CIBS POL virus is a ransomware scam targeted to strike Switzerland and neighboring European countries. It is spread for the purpose of money extortion by cyber criminals and installed with Trojans that comes from infected websites. After CIBS POL virus is installed, it locks screen and other means of victim’s access to the infected computer. Then it displays a fake message about a crime committed by a victim online. CIBS POL virus requests a victim to pay 100 EURO for unlocking infected computer and as a fine for the false violation. Cyber criminals demand this payment to be made with Ukash and Paysafe payment system, but you shouldn’t expect them to unlock your computer. They never would risk to do that and get caught. People often do not know that government never used such a payment systems for collecting fines, but cyber criminals love this money cards that let them walk free for a long time.
This removal guide will help you to remove CIBS POL virus either manually or with a help of CIBS POL virus Removal Tool that comes with “Free online support” and “Free one-year-long protection” against stubborn malicious programs.
What is CIBS POL virus?
CIBS POL virus is a ransomware scam that cyber criminals designed for easy money extortion. They try to scare people with fake accusations in a crime committed online and punishment that is waiting ahead unless a fine is paid. Removing CIBS POL virus is complicated since victim’s computer is locked and antivirus software is not working properly since it is disrupted or blocked. CIBS POL virus is installed with Trojans from infected websites, and you need to be careful while visiting unknown websites. Presence in this message Ukash and Paysafe cards as means of paying a fine for false violation is a clear sign of the scam, and message displayed by CIBS POL virus is a complete fake. Governmental agencies do not use such a mean of money transfer, and you shouldn’t be scared. You need to remove CIBS POL virus. This scam is designed only for robbing you.
You can get your computer infected with CIBS POL virus after visiting some infected websites. You also can get it with free downloaded content used as a disguise for the Trojan. Email spam might also be used to spread CIBS POL virus and infect your computer. Avoid clicking links on suspicious websites. Do not visit websites with an adult content, and protect your computer from another chance being infected with ransomware.
CIBS POL virus Removal Tool
CIBS POL virus is protected against removal by locking antivirus software and victim’s access to controls on the infected computer. This makes it quite difficult for an average computer user to Remove CIBS POL virus manually. Some of removal procedures are potentially dangerous for your computer. Unless you understand everything in the manual removal guide, it is better to use CIBS POL virus Removal Tool that comes with a free antispyware program and free online assistance.
Remove CIBS POL virus Manually
Start your system in Safe Mode and try to access Windows System Restore . You need to find the restore point set before your computer was infected with CIBS POL virus and restore your system to previous. System Restore will undo all the changes made by this virus, and you can restart your computer as normal and run a full scan with your security program to remove malicious files installed onto your PC.
If the System Restore is not available or there is no a restore point that you can use, then, do the following:
1. First, you need to check proxy settings and repair them to prevent hijacking that might link your computer to a malicious website that spread this infection.
2. Start your computer in a Safe Mode and log as a system administrator. Then access Startup folder. For this click Start, select All Programs and find Startup folder. Look at the startup folder and remove suspicious program that you cannot identify. CIBS POL virus uses a random name consist of characters and numbers, and some variations might use startup for blocking your computer. Disable suspicious items, restart your computer, and see if it helps.
3. If disabling suspicious files in Windows Startup list doesn’t help to prevent blocking your PC, than you need to fix registry keys used for blocking.
Click Start and type regedit in the search field below. Then press Enter. (On windows XP you need to click Run in the menu and type the command in the input field of the Run utility.
Press OK button, or Enter key, when done.)
In Registry Editor Look for the key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\
Double click on this key and find Shell in the right pane. It should be set to “Explorer.exe”. If there is something different or an addition to it after coma, right click this line and modify the value to “Explorer.exe” only.
Note: If you see path related to the name that you remove, write it down. It points to the program that runs CIBS POL virus, and you need to find and remove it.
VERY IMPORTANT: Before you make changes to your system registry database, make a backup file for the keys being changed or removed in your system registry. You can do this by opening File menu in the Registry Editor and clicking Export. Then follow instructions on the screen. If something goes wrong, you can restore this key by double clicking the saved registry backup file. If no problem is noticed, then you can just discard this file later. Unless you do the backup, you might end with inoperable machine that requires expensive professional attention.
Kill CIBS POL virus malicious processes
Note: The file is located in either %AppData% or %Temp% directory in the current user profile.
Remove CIBS POL virus entries from system registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell [random chars].exe
Delete CIBS POL virus files and folders:
%userprofile%\Local Settings\Application Data\Microsoft\Windows\ [random chars and numbers]
%userprofile%\Local Settings\Application Data\Microsoft\Windows\[random chars ] \ [random name].exe
Note: Better check for location in your system registry as described above since the path might be different.
If manual removal is difficult and confusing to you, then use removal tool and get a free assistance for removing CIBS POL virus and free antispyware program that will protect your computer against spyware for a full year.
Complete CIBS POL virus Removal
CIBS POL virus might come with other malicious programs, and you need also to remove this stuff. Update to your antivirus software and scan your system right after CIBS POL virus will be removed. You can use free antivirus scanner from different manufacturers to make sure that no threat is missed. Then you need to scan your system for spyware with some anti-spyware program like one coming with offered CIBS POL virus Removal Tool since a normal antivirus software wouldn’t remove legitimate spyware used with malicious purpose by cyber criminals.
Find more about prevention computer infections and protection against malicious programs.