Gendermerie Nationale virus - How to remove

Gendarmerie Nationale is a ransmoware that attacks French computer systems. It is spread on the Internet through exploit pages. Once infected, you will receive a message in French claiming that you have done some illegal actions concerning watching and distributing some pornographic content, etc. Here’s how a part of the message looks like:

Attention! Votre ordinateur a été bloqué pour violation de la loi Française

Les infractions suivantes ont été détectées:
Le fait de tourner un film, l’enregitrement ou la tramsission de matériel pornographique impliquant des mineurs, la pédopornographie, la sodomie, et le actions violentes concernant les enfants. La répression est prévue à l’article 227-23 No, 227-24 du Code pénal de la France. C’est passible d’une peine d’emprisonnement de 3 à 5 ans.

The worst part is that your computer is completely blocked and you will see only that one message. The main purpose of Gendarmerie Nationale is to get money from you. So at the end of the message it will tell you to pay a fine of 200 euros through Ukash or Paysafecard system. Beware, that Gendarmerie Nationale only wants your money, but the information provided on its message is completely fake.

You must remove Gendarmerie Nationale straight when you get infected. Since your computer is completely locked, it’s not an easy task to do. We recommend performing these steps to get rid of this malware:

1. Reboot into Safe Mode (or Safe Mode with Networking)
2. Run MSConfig
3. Disable all startup entries (they will reference files from your user folder)
4. Reboot and scan your system with https://www.2-viruses.com/downloads/spyhunter-i.exe.

 

Automatic Malware removal tools

Manual removal