Removal guide Ransomware

Remove Ihr Computer Wurde Blockiert virus (Removal Guide)

By Stelian9 min read

The Ihr Computer wurde wegen Verstoßes gegen das Recht des Landes, Luxemburg blockiert worden Ukash Ransom is a computer virus, which will display a bogus notification, that pretends to be from Luxembourg police and states that your computer has been blocked due to it being involved with the distribution of pornographic material, SPAM and copyrighted content.
The Ihr Computer wurde wegen Verstoßes gegen das Recht des Landes, Luxemburg blockiert worden virus will lock you out of your computer and applications, so whenever you’ll try to log on into your Windows operating system, it will display instead a lock screen asking you to pay 100 Euro in the form of a Ukash or PaySafeCard code.
Furthermore, to make its alert seem more authentic, this virus also has the ability to access your installed webcam ,so that the bogus Ihr Computer wurde wegen Verstoßes gegen das Recht des Landes, Luxemburg blockiert worden notification shows what is happening in the room.
If your computer is infected with Ihr Computer wurde wegen Verstoßes gegen das Recht des Landes, Luxemburg blockiert worden virus,then you are seeing the below notification:
Ihr Computer Wurde Blockiert Ukash Ransom
The Ihr Computer wurde wegen Verstoßes gegen das Recht des Landes, Luxemburg blockiert worden Ransom is a scam and you should ignore any alert that this malicious software might generate and remove this trojan ransomware from your computer.
Under no circumstance should you send any money to this cyber criminals,as this could lead to identity theft,and if you have, you should contact your credit card company and dispute the charge stating that the program is a scam and a computer virus.

Advertisements

Ihr Computer wurde wegen Verstoßes gegen das Recht des Landes, Luxemburg blockiert worden Ukash Ransomware – Virus Removal Guide

STEP 1: Remove Ihr Computer Wurde Blockiert lock screen from your computer

The Ihr Computer Wurde Blockiert Ukash Ransomware has modified your Windows registry, so whenever you’re trying to boot your computer it will launch instead its bogus notification.To remove this malicious registry change,we can use any of the below methods:

Method 1: Remove Ihr Computer Wurde Blockiert virus with HitmanPro Kickstart

HitmanPro has updated their program and added a new feature called Kickstart,which will allow us to bypass this infection and access your computer to scan it for malware.

  1. We will need to create a HitmanPro Kickstart USB flash drive,so while you are using a “clean” (non-infected) computer, download HitmanPro from the below link.
    Download HitmanProOfficial Sophos download. Free scan, free 30-day trial to remove threats.
  2. Insert your USB flash drive into your computer and follow the instructions from the below video:
  3. After you have create the HitmanPro Kickstart USB flash drive, you can insert this USB drive into the infected machine and start your computer.
  4. Once the computer starts repeatedly tap the F11 key (on some machines its F10 or F2),which should bring up the Boot Menu, from there you can select to boot from your USB.
    Next,you’ll need to perform a system scan with HitmanPro as see in the below video:
  5. After HitmanPro Kickstart has completed its task,you should be able to boot in Windows normal mode,from there you’ll need to perform a system scan (as seen on STEP 2) with Malwarebytes Anti-Malware and HitmanPro to remove the malicious files from your machine.

Method 2: Restore Windows to a previous state using System Restore

IF HitmanPro Kickstart did not work on your machine, we can boot into Safe mode with a Command prompt and restore your computer to an earlier time.

  1. Restart your computer, and then press and hold F8 during the initial startup to start your computer in safe mode with a Command prompt.
    Note: With some computers, if you press and hold a key as the computer is booting you will get a stuck key message. If this occurs, instead of pressing and holding the “F8 key”, tap the “F8 key” continuously until you get the Advanced Boot Options screen.
  2. Use the arrow keys to select the Safe mode with a Command prompt option.
    Enter Safe Mode with Command Prompt
  3. At the command prompt, type cd restore, and then press ENTER.
    Next,we will type rstrui.exe , and then press ENTER
    System Restore commands
  4. The System Restore window will start and you’ll need to select a restore point previous to this infection.
    Restore points in Windows 7
  5. After System Restore has completed its task,you should be able to boot in Windows normal mode,from there you’ll need to perform a system scan (as seen on STEP 2) with Malwarebytes Anti-Malware and HitmanPro to remove the malicious files from your machine.

