Computer blocked by the national gendarmerie

Solved

alextoria1997 -
Seboul - 24 Jun 2013 at 00:53

Hello,

I was looking for a streaming movie on my laptop when a window popped up saying "WARNING! Your computer has been blocked for violating French law." I checked some forums, and they said to turn off and restart the PC, which I've been doing for a good 20 minutes now, but it doesn't change anything; the whole page is blocked, and there are no icons left. I can't use it at all.

Configuration: Windows 7 / Firefox 3.6.24

50 answers

Answer 1 / 50

Best answer
The best answer is the one that has been validated by our teams.
Anonymous user

Good evening

Is safe mode with network support working?

See you later
--
---------Security Contributor---------
We have all been a beginner at something at one point.
But knowledge is the reward of diligence.
104
1. loulou
  
  thank you thank you thank you thank you thank you it worked but in the message from the national gendarmerie there were lots of mistakes was it a joke?
  
  2
2. Master Flex Posted messages 450 Status Member 36
  
  they're stubborn here lol
  
  1
Answer 2 / 50
Ltn

Hello Alextorria
I don't know if you found the solution. As for me, I used a method that may seem simple for those who have used DOS, which is now the COMMAND mode.
The virus, because it's a virus, simply replaces the "explorer.exe" program with another program that displays the fake "Gendarmerie" alert window.
For me, even safe mode was no longer working.
So I booted in "safe mode command" (using the F8 key as jacques.gache mentioned).
When you get to command mode, you have a long line like this:
C:\document in setting\....
Type:
CD \WINDOWS\Servicepackfiles\I386
Type:
COPY explorer.exe c:\WINDOWS
Answer Y for yes to the question "replace the file"
Be careful to type the command respecting the spaces...
COPY-space-explorer.exe-space-c:\Windows
Normally, you just have to reboot

Indeed, hackers don't think of everything (thankfully) there are at least two "explorer.exe" programs on the disk.
63
1. Xav
  
  I got this virus and the maneuver worked
  Thank you
  
  0
2. Max
  
  Good evening,
  I also have this virus on my computer, and my safe mode isn't working. I tried using the command prompt, but when I enter the lines written above, it says that the file path cannot be found... What should I do?? I am desperate...
  
  0
3. fred
  
  Great, thank you very much! I struggled a bit because I didn't have much, but it took me just 25 minutes to understand and now I'm back at it! Thanks again!
  
  0
4. Marc
  
  Nickel Chrome.
  
  0
5. Sarah
  
  Hello, when I enter the sentences to be placed, I am told "the specified path is not found"
  What should I do ??
  
  0
Answer 3 / 50
pri

http://lci.tf1.fr/high-tech/streaming-your-computer-blocked-by-the-gendarmerie-it's-false-6881986.html
here's a link, it's a scam, beware, do not pay anything at all.
17
1. Hyrkap
  
  It's exactly this one that's causing me trouble. How can I get rid of it please?
  
  0
2. titioro
  
  Safe mode, then reset your PC to 1 or 2 days back!
  
  0
3. g3n-h@ckm@n
  
  lol!!!!!!!!!!!!!
  
  0
4. alucard
  
  Safe mode and system restore to a previous date: it worked very well for me! Plus, it didn't take long at all...
  
  0
5. g3n-h@ckm@n
  
  hello
  
  last variant online
  
  system restore removed
  shell key created for user
  userinit key created for user
  shell key modified for machine
  userinit key modified for machine
  safe mode removed
  Alternate Shell key hijacked
  an IFEO that redirects to the file or to svchost.exe
  
  and sometimes even an ActiveX that redirects to the file
  
  0
Answer 4 / 50
Loïc

Thank you all for your valuable advice!!!
Thanks Askela, Ltnc, and everyone else!
I didn't follow the DOS method, I found the answer on other forums.
I booted my PC (Running Vista) in safe mode with networking (Pressing F8 continuously during startup).
I then downloaded a FREE software called Malwarebytes Anti Malware that I used...the scan lasted about 1 hour and 30 minutes, and upon my return, 26 files were infected (Trojan, horse, and other garbage...). I deleted everything and restarted my PC in normal mode. EVERYTHING WORKS like before!!!!

Here is the link to download the software that will hunt down all your malware:

http://www.malekal.com/2010/11/12/tutorial-malwarebyte-anti-malware/

Good luck to you if you have this issue, but don't worry, your data and files are safe, definitely do NOT PAY the €200...
12
1. kapan
  
  Thank you very much, I had this problem this morning..... Thank you so much, it's your solution that worked for my PC..... Merry Christmas
  
  0
2. g3n-h@ckm@n
  
  hello
  
  yep, except that Malwarebytes doesn’t remove everything, so there are still some infected files on the computer ^^
  it’s not a magic powder MBAM!
  
