How to Remove Bundespolizei Police Ransomware Virus Manually

Step-by-Step Guide

1. 1

   Step 1: Restart your computer.

   If your computer isn’t working properly enough to run its own restart, force one by hitting the restart button (if you have one) or by turning the power button off and then back on.
2. 2

   Step 2: As the computer starts back up

   This will open an Advanced Options menu.
   
   Tapping the key several times will increase your odds of sending the command at the right moment.
   
   Note that if you hit F8 too soon on certain operating systems, you may get a keyboard error message and have to restart the computer; if you hit it too late, Windows will simply open normally and you’ll have to try again. , When you log in, you will see a command window (cmd.exe).
   
   This will allow you to modify the computer while still in safe mode. , (Do not type the quotation marks.) Only do this step if you already know or could easily recognize executable files associated with the virus.
   
   Go to the Processes tab to find and end all processes associated with the virus.
   
   Simply click on the process and hit End Process at the bottom right-hand corner of the window.
   
   If you aren’t sure whether or not a process is associated with the virus, don’t end it.
   
   Close the Task Manager.
   
   This will take you back to the command window. , (Again, do not type the quotation marks.) This will open the Registry Editor. , The full directory is “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon.” ,, A dialogue box should pop up that gives you the value name (Shell) and the value data (C:\Documents and Settings\YOUR USERNAME\desktop\VIRUS INFO.exe). , (Again, do not type the quotation marks.) This restores the default value. , (Ex. “contacts.exe,” “jashla.exe,” “mahmud.exe,” etc.) Make sure that Keys, Values, and Data are all checked in the Find options. , Hit Find Next to find a registry key containing your virus info, then right-click the name and choose Delete.
   
   Do this until there are no more registry keys associated with this virus. , You should now be back at the command window. , (Again, do not type the quotation marks.) This will restart your computer in normal mode. ,,,,,,, When the virus reappears after reboot, you know where the virus is hiding
3. 3

   Step 3: tap the F8 key.

4. 4

   Step 4: Choose “Safe Mode with Command” from the Advanced Options menu.

5. 5

   Step 5: Optional Step: Type “Taskmgr.exe” and press enter to open the Task Manager.

6. 6

   Step 6: Type "Regedit" and press enter.

7. 7

   Step 7: Locate a folder named “Winlogon” in the panel to the left.

8. 8

   Step 8: In the panel to the right

9. 9

   Step 9: find the registry key named “Shell.” The complete filename should be something like “C:\Documents and Settings\username\desktop\VIRUS INFO.exe.” Though the virus-info portion of the filename will be different for different computers

10. 10

    Step 10: common examples include “contacts.exe

11. 11

    Step 11: ” “jashla.exe

12. 12

    Step 12: ” and “mahmud.exe.” Write down this information: you will need it again later.

13. 13

    Step 13: Right-click the word “Shell” and choose Modify.

14. 14

    Step 14: Modify the value data to read “Explorer.exe” and hit okay.

15. 15

    Step 15: Go to Edit > Find and type the virus info you wrote down earlier.

16. 16

    Step 16: Find and delete all the virus’s registry keys.

17. 17

    Step 17: When you’re done

18. 18

    Step 18: exit the registry editor.

19. 19

    Step 19: Type “shutdown /r /t 0” and hit Enter.

20. 20

    Step 20: If this doesn't work or you cannot find any entries related to the 'Police' virus

21. 21

    Step 21: Reboot your PC in safe mode (tapping F8 key whilst booting)

22. 22

    Step 22: - Go to Start -> Run and type 'msconfig'

23. 23

    Step 23: - In the folder Boot Options turn of everything

24. 24

    Step 24: - Save

25. 25

    Step 25: - Reboot your PC

26. 26

    Step 26: Virus gone

27. 27

    Step 27: You can leave it this way or repeat steps above and turning on the options one by one.

Detailed Guide

About the Author