Method 3: Use a Kaspersky Kaspersky Rescue Disk CD to remove  Ihr Computer Wurde Blockiert lock screen

IF you cannot access Safe Mode with Command Prompt we will need to use a Kaspersky Rescue Disk Bootable CD to clean the Windows registry and to perform a system scan to remove the malicious files.
What you’ll need to perform this removal guide :

  1. A computer with Internet access.
  2. 1 blank DVD or CD
  3. 1 DVD/CD Burner
  4. Software which can create a bootable CD
  5. A copy of the latest Kaspersky Rescue Disc
  6. About 1 -2 hours depending on how much data you have on C:

STEP A: Download and create a bootable Kaspersky Rescue Disk CD

  1. Download the Kaspersky Rescue Disk ISOimage from below.
    Download Kaspersky Rescue DiskOpens the download page in a new tab.
  2. Download ImgBurn, a software that will help us create this bootable disk.
    Download ImgBurnOpens the download page in a new tab.
  3. You can now insert your blank DVD/CD in your burner.
  4. Install ImgBurn by following the prompts and then start this program.
  5. Click on the Write image file to disc button.
    Create bootable CD step1
  6. Under ‘Source’ click on the Browse for file button, then browse to the location where you previously saved the Kaspersky Rescue Disk ISO file.(kav_rescue_10.iso)
    Create bootable CD step2
  7. Click on the big Write button.
    Create bootable CD step3
  8. The disc creation process will now start and it will take around 5-10 minutes to complete.

STEP B:Configure the computer to boot from CD-ROM

On some machines,if you restart the computer and repeatedly tap the F11 key it should bring up the Boot Menu, from there you can select to boot from the CD.
IF this doesn’t happen then you’ll need to configure your computer to boot for a CD like you’ll see below.

Advertisements
  1. Use the Delete or F2 keys, to load the BIOS menu.Information how to enter the BIOS menu is displayed on the screen at the start of the OS boot:
    Boot into Bios
  2. In your PC BIOS settings select the Boot menu and set CD/DVD-ROM as a primary boot device.
    Boot into BIOS Step2
  3. Insert your Kaspersky Rescue Disk and restart your computer.

STEP C:Boot your computer from Kaspersky Rescue Disk

  1. Your computer will now boot from the Kaspersky Rescue Disk,and you’ll be asked to press any key to proceed with this process
    Kaspersky Rescue Disk 1
  2. In the start up wizard window that will open, select your language using the cursor moving keys. Press the ENTER key on the keyboard.
    Kaspersky Rescue Disk 2
  3. On the next screen, select Kaspersky Rescue Disk. Graphic Mode then press ENTER.
    Kaspersky Rescue Disk 3
  4. The End User License Agreement of Kaspersky Rescue Disk will be displayed on the screen. Read carefully the agreement then press the C button on your keyboard.
    Kaspersky Rescue Disk 4
  5. Once the actions described above have been performed, the Kasprsky operating system will start.
Advertisements

STEP D: Launch Kaspersky WindowsUnlocker to remove the malicious registry changes

This ransomware trojan has modified your Windows system registry so that when you’re trying to boot your computer it will instead launch his lock screen.To remove this malicious registry changes we need to use the Kasersky WindowsUnlocker from Kaspersky Rescue Disk.

  1. Click on the Start button located in the left bottom corner of the screen and select the Kaspersky WindowsUnlocker.
    Kaspersky Rescue Disk WindowsUnlocker 1
    IF you can’t find the WindowsUnlocker button, you can select Terminal and in the command prompt type windowsunlocker and then press Enter on the keyboard.
  2. A white colored console window will appear and will automatically start loading the registry files for scanning and disinfection. The whole process will take only a couple of seconds and after this process you should be able to boot your computer in normal mode.
    Kaspersky Rescue Disk WindowsUnlocker 2
Advertisements
Advertisements

STEP E:Scan your system with Kaspersky Rescue Disk

  1. Click on the Start button located in the left bottom corner of the screen and select the Kaspersky Rescue Disk then click on My Update Center and press Start update.
    Kaspersky Bootable Cd scan 1
  2. When the update process has completed, the light at the top of the window will turn green, and the databases release date will be updated.
    Kaspersky Bootable Cd scan 2
  3. Click on the Objects Scan tab, then click Start Objects Scanto begin the scan.
    Kaspersky Bootable Cd scan 3
  4. If any malicious items are found, the default settings are to prompt you for action with a red popup window on the bottom right. Delete is the recommended action in most cases but we strongly recommend that you try first to disinfect , and if it doesn’t work chose to quarantine the infected files just to be on the safe side.
    Kaspersky Bootable Cd scan 5
  5. When all detected items have been processed and removed, the light in the window will turn green and the scan will show as completed.
    Kaspersky Bootable Cd scan 7
  6. When done you can close the Kaspersky Rescue Disk window and use the Start Menu to Restart the computer.
  7. After your computer will restart,you should be able to boot in Windows normal mode,from there you’ll need to perform a system scan (as seen on STEP 2) with Malwarebytes Anti-Malware and HitmanPro to remove the malicious files from your machine.

STEP 2: Scan your computer for malware

Because there might be some left over malicious files on your system,we strongly recommend that you perform a system scan with the following on-demand scanners.

