Home Malware Programs Ransomware ‘Gobierno de España’ Ransomware

‘Gobierno de España’ Ransomware

Posted: October 9, 2013

Threat Metric

Ranking: 6,917
Threat Level: 1/10
Infected PCs: 4,047
First Seen: October 9, 2013
Last Seen: October 15, 2023
OS(es) Affected: Windows

The 'Gobierno de España' Ransomware is a Police Ransomware Trojan noted for locking Windows and accusing its victims of being involved in copyright infringement-related crimes. Although the 'Gobierno de España' Ransomware's screen-blocking warning message claims to be sent by the Spanish police, the 'Gobierno de España' Ransomware actually is a criminal program, and any ransom fee paid to the 'Gobierno de España' Ransomware is sent to criminals, rather than to the Spanish government. Like other forms of ransomware that block your PC usage, the 'Gobierno de España' Ransomware shouldn't be rewarded for its behavior, and SpywareRemove.com malware researchers recommend using safe system-booting techniques along with anti-malware programs to delete the 'Gobierno de España' Ransomware.

When the Police Aren't All that They Seem to Be

The 'Gobierno de España' Ransomware is a continuance of the ongoing saga of malware authors trying to take advantage of European Web surfers who might be inclined to take arbitrary pop-up warnings at their word – no matter how bad an idea that is. Formatted similar to other Spanish-based fake 'Police' Trojans like the The Policia Federal Virus, Dirección General de la Policía Ransomware or the Cuerpo Nacional de Policia Virus, the 'Gobierno de España' Ransomware also pretends to have the authority of the Spanish government. However, the reality is that 'Gobierno de España' Ransomware actually is an illegal Trojan that attacks PCs at random, regardless of whether or not the affected computers have been used to commit crimes of any kind.

The 'Gobierno de España' Ransomware modifies the Registry to allow its pop-up alert to display automatically, claiming that the affected computer has been locked temporarily because of its ties to illegal online activities. The 'Gobierno de España' Ransomware asks you to spend a hundred Euro to pay the fine, and also warns that a failure to pay within two days will result in other legal penalties. Of course, the 'Gobierno de España' Ransomware can't call the police for your failure to pay this ransom, and malware experts haven't observed any side effects of ignoring 'Gobierno de España' Ransomware's unlawful demand.

Brushing the Badge of the 'Law' Off of Your Desktop

The 'Gobierno de España' Ransomware doesn't need to be paid off to be removed, although SpywareRemove.com malware experts do recommend deleting the 'Gobierno de España' Ransomware immediately – since the 'Gobierno de España' Ransomware is a legitimate security issue. To overcome the pop-up and system lockdown associated with the 'Gobierno de España' Ransomware, you may use such basic security techniques as booting from a backup OS or switching into Safe Mode. From there, deleting the 'Gobierno de España' Ransomware should be as simple as running any anti-malware program of your choice, without any ransom payment required.

Infection vectors for the 'Gobierno de España' Ransomware and other fake Police Ransomware Trojans often use multiple PC threats to deliver the ultimate payload. Spam e-mail attachments and suspicious sites that may host exploits both should be considered especially likely sources of the 'Gobierno de España' Ransomware infections, which are, naturally, installed without your consent.

Technical Details

Additional Information

The following URL's were detected:
fhjnmlfolmggpdbbgpmmlfdebbfainkm
The following messages's were detected:
# Message
1El ordenador se ha bloqueado
La actividad de su ordenador fue detenido a causa del la ciberactividad no autorizada. […]
La pena pecuniaria es de 100 EUR. Debe pagarla durante 48 horas despues del bloqueo del ordenador. Si la multa no es pagada, sera iniciada la causa penal contra usted sin derecho de pagar la pena pecuniaria. Su ordenador sera confiscado por el Depratamento de Lucha contra la Ciberactividad (dentro de 48 horas).

Loading...