Confédération Suisse Virus

What is Confédération Suisse Virus?

Confédération Suisse Virus is a ransomware infection that attacks users in Switzerland. It employs the usual tactics of ransomware infections from the same group by blocking your desktop, and demanding a ransom fee. Confédération Suisse Virus displays a notification on your desktop that is supposedly sent by Swiss Federal Office of Police, and you are accused of copyright infringement by downloading and illegally distributing copyrighted material. Unfortunately, a huge number of users do end up believing that their computers are locked, because they have been found out by the Swiss police, but that is very far from truth.

Confédération Suisse VirusConfédération Suisse VirusConfédération Suisse VirusConfédération Suisse VirusConfédération Suisse Virus

Where does Confédération Suisse Virus come from?

Confédération Suisse Virus is a variant of Bundesamt für Polizei virus. It is from the Ukash Virus group of ransomware infections that can be delivered by Reveton and Urausy trojans. However, trojans are not the only mean of distribution for Confédération Suisse Virus and other ransomware infections so be careful when you browse the Internet, and do not click on unknown outgoing links or flash advertisements that pop up into your screen. However, if you get infected with Confédération Suisse Virus in the end, it is important to remain calm and do not pay anything to this infection, because it will not unlock your computer no matter what it might say:

Ihr Computer wurde gesperrt!
Die Funktion Ihres Computer wurde aufgrund unerlaubter Internethandlungen auβer Kraftgesetzt.

[…]

Die Summe der Geldbuβe betrāgt 100 Euro. Die Bezahlung muss innerhalb von 48 Stunden nach Kundgabe des Verstoβes entrichtet wird, wird automatisch ein Strafverfahren gegen Sie eingeleitet.

Although Confédération Suisse Virus might give you a time limit to transfer the ransom fee via Ukash or PaySafeCard (it might be 48 or 72 hours), do not fret, because the infection cannot initiate a criminal case against you, even though it says so.

How to remove Confédération Suisse Virus?

In order to remove this ransomware infection, you need to unlock your computer first. Follow the instructions below to get your desktop back and proceed with Confédération Suisse Virus removal:

Windows Vista & Windows 7

  1. Restart your computer and press F8 continuously once BIOS screen loads.
  2. If you see Windows logo appear, restart the computer and try again.
  3. Use arrow keys to navigate and select Safe Mode with Networking. Press Enter.
  4. Go to http://www.anti-spyware-101.com/download-sph and download SpyHunter.
  5. Install the program and proceed with a full system scan.

Windows XP

  1. Follow the steps above from 1 to 3.
  2. Click Yes when a confirmation box appears.
  3. Download SpyHunter.
  4. Click Start Menu button and launch Run.
  5. Enter “msconfig” into Open box and press OK.
  6. Click Startup tab on System Configuration Utility.
  7. Un-check all programs on the list and click OK to save changes.
  8. Restart your computer in Normal Mode.
  9. Install SpyHunter and run a full system scan.

Should you have any questions regarding this infection, do not hesitate to leave us a comment below.

QR Code 100% FREE spyware scan and
tested removal of Confédération Suisse Virus*

Stop these Confédération Suisse Virus Processes:

pmstcdjwz.exe
install_0_msi.exe
iner.exe
oygqyunapnp.exe
sqlncli.exe
wahneaqa.exe
idiokbbrv.exe
rvcbcyks.exe
ctfmon.exe
ubvhynpxh.exe
dtkmujvo.exe
VaultSysUi.exe
JfCqQ5JC.exe
bvhylsviw.exe
Firewallservice.exe
zqmkrehUkpoKfsafsaZg.exe
b34btbztdb0vavaw.exe
MusicCollector.exe
csrsss.exe
securitywindrv.exe
scvhost.exe
taskhost.exe.exe
cf6640a77ed4926a4c6be661ab93def9d13408753dd07e8d02836996a2f247b6.exe
WINDED6.exe
Nbt.exe
msshell.exe
3511172082012Build.exe
m2PythonLoader.exe
systemcpl.exe
uenovfiu.exe
wlsidten.exe
mplayer2.exe
ifgxpers.exe
crack.exe
dyjdl.exe
50E1.exe
Piranha.exe
Updating.exe
videotwisterSA.exe
p1.exe
00b5d693.exe
brenasa.exe
UpdatePriv.exe
xmlfilter.exe
SyncHostps.exe
WinSyncMetastore.exe
pYunY8m4VL3qLc.exe
OmaSG21e.exe
gcrwcoak.exe
xlqbteeb.exe
C87C.exe
msn.exe
secproc_isv.exe
TimeDateMUICallback.exe
rool0_pk.exe
svchost.exe
UpgradeHelper.exe
comeo.exe
Task Scheduler.exe
obvwo.exe
00qbipeq.exe
setex.exe
acuvzomo.exe
ssntvs.exe
msnmsgrr.exe
DA0B.exe
87b2cb3916261d5c807bf44262755cb0.exe
wgsdgsdgdsgsd.exe
NTServiceManager.exe
Q3d38543.exe
msdtmsrd.exe
aPr0hY9.exe
administration.exe
魔法桌面第三方主题破解补丁V1.1.exe
bzsbkotiu.exe
najeoxtt.exe
xaZYOVJW.exe