Run a computer scan with Malwarebytes Anti-Malware FREE

  1. You can download Malwarebytes Anti-Malware from the below link.
    Download MalwarebytesFree official installer. Your download starts right away.
  2. Start the Malwarebytes’ Anti-Malware installation process by double clicking on mbam-setup file.
    [Image: Malwarebytes Installer]
  3. When the installation begins, keep following the prompts in order to continue with the setup process. Do not make any changes to default settings and when the program has finished installing, make sure you leave both the Update Malwarebytes’ Anti-Malware and Launch Malwarebytes’ Anti-Malware checked. Then click on the Finish button. If Malwarebytes’ prompts you to reboot, please do not do so.
    [Image: Finishing Malwarebytes installation]
  4. Malwarebytes Anti-Malware will now start and you’ll be prompted to start a trial period , please select ‘Decline‘ as we just want to use the on-demand scanner.
    [Image: Decline Malwarebytes trial]
  5. On the Scanner tab,select Perform full scan and then click on the Scanbutton to start scanning your computer.
    [Image: Starting a full system sca]
  6. Malwarebytes’ Anti-Malware will now start scanning your computer for Ihr Computer Wurde Blockiert malicious files as shown below.
    [Image: Malwarebytes scanning for malicious files]
  7. When the scan is finished a message box will appear, click OK to continue.
    [Image: Malwarebytes scan results]
  8. You will now be presented with a screen showing you the malware infections that Malwarebytes’ Anti-Malware has detected.Please note that the infections found may be different than what is shown in the image.Make sure that everything is Checked (ticked) and click on the Remove Selected button.
    [Image: Infections found by Malwarebytes]

Run a computer scan with HitmanPro

  1. Download HitmanPro from the below link,then double click on it to start this program.
    Download HitmanProOfficial Sophos download. Free scan, free 30-day trial to remove threats.
    IF you are experiencing problems while trying to start HitmanPro, you can use the Force Breach mode.To start HitmanPro in Force Breach mode, hold down the left CTRL-key when you start HitmanPro and all non-essential processes are terminated, including the malware process. (How to start HitmanPro in Force Breach mode – Video)
  2. HitmanPro will start and you’ll need to follow the prompts (by clicking on the Next button) to start a system scan with this program.
    HitmanPro scanner
    HitmanPro installation
  3. HitmanPro will start scanning your computer for Ihr Computer Wurde Blockiert malicious files as seen in the image below.
    HitmanPro scan after Ihr Computer Wurde Blockiert virus
  4. Once the scan is complete,you’ll see a screen which will display all the infected files that this utility has detected, and you’ll need to click on Next to remove this malicious files.
    HitmanPro scan results
  5. Click Activate free license to start the free 30 days trial and remove all the malicious files from your computer.
    HitmanPro 30 days activation button
Advertisements

If you are still experiencing problems while trying to remove any Ihr Computer Wurde Blockiert virus from your machine, please start a new thread in our Malware Removal Assistance forum.

Finish the cleanup. Keep protection on.

Follow the removal steps above, then consider ongoing protection against malicious software and unwanted advertising.

Affiliate links We may earn a commission if you buy through these links, at no extra cost to you. How we’re funded

MalwarebytesSCAM & MALWARE PROTECTION

Go beyond a one-time scan.

Malwarebytes can detect and remove malware and unwanted programs. Premium Security adds real-time protection against new threats.

  • Scam Guard for suspicious messages
  • Real-time malware protection with Premium
Explore MalwarebytesExplore features on the official website
AdGuardAD & TRACKER BLOCKING

Reduce unwanted ads and redirects.

AdGuard filters ads and trackers while you browse. It can help reduce exposure to advertising that sends you to unwanted pages.

  • Blocks intrusive ads and pop-ups
  • Filters trackers while you browse
Explore AdGuardExplore features on the official website

Features vary by device and plan. These tools add protection; they do not guarantee that a website or offer is trustworthy.

Join the discussion

0 comments

Share your experience or ask a question about this article.

Discussion

Start the conversation

Have a question or something useful to share? Add the first comment.

Report a comment

Reports are private and reviewed by a moderator.

Written by

Stelian

Stelian is a malware and virus removal expert with more than 15 years of experience. Stelian leads malware analysis and removal at MalwareTips, writes the step-by-step removal guides and helps readers recognize and avoid online scams.

61,141 articlesWriting since 2011
More from Stelian →

MalwareTips community · since 2009

Stuck on a step? 75,000+ members can help you for free.

Post your question on the forum and our volunteer malware removal experts will walk you through it, step by step.

75K+members
999K+forum messages
100K+forum topics
17+years online

Previous

Remove El Equipo ha Sido Bloqueado virus (Removal Guide)

Next

Remove “Browse to Save” ads (Removal Instructions)

Share