid card services (PaySafeCard, Ukash, MoneyPak etc.) to collect the non existent fines. Notice that Europol and Interpol are just one of many names which are being used by Cyber criminals, previously discovered ransomware viruses were exploiting the names of FBI Cybercrime Division, RCMP, AFP, United Kingdom Police and many other. Never trust a message which blocks computer's screen and asks to pay a fine in order to unblock it - this is a standard behavior of a ransomware virus.
Europol Interpol "Ihr Internet Service Provider blockiert" ransomware virus is being spread using exploit kits which infiltrate user's computers using found security vulnerabilities, after infiltration exploit kits enables Cyber criminals to have a remote access of the infected machine - one of rogue methods used to gain financial benefits from the infected computers network is injecting a malicious code which then executes a ransomware virus. Cyber criminals are making money from every PC user who falls for the deceptive message and pays the non existent fine in order to unlock their computers. Europol Interpol "Ihr Internet Service Provider blockiert" message is a total scam, don't trust it and use the provided removal guide to eliminate it from your computer.
Europol Interpol virus removal:
Windows XP and Windows 7 users: During your computer starting process press F8 key on your keyboard multiple times until Windows Advanced Options menu shows up, then select Safe mode with networking from the list and press ENTER.
Video showing how to start Windows 7 in "Safe Mode with Networking":
Windows 8 users: Go to Windows 8 Start Screen, type Advanced, in the search results select Settings. Click on Advanced startup options, in the opened "General PC Settings" window select Advanced startup. Click on "Restart now" button. Your computer will now restart into "Advanced Startup options menu". Click on the "Troubleshoot" button, then click on "Advanced options" button. In the advanced option screen click on "Startup settings". Click on the "Restart" button. Your PC will restart into Startup Settings screen. Press "5" to boot in Safe Mode with Command Prompt.
Video showing how to start Windows 8 in "Safe Mode with Networking":
Log in to the account that is infected with Europol Interpol virus. Start your Internet browser and download a legitimate anti-spyware program. Update the anti-spyware software and start a full system scan. Remove all the entries that it detects.
If you can't start your computer in safe mode with networking, try doing a system restore.
Video showing how to remove ransomware virus using "Safe Mode with Command Prompt" and "System Restore":
1. Start your computer in Safe Mode with Command Prompt - During your computer starting process press F8 key on your keyboard multiple times until Windows Advanced Options menu shows up, then select Safe mode with command prompt from the list and press ENTER.
2. When command prompt mode loads enter the following line: cd restore and press ENTER.
3. Next type this line: rstrui.exe and press ENTER.
4. In the opened window click "Next".
5. Select one of the available restore point and click "Next" (this will restore your computer's system to an earlier time and date, before the Europol Interpol ransomware infiltrated your PC).
6. In the opened window click "Yes".
7. After restoring your computer to a previous date download and scan your PC with a recommended malware removal software to eliminate any left remnants of Europol Interpol virus.
If you can't start your computer in safe mode with networking (or with command prompt) you should boot your computer using a rescue disk. Some variants of ransomware disables safe mode making it's removal more complicated. For this step you will need access to another computer. After removing Europol Interpol virus from your PC restart your computer and scan it with a legitimate anti-spyware software to remove any possibly left remnants of this security infection.
Other tools known to remove Europol Interpol virus: