Do you know what GEMA Virus is?
GEMA Virus is a ransomware application that gets installed on target computers by Trojan infections. The Trojan that is responsible for distributing GEMA Virus and other similar ransomware applications is called Reveton. GEMA Virus is called "ransomware" because it blocks you from accessing your desktop.
Instead of your desktop you see a big and intimidating message in German that accuses you of illegal activity. GEMA Virus in computers with German IP address and it is not the only German version of Ukash virus. There is also BUNDESPOLIZEI Virus, GVU Virus, Ihr Computer wurde gesperrt! and other similar infections. The abundance of these infections shows how lucrative this business is, and how persistent malware creators are.
GEMA Virus screenshot
Scroll down for full removal instructions
The secret behind their success is the element of surprise and the use of official symbols of law enforcement organizations. Not to mention that GEMA Virus accuses users of doing something that is very common among the Internet users - illegal downloading of copyrighted files (videos and music). So when a message with official law enforcement symbols, panicked users can easily fall for this and spend their money on GEMA Virus. Especially as the message displayed by this ransomware is as follows:
Der Zugang zu Ihrem Computer wurde gesperrt.
Auf Ihrem Computer wurden illegal heruntergeladene Musikstücke ("Raubkopien") gefunden.
Der Download von urheberrechtlich geschützen Musikstücken durch das Internet oder einer Musiktauschbörse is illegal un wird gemäß #106 Urhebergesetz mit Geldstrafe oder Freiheitsstrafe von bis zu 3 Jahren bestraft.
Um die Sperre aufzuheben und weiteren Strafrechtlichen konsequenzen aus dem Weg zu gehen, sind Sie verpflichtet eine Mahngebühr in Höhe von €50,- zu bezahlen. Zahlbar durch unseren Payment-Partner Paysafecarad. Nach erfolgreicher Bezahlung wird Ihr Computer automatisch entsperrt.
As you can see, GEMA Virus expects you to pay a 50 euro ransom fee. It says that after you pay the release fee, your computer will be unlocked and you will no longer have to face the charges. It seems like an easy way out, but this is why you should NOT do it. GEMA Virus will not unlock your desktop and you will never get your 50 euro back. The only way to deal with this infection is to remove GEMA Virus for good.
To remove GEMA Virus, do the following:
- Restart your computer and press F8 before system starts.
- When System boot menu appears, select Safe Mode with Networking and press Enter.
- Access the Internet and download SpyHunter From:
http://www.spyware-techie.com/download-sph - Install it and remove GEMA Virus.
For Windows XP:
- Follow the steps above from 1 to 3.
- Open Start menu and click RUN.
- Type "msconfig" into RUN box and press Enter.
- When System Configuration menu appears, click on Startup tab and uncheck all programs on the list. Click OK.
- Exit the menu and restart your computer in Normal mode.
- Install SpyHunter and run it to remove GEMA Virus automatically.
In non-techie terms:
GEMA Virus is a malicious infection that blocks you from accessing your desktop. It aims for your money and wants you to think that you've committed illegal acts. Do not believe in anything this ransomware has to say and remove GEMA Virus at once.
Aliases: Virus GEMA.