'Die offizielle Mitteilung des Bundeskriminalamtes' Fake Message

'Die offizielle Mitteilung des Bundeskriminalamtes' Fake Message Description

'Die offizielle Mitteilung des Bundeskriminalamtes' is a fake warning message and a Trojan ransomware attacking Internet users in Germany. 'Die offizielle Mitteilung des Bundeskriminalamtes' replaces the Windows desktop with a fake warning from the German Federal Police declaring that child pornography has been detected on your computer. 'Die offizielle Mitteilung des Bundeskriminalamtes' states the PC system will be unlocked on payment of 100 Euros in Ukash vouchers within 24 hours. If you don't pay the ransom, your files will be deleted. However, 'Die offizielle Mitteilung des Bundeskriminalamtes' is not able to do this. Cyber-crooks behind the 'Die offizielle Mitteilung des Bundeskriminalamtes' want to intimidate you into paying the ransom. 'Die offizielle Mitteilung des Bundeskriminalamtes' Trojan blocks pretty much everything on your computer, so you can't use Task Manager or any other Windows utility to disable this Trojan ransomware, at least in Normal Mode and Safe Mode. You can restart your computer in Safe Mode with Command Prompt and remove the 'Die offizielle Mitteilung des Bundeskriminalamtes' Trojan manually.

Technical Information

Registry Details

'Die offizielle Mitteilung des Bundeskriminalamtes' Fake Message creates the following registry entry or registry entries:
RegistryKey
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\"Shell" = "[SET OF RANDOM CHARACTERS].exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\"CleanShutdown" = "0"

Leave a Reply

Please DO NOT use this comment system for support or billing questions. For SpyHunter technical support requests, please contact our technical support team directly by opening a customer support ticket via your SpyHunter. For billing issues, please refer to our "Billing Questions or Problems?" page. For general inquiries (complaints, legal, press, marketing, copyright), visit our "Inquiries and Feedback" page.