Grupo de Delitos Telemáticos Virus - How to remove

Grupo de Delitos Telemáticos Virus is an infection that causes paralysis of your all operating system leaving it unresponsive to almost any commands. As many other threats of this type, called ransomware, it locks computer screen with a message having Interpol, Europol and Direccion General de la Policia y de la Guardia Civil name and logo. No wonder that many victims believe the locking is sent by these institutions and urge to pay the fine asked. Yet this is nothing more than a scam and paying the ransom will not remove the blocking.

One might get infected with Grupo de Delitos Telemáticos Virus after visiting a malicious website or a legitimate one which has been compromised. Spam e-mails having attachments or links leading to the source of infection might also be used as means to distribute malware. One more risk you should be aware of is social engineering – a technique used by scammers when a victim downloads a virus manually thinking it is useful software or an update. Always install programs and updates only from official websites.

As many other Urausy family Trojans, Grupo de Delitos Telemáticos Virus, charges you with the crimes related to illegal usage and distribution of pornographic content, sending Spam e-mails and similar accusations. You will be seeing extracts from laws and punishments listed. The Trojan usually attacks computers from Spain. To scare you even more your webcam might be turned on informing that your pictures and videos will be used for your identification. As an option to remove the charges as well as PC blocking you are offered to pay a fine as soon as possible. In case of Grupo de Delitos Telemáticos Virus the amount of money required is €100 euros that should be paid via Ukash or PaySafeCard. Here is an extract from the blocking message:

¡ATENCIÓN! Su ordenador personal ha sido bloqueado por razones de seguridad vistos los motivos abajo detallados.
…..
El monto de su multa es de €100 euros.
La multa puede ser pagada con PaySafeCard o Ukash vouchers.
Una vez pagada la multa y los medios monetarios serán traspasados a la cuenta del estado, su ordenador será desbloqueado en un plazo de 24 horas.

Do not pay the fine this virus asks you for. It will not remove the blocking. On the contrary, it will only fund development of more similar viruses. You should remove Grupo de Delitos Telemáticos Virus from your computer using special removal tools and following instructions presented below.

Grupo de Delitos Telemáticos Virus removal guide

If your computer has more than one user account and not all of them are locked, scan whole PC with anti-malware programs, e.g. spyhunter, by logging to the account that is not blocked. Another option is to use system restore. If none of these methods worked for you, do the following:

• Restart your computer;
• Press F8 while it is still restarting;
• Choose between safe modes in following order: Safe mode, Safe mode with command prompt

Then follow the guides below:

If your computer runs in Safe mode or Safe mode with networking

1. Launch MSConfig.
2. Disable startup items rundll32 turning on any application from Application Data. Note, that these are typical locations for Grupo de Delitos Telemáticos Virus but some others might be used.
3. Restart the system once again.
4. Scan with https://www.2-viruses.com/downloads/spyhunter-i.exe to identify Grupo de Delitos Telemáticos Virus files and delete it.

Here is a video showing how to complete the steps:

If your computer runs in Safe mode with command prompt

1. Run Regedit.
2. Search for WinLogon Entries. Write down all files it references that are not explorer.exe or blank. Replace them with explorer.exe
3. Search registry for Grupo de Delitos Telemáticos Virus files and delete the registry keys referencing the files
4. Try to reboot and scan with Spyhunter.
5. If this fails, try doing system restore from safe mode with command prompt (rstrui.exe)

If none of safe modes could be launched

Some versions of Grupo de Delitos Telemáticos Virus disable all safe modes, but give a short gap that you can use to run anti-malware programs:

1. Reboot normally.
2. Start->Run.
3. Enter: http://2-viruses.com/downloads/spyhunter-i.exe . If malware is loaded, just press alt+tab once and keep entering the string blindly. Press Enter.
4. Press Alt+tab and then R couple times. Grupo de Delitos Telemáticos Virus process should be killed.

Here is a video detailing this approach:

Hitman Pro USB disk

If you did not succeed using any of the methods above, try scanning PC with a bootable USB or DVD disk. These should be able to remove all versions of Grupo de Delitos Telemáticos Virus, but will not work if your hard drive is encrypted.

For that, we recommend using Hitman Pro Kickstarter USB.

1. Download Hitman Pro on uninfected PC.
2. Run Hitman and ask to create Kickstarter USB (option on initial screen)
3. When USB ready, reboot infected PC with USB attached and press DEL
4. Choose USB as primary boot device.
5. Boot normally.
6. Run Hitman Pro and https://www.2-viruses.com/downloads/spyhunter-i.exe . One of these programs should detect and remove malware from your PC.

Automatic Malware removal tools

Manual removal