Remove these Confédération Suisse Virus Files:

WinSyncMetastore.exe
scvhost.exe
rool0_pk.exe
brenasa.exe
setex.exe
Piranha.exe
cf6640a77ed4926a4c6be661ab93def9d13408753dd07e8d02836996a2f247b6.exe
%WINDIR%\Temp
00b5d693.exe
jucheck.dll
b34btbztdb0vavaw.exe
videotwisterSA.exe
bvhylsviw.exe
iner.exe
yaiiwockc.dll
MusicCollector.exe
xmlfilter.exe
wjthvwjb.dss
hwj3ba6j.dss
msn.exe
aPr0hY9.exe
rvcbcyks.exe
sqlncli.exe
administration.exe
svchost.exe
pYunY8m4VL3qLc.exe
WINDED6.exe
SyncHostps.exe
3511172082012Build.exe
魔法桌面第三方主题破解补丁V1.1.exe
dqnbdq7.dss
%SystemDrive%\????????????
install_0_msi.exe
idiokbbrv.exe
securitywindrv.exe
msnmsgrr.exe
%LOCALAPPDATA%\lollipop
%ALLUSERSPROFILE%
msqjrothu.pif
msdtmsrd.exe
UpgradeHelper.exe
secproc_isv.exe
csrsss.exe
xlqbteeb.exe
%APPDATA%\updates
questscan.dll
OmaSG21e.exe
flashplayer.dll
opera.dll
TimeDateMUICallback.exe
jsdhlexdqkllnbcxgai.bfg
mplayer2.exe
wlsidten.exe
p1.exe
m2PythonLoader.exe
comeo.exe
96dddda4.dll
Q3d38543.exe
%UserProfile%
Firewallservice.exe
%APPDATA%\system
C87C.exe
dyjdl.exe
ex3b.dll
NTServiceManager.exe
%AppData%
Updating.exe
%APPDATA%\Task Scheduler
obvwo.exe
puozlkmyj.dll
wpbt0.dll
systemcpl.exe
taskhost.exe.exe
msshell.exe
ACEIEAddOn.dll
JfCqQ5JC.exe
VaultSysUi.exe
ifgxpers.exe
xaZYOVJW.exe
bzsbkotiu.exe
%TEMP%
ctfmon.exe
ubvhynpxh.exe
DLL321.dll
ieudator.dll
%LOCALAPPDATA%\Temp
50E1.exe
Other.res
n.
uenovfiu.exe
wgsdgsdgdsgsd.exe
UpdatePriv.exe
oygqyunapnp.exe
Nbt.exe
dtkmujvo.exe
%ALLUSERSPROFILE%\Application Data
wahneaqa.exe
skype.dat
Task Scheduler.exe
00qbipeq.exe
87b2cb3916261d5c807bf44262755cb0.exe
MWSBAR.DLL
acuvzomo.exe
najeoxtt.exe
crack.exe
wlsidten.dll
ssntvs.exe
zqmkrehUkpoKfsafsaZg.exe
2084473.dll
%CommonProgramFiles%
%WINDIR%\system32
pmstcdjwz.exe
DA0B.exe
gcrwcoak.exe
Disclaimer
Disclaimer

Leave a Comment

Enter the numbers in the box to the right *