  0
3. Loïc
  
  Maybe... I'm really not good at computers. That said, does a computer without any infected files really exist? It's a bit like any human being who has cancer cells in them... after that, they either develop or they don’t...
  Do you know a way to "get rid of" these infected files?
  You're welcome Kapan, and I'm glad you were able to manage!!! Merry Christmas to you too!!! ^^
  
  0
4. g3n-h@ckm@n
  
  You need to open a new topic and wait for a response to check the PC :)
  
  0
5. raya
  
  Hi, I also just had the same problem, and I actually solved it in less than 30 minutes by clearing the memory of the computer. Thanks to all of you. At first, I thought it was real, but definitely don't pay anything; it's just a scam!!!!
  
  0
Answer 5 / 50
Loïc

Hello, I have the same issue as you all, but I can't perform the DOS command.
It displays C:\Windows\system32>
And then when I follow the method explained above, I get the message: "the specified path cannot be found".
What should I do?
Thank you in advance for your help!!!
9
1. askela
  
  Hello, I had this problem a week ago, and I managed to fix it in 5 minutes: turn off your computer completely, even the button at the back of the tower, restart and boot into safe mode, click on the start logo, programs, go to backup and restore center, then back up the files. In principle, your PC should work again, and remember to update, Ad aware, antivirus...
  
  0
2. Loïc
  
  Thank you, thank you! I found my PC and completed all the possible and imaginable updates...
  Happy holidays! ^^
  
  0
3. i l
  
  Loic, I have the same problem as you! Have you found a solution please?
  
  0
4. g3n-h@ckm@n
  
  Hello, open a new topic, thank you.
  
  0
5. Ronaldoo
  
  What version of PC do you have, please? I have Windows 7.
  
  0
Answer 6 / 50
karibouuh

Thank you very much, I had the same problem but thanks to Ltn's response it was fixed in 30 seconds!! Thanks again.
8
1. g3n-h@ckm@n
  
  repaired but not disinfected ^^
  
  0
2. Ass
  
  I can't fix it.
  
  0
Answer 7 / 50
merenoel

Hello

I am happy to find other internet users experiencing the same problem and finding solutions.

As for my case, after reading and trying everything that was proposed in this discussion, I still have the same issue because when I press F8, no matter which solution I choose:
- mode in failure
- safe mode with network support
- command prompt in safe mode
- .....
the damn page of the "gendarmerie" "hadopi" virus shows up, I don’t have time to do anything
if the page does not appear, it means the PC is stuck on the session choice page.
I already have Malwarebyte and Spybot on the PC but I don't have the possibility to access them.

If someone could help me on this Christmas Eve!!! I have an Eee PC running XP.

Thank you
7
1. nas
  
  Hi, it's the same for me, help please
  in the back it tells me we can't overwrite Explorer with Explorer.
  
  0
2. g3n-h@ckm@n
  
  https://forums.commentcamarche.net/forum/affich-23897272-ordinateur-bloque-par-la-gendarmerie-national#24
  
  0
3. youn
  
  Hi
  same problem this afternoon, restart in F8 safe mode, restore to an earlier date and it’s done. It happened to 2 colleagues this week and with system restore it works very well and is easy to do.
  
  0
4. g3n-h@ckm@n
  
  it depends on the variant you catch........;
  
  0
5. fred
  
  Hi
  my computer just got stuck on a web page
  I rebooted following your procedure and it works
  thank you
  
  0
Answer 8 / 50
g3n-h@ckm@n

come on, here's another one who thinks he's a genius
--
¤¤¤¤¤¤¤¤¤¤_g3n-h@ckm@n_Development_¤¤¤¤¤¤¤¤¤¤
¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤_Pre_Scan_¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤
7
Answer 9 / 50
g3n-h@ckm@n

Hello, start a new topic, thank you
--
¤¤¤¤¤¤¤¤¤¤_g3n-h@ckm@n_Development_¤¤¤¤¤¤¤¤¤¤
¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤_Pre_Scan_¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤
6
1. Seboul
  
  I'm sorry, I'm really bad at computers, but how about a new topic? I can't do anything because I made a big mistake and turned off my PC and turned it back on, so the gendarmerie's page is completely blank, and I can't see anything at all! Please reply to me as soon as possible (I'm crying because I'm so stressed). I have a Samsung laptop, 64-bit Windows 7, thank you. Oh, and I only have one user; I don't have an administrator, so...
  
  0
Answer 10 / 50
alextoria1997

It's a Samsung laptop, and I don't have safe mode with networking...
At least, I don't think so.
5
1. Anonymous user
  
  Look at this:
  
  https://www.commentcamarche.net/informatique/windows/113-demarrer-windows-10-en-mode-sans-echec/
  
  See you later.
  
  0
2. Paollaaa
  
  Did you have an antivirus? It might be a scam...
  
  0
3. jacques.gache Posted messages 34829 Status Security Contributor 1 645
  
  Hello Guillaume, I hope you don't mind this intrusion just passing by!!
  
  alextoria1997 hello, to start in safe mode with networking do this and if your PC boots in that mode, come back here and Guillaume can guide you to clean it up
  
  . Press the button to start the PC and as soon as it starts
  . Press the F8 or F5 key depending on the PC brand without stopping "1 press per second" as soon as a text screen appears and then disappears
  . Use the arrow keys to select safe mode
  . Then press ENTER
  . You will need to choose your usual session, not the "Administrator" account or another
  . Once it starts, don’t worry if the colors and icons are not like usual
  and come back here to let us know, thanks
  
  sorry Guillaume, I couldn't resist!! lol!!
  
