CIBS Pol Virus Removal Guide

CIBS Pol Virus is a ransomware scam that attempts to deceive computer users in Switzerland. Like its predecessors Confédération Suisse Virus and Bundesamt für Polizei Virus, the threat in question demands that you pay money in order to unlock the PC. Why have Swiss police locked it? According to the message, you have been involved in downloading and distributing copyrighted or pornographic files. Most important, do not think that the warning containing the logo of CIBS POL and Swiss Civilian Police is legitimate. Additionally, European Cybercrime Centre (EC3) whose logo is present in the warning has nothing to do with the investigation supposedly carried out by the Federal Office of Police in Switzerland (Bundesamt für Polizei).

The warning you have on your screen is one of the interfaces of the notorious Trojan Urausy, also known as Trojan:Win32/Urausy.A. It is already known in the U.S., Canada, Spain, Germany, Australia and other countries.

Below you will find some excerpts from the bogus warning:

ACHTUNG! Ihr Computer ist aus einem oder mehreren der unten aufgeführten Gründe gesperrt.

Sie haben gegen das Gesetz über «Urheberrecht und verwandte Schutzerchte» (Video, Musik, Software) verstoßen und unrechtmäßig urheberrechtliche Inhalte genutzt, bzw. verbreitet und somit gegen Art. 128 des Schweizerischen Strafgesetzbuches verstoßen.

Von ihrem Computer aus wurde ein rechtswidriger Zugang ohne ihre Kenntnis durchgeführt. Womöglich ist ihr Computer von schädlichen Programmen befallen, diesbezüglich verstoßen sia das Gesetz über die «Fahrlässige Verwendung eines Computers».

According to CIBS Pol Virus, the fine which is supposedly imposed on you should be paid via Ukash or Paysafecard. These money transaction services are very commonly used by cyber criminals but it does not imply that you should not trust them, only keep in mind that money transactions via Ukash and Paysafecard are carried out on particular websites. Additionally, you are provided with two options –you can pay either 100 Euros or 100 Francs. If you do not want to lose your money, you should ignore the warning and remove the Trojan which displays the message of this kind.

In order to remove CIBS Pol Virus and protect the computer against future virus attacks, you should implement a reliable spyware removal tool. Our advice is to use SpyHunter because this anti-spyware tool can successfully delete the Trojan and fight malware off.

How to remove CIBS Pol Virus

Removal For Windows Vista and Windows 7

1. Reboot the computer.
2. Tap the F8 key once the BIOS startup screen is no longer visible.
3. Using the arrow keys, select Safe Mode with Networking and press Enter.
4. Go to http://www.411-spyware.com/download-sph and download our spyware removal tool.
5. Run the installer and scan the PC.

Removal For Windows XP

1. Restart the PC.
2. Wait for the BIOS startup screen to load and start tapping the F8 key.
3. In the Windows Advanced Options Menu, select Safe Mode with Networking and press Enter.
4. Click on Yes.
5. Go to the Start menu.
6. Launch Run.
7. Type “msconfig” in the Open box and press OK.
8. Under the Startup tab in System Configuration Utility, select Disable All.
9. Click on Apply.
10. Go to our website and download SpyHunter.
11. Reboot the PC.
12. Install the downloaded file to remove CIBS Pol Virus.