Home Malware Programs Ransomware ‘Bundespolizei Achtung! Ein Vorgang illegaler’ Fake Alert

‘Bundespolizei Achtung! Ein Vorgang illegaler’ Fake Alert

Posted: May 6, 2011

Bundespolizei Achtung! Ein Vorgang illegaler Screenshot 1'Achtung!!! Ein Vorgang illegaler Aktivitaten wurde erkannt' is a fake notification that's used to hold your PC hostage; the Trojan that created this notification will also proceed to request for money while threatening you with legal action from the BKA. 'Bundespolizei Achtung! Ein Vorgang illegaler' Trojans will make accusations of pornographic-trafficking so that their claims of software-blocking look justified, but these Trojans are unaffiliated with any legal authority and lack any goal other than scaring a ransom fee out of their victims. Even though 'Achtung!!! Ein Vorgang illegaler' error screens will attempt to block your ability to access Windows, SpywareRemove.com malware experts are pleased to note that you can re-access Windows and delete ransomware Trojans by using baseline anti-malware procedures and software.
 

A Fake BKA Notice That Demands Real Euros for Troubling You

 The 'Achtung!!! Ein Vorgang illegaler' fake message, which is also identified as 'Bundespolizei 'Achtung!!! Ein Vorgang illegaler Aktivitaten wurde erkannt' fake nofitication or Trojan.Ransom Fake Federal German Police (BKA) notice variante, use a combination of fake message screens and system lockouts to portray a realistic ransom attempt. Although almost all of an 'Achtung!!! Ein Vorgang illegaler Aktivitaten wurde erkannt' error screen is in German and makes reference of German legal authorities; non-German computers are also in danger of 'Achtung!!! Ein Vorgang illegaler Aktivitaten wurde erkannt' attacks. However, SpywareRemove.com malware researchers have found that the Trojan associated with 'Achtung!!! Ein Vorgang illegaler Aktivitaten wurde erkannt' focuses on Windows operating systems, which may grant non-Windows computers a certain level of immunity.
 
Like a typical example of a ransomware Trojan, the Trojan associated with 'Bundespolizei Achtung! Ein Vorgang illegaler' will immediately block your ability to use your operating system and display a misleading error message about the event. 'Achtung!!! Ein Vorgang illegaler Aktivitaten wurde erkannt' errors will try to portray the system-freezing attack as a justified one that can be lifted by paying 100 Euros (or 150 Swiss Francs, depending on Trojan's variant). However, there's no need to pay this fine, since ransomware Trojans aren't capable of detecting illegal activities and have no affiliations with the BKA (the Federal German Police).
 
'Bundespolizei Achtung! Ein Vorgang illegaler' errors can be recognized very easily by watching out for the following message:
 
Achtung!
Ein Vorgan illegaler Aktivitaten wurde erkannt. Das Betriebssystem wurde im Zusammenhang mit Verstossen gegen die Gesetze der Bundesrepublik Deutschland gesperrt!

 
This message is accompanied by what appears to be a total lockout on your PC, but SpywareRemove.com malware analysts have noted ways of removing Trojans being peddled by 'Achtung!!! Ein Vorgang illegaler Aktivitaten' without paying their fraudulent ransom.
 

How to Slip Your PC Free of This Trojan's Ironclad Grasp

While an 'Bundespolizei Achtung! Ein Vorgang illegaler' ransomware infection may cause you to feel utterly-helpless, there's no need to pay even a single Euro to get your PC back from this Trojan. If you find yourself staring at an 'Achtung!!! Ein Vorgang illegaler' error screen after a reboot, make an effort at the following ways to redeem your PC:

  • Reboot into Safe Mode by hitting F8 before Windows starts to load.
  • If Safe Mode fails to deactivate the ransomware Trojan, SpywareRemove.com malware researchers recommend that you boot Windows from an external gadget (like a USB thumb drive or a CD).
  • Once the ransomware Trojan has been deactivated by either one of these two methods, you should embark upon a complete system scan with an anti-malware program of your preference. Be certain that your scanner is up-to-date so that it can completely-identify the ransomware Trojan. You may need to repeat this procedure several times to fully-remove all infected components.

Bundespolizei Achtung Fake Alert Screenshot 2

File System Modifications

  • The following files were created in the system:
    # File Name
    1 [RANDOM CHARACTERS].exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Microsoft\Search Assistant\ACMru\5603HKEY_CURRENT_USER\Software\Microsoft\Search Assistant\ACMru\5603 "000 = [RANDOM].exe"HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICacheHKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache "[RANDOM].exe"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\WinlogonHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon "Shell = [RANDOM].exe"
Loading...