Sacem Virus

What is Sacem?

The Sacem message ("Ordinateur est verrouillé") blocks computer users' screens, demanding payment of a 100 Euro fine. This is a scam. These messages are called ransomware and employed by cyber criminals to trick PC users into paying bogus fines for supposed law violations.

This particular ransomware states that a fine must be paid for downloading copyrighted music files from the Internet. Note that Sacem is an organization from France, which protects, represents, and provides services for, music authors and composers. This organization is in no way related to messages that block computer screens.

The Sacem “Ordinateur est verrouillé" ransomware originates from a family called Gimemo and targets PC users predominantly from France.

Other variants of ransomware from this family, target different countries and exploit the names of other music copyright-related organizations. For example, PC users from the Netherlands observe this message as if sent by Buma Stemra, etc.

This localisation is possible due to the ransomware infection's capability to detect the IP address of the computer it is about to infiltrate. If your computer screen is blocked by the Sacem “Ordinateur est verrouillé" message, your PC is infected with ransomware. This is a scam and users should not pay any fines demanded by this message.

Paying the fine as demanded by the Sacem “Ordinateur est verrouillé" message is equivalent of sending money directly to cyber criminals. Note that there are several ransomware families targeting computer users from France.

The following are examples of two authority names exploited by cyber criminals to trick PC users into paying bogus fines: Office Central de Lutte Contre la Criminalite, MINISTÈRE DE L'INTÉRIEUR, and many others.

Computer users should be aware that no international authorities or organizations use messages to block computer screens in order to collect fines for any law violations. If you see this type of message blocking your screen, use the removal guide provided to eliminate this scam.

A fake message displayed by the Sacem ransomware:

Des morceaux de musique téléchargés illégalement (piratés) ont été localisés sur votre ordinateur.
En téléchargement ces morceaux de musique vous avez effectue ainsi une infraction pénale en vertu de l'article 106 de la Loi sur le droit d'auteur.
Le téléchargement des pistes de musique protégés soit via l'Internet ou via les réseaux de partage de musique est illégal e est en conformité avec l'article 106. la loi, sous réserve du droit d'auteur à une amende ou un emprisonnement pour une peine pouvant aller jusqu'à 3 ans. En outre, la possession de morceaux de musique téléchargés illégalement est sanctionné par l'article I. a huée 3 du Code criminel e peut aussi conduire à la confiscation de l'ordinateur, avec laquelle les fichiers qui ont été téléchargés.

Instant automatic malware removal: Manual threat removal might be a lengthy and complicated process that requires advanced IT skills. Combo Cleaner is a professional automatic malware removal tool that is recommended to get rid of malware. Download it by clicking the button below:
▼ DOWNLOAD Combo Cleaner By downloading any software listed on this website you agree to our Privacy Policy and Terms of Use. To use full-featured product, you have to purchase a license for Combo Cleaner. 7 days free trial available. Combo Cleaner is owned and operated by Rcs Lt, the parent company of PCRisk.com read more.

Quick menu:

• What is Sacem?
• STEP 1. "Sacem" virus removal using safe mode with networking.
• STEP 2. "Sacem" ransomware removal using System Restore.

Sacem virus removal:

Step 1

Start your computer in Safe Mode. Click Start, click Shut Down, click Restart, click OK. During your computer starting process press the F8 key on your keyboard multiple times until you see the Windows Advanced Option menu, then select Safe Mode with Networking from the list.

Video showing how to start Windows 7 in "Safe Mode with Networking":

Step 2

Log in to the account infected with Sacem virus. Start your Internet browser and download a legitimate anti-spyware program. Update the anti-spyware software and start a full system scan. Remove all entries detected.

If you cannot start your computer in Safe Mode with Networking, try performing a System Restore.

Video showing how to remove a ransomware virus using "Safe Mode with Command Prompt" and "System Restore":

1. During your computer starting process, press the F8 key on your keyboard multiple times until the Windows Advanced Options menu appears, and then select Safe Mode with Command Prompt from the list and press ENTER.

2. When Command Prompt Mode loads, enter the following line: cd restore and press ENTER.

3. Next, type this line: rstrui.exe and press ENTER.

4. In the opened window click "Next".

5. Select one of the available restore points and click "Next" (this will restore your computer system to an earlier time and date, prior to the ransomware infiltrating your PC).

6. In the opened window click "Yes".

7. After restoring your computer to a previous date, download and scan your PC with recommended malware removal software to eliminate any remnants of the Sacem virus.

If you cannot start your computer in Safe Mode with Networking (or with Command Prompt), boot your computer using a rescue disk. Some variants of ransomware disable Safe Mode, making its removal more complicated. For this step, you require access to another computer.

After removing the Sacem virus from your PC, restart your computer and scan it with legitimate anti-spyware software to remove any possible left of this security infection.

Other tools known to remove the Sacem virus:

• Malwarebytes Anti-Malware

▼ Show Discussion