Buma Stemra Virus

By Domesticus in Malware | 4,696 views
Rate it:
1 Star2 Stars3 Stars4 Stars5 Stars (2 votes, average: 4.50 out of 5)
Loading ... Loading ...
More... More

Buma Stemra Virus Description

Image Screenshot

[+] Click Image to Enlarge

The Buma Stemra Virus has nothing to do with the legitimate Buma Stemra organization. Buma Stemra is an organization located in The Netherlands. This organization is mainly concerned with protecting the rights of Dutch musicians and composers. Buma Stemra has been involved in high-profile cases against file-sharing websites in order to prosecute those people violating copyright law in The Netherlands. On the other hand, if there is one factor that this organization does not do, is send threatening messages to computer users, blocking their computers unless they pay a fifty Euro fine for supposedly violating copyright law. According to ESG security analysts, that is exactly what the Buma Stemra Virus does. This Winlocker (a malware threat that basically locks the computer user out of their own computer by preventing access to the Windows desktop and Task Manager) consists of a message that supposedly comes from the Dutch Police and the Buma Stemra organization. This in this message, the Buma Stemra Virus threatens computer users, attempts to extort a fifty Euro fine and block their computer until this fine is paid.

Do Not Fall for the Buma Stemra Virus Scam

The Buma Stemra Virus basically displays a message that is entirely in Dutch and that may be confusing to computer users from other countries. This message is highly authentic-looking and contains the logos for various organizations on the right side. In the body of the message, Buma Stemra Virus claims that the victim’s computer has been involved in copyright law violation and that the contents of that computer have been blocked by the Dutch police and the Buma Stemra organization. Since even watching certain videos on YouTube can technically comprise a copyright violation, many inexperienced computer users may feel guilty enough to fall for the Buma Stemra Virus scam.

However, it is important to understand that legitimate law enforcement organizations will never use these kinds of messages or tactics, so you will not have another choice but to pay a fine. The Buma Stemra Virus is simply one of countless variations on the Metropolitan Police scam. These are a series of messages claiming to come from various official law enforcement agencies in the European Union. Targeting computer users from a particular country, these messages accuse computer users of everything, from dealing in child pornography to being involved in money laundering schemes. All those messages use the same kind of intimidation; like the Buma Stemra Virus, they threaten the victim with jail time, loss of data and the loss of their computer system unless the victim pays a fine (usually anywhere from fifty to one-hundred Euros) which is usually charged via a money transfer service like Ukash or through prepaid cards. Do not fall for this scam! Removing the Buma Stemra Virus is as easy as starting up in Safe Mode and running a full scan with an anti-virus utility.

Type: Viruses

How Can You Detect Buma Stemra Virus?

Buma Stemra Virus Removal Details

Buma Stemra Virus has typically the following processes in memory:

  • %Temp%\\[RANDOM CHARACTERS].exe

Buma Stemra Virus creates the following files in the system:

  • %Desktop%\[Buma Stemra Politie].lnk
  • %CommonStartMenu%\Programs\[RANDOM CHARACTERS].lnk

Buma Stemra Virus creates the following registry entries:

  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “d31ybB8YFv9Uxg”

Important Article Disclaimer

ESG Support Center

This entry was last updated on 10/1/12 and posted on 03/7/12. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.

Leave a Comment

Note: Abusive comments are not allowed. Please do not post comments regarding technical support issues. ESG customers that have issues with SpyHunter should open a customer support ticket.

*
To prove you're a person (not a spam script), type the security word shown in the picture. Click on the picture to hear an audio file of the word.
Click to hear an audio file of the anti-spam word

Home | SpyHunter Risk Assessment Model | Privacy Policy | End User License Agreement | Additional Terms and Conditions
Copyright 2003-2012. Enigma Software Group USA, LLC. All Rights Reserved.