  0
4. indien63
  
  No second explorer.exe on my computer. And the one to remove is in WINNT. I copied the explorer.exe from another computer to a USB drive. In safe mode under command prompt, I copied the one from the drive (cd winnt ; copy D:explorer.exe)
  
  0
5. g3n-h@ckm@n
  
  this Windows is cracked....
  
  0
Answer 11 / 50
g3n-h@ckm@n

cool, you still have some undetected system files by malwarebytes ^^
--
¤¤¤¤¤¤¤¤¤¤_g3n-h@ckm@n_Development_¤¤¤¤¤¤¤¤¤¤
¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤_Pre_Scan_¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤
4
1. juliette
  
  I can't get rid of it and my antivirus is blocked, I can't run a scan.
  
  0
2. g3n-h@ckm@n
  
  Well, open a new topic
  
  and hello, does it chafe the lips?
  
  0
3. sherred Posted messages 8605 Status Member 351
  
  fortunately, it's automatic in new message
  hi Gen ;)
  
  0
4. g3n-h@ckm@n
  
  Hello ^^
  
  0
Answer 12 / 50
Save

I had the same problem, but I was able to start in safe mode (without network support) and I took the opportunity to do a system restore (I had made my backup three days before). Since then, I haven't had any problems yet, I dare to hope that my issue is resolved.
With a bit of luck, this is another solution to this problem!
3
1. g3n-h@ckm@n
  
  https://forums.commentcamarche.net/forum/affich-23897272-ordinateur-bloque-par-la-gendarmerie-national#142
  
  0
Answer 13 / 50
Nell

Thank you to all the experts who give advice, I managed to get through it:
F5 F8 safe mode with network
opening Google: search MALWARE
download MALWAREBYTE'S ANTI MALWARE FREE
save, install
quick scan
removal of selected infected files
restart the PC
YAY!
2
1. g3n-h@ckm@n
  
  he didn't get rid of everything :)
  
  0
2. Chloette
  
  Thanks to the previous messages, and to this last one which provides a CLEAR summary (yes, when you don't know ANY "computer" terms at all, it's not easy...^^'), my computer is working! So, THANK YOU VERY MUCH!!!
  
  0
Answer 14 / 50
g3n-h@ckm@n

by clicking here:

http://cjoint.com/12ma/BChouKzppdi.htm
--
¤¤¤¤¤¤¤¤¤¤_g3n-h@ckm@n_Development_¤¤¤¤¤¤¤¤¤¤
¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤_Pre_Scan_¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤
2
1. Master Flex Posted messages 450 Status Member 36
  
  Pliiiiiiiiiiééééééééééééééééééé so at 2:40 AM I can’t stop laughing and seeing how Gen you told to "create a new topic" and seeing that they don’t care at all, oh my God I swear the lack of civility of people is sometimes amazing lol. Pliss foss man ;)
  
  0
Answer 15 / 50
Ottho Posted messages 34 Status Member 5

Good evening,

Well, my poor g3n, they really won't let you disinfect the help, it seems =D.

For those who want to be helped: https://forums.commentcamarche.net/forum/virus-securite-7/new

You won't get any help if you behave like that on a topic that doesn't belong to you.

Have a good evening.
2
Answer 16 / 50
tiotepat

Hello
the exact same thing happened to my daughter. Unfortunately, it's a scam; type "computer blocked by the police" on Google, and it explains what to do, but first, notify the police, which is what I'm going to do tomorrow.
My daughter can still use her computer because a neighbor created another account for her by pressing: ctrl alt delete (at the same time)
and created a new account.
1
1. sherred Posted messages 8605 Status Member 351
  
  Notify the police?
  What do you want them to do, other than tell you that if you hadn't been on illegal sites, you wouldn't have a problem?
  
  0
2. Jaaza
  
  I called the gendarmerie. They ask you to come by and they will give you an explanatory brochure that explains what to do.
  
  0
3. g3n-h@ckm@n
  
  lol and what's the point of a disinfection forum?
  
  0
4. The Pep Posted messages 1755 Status Member 597
  
  what's the point? well, it's simple:
  to get told off by a certain g3n-h@ckm@n by being told to create a new topic, even if you're talking about the same thing.
  
  0
5. g3n-h@ckm@n
  
  zero!
  
  no computer is the same
  you don't necessarily have the same protections
  you don't necessarily have the same hardware
  the infection may be similar but accompanied by other things depending on the cases
  the variant of the infection may not be the same
  
  in the end, your comment was pointless
  
  0
Answer 17 / 50
g3n-h@ckm@n

nonsense!!!
--
¤¤¤¤¤¤¤¤¤¤_g3n-h@ckm@n_Development_¤¤¤¤¤¤¤¤¤¤
¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤_Pre_Scan_¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤
1
Answer 18 / 50
g3n-h@ckm@n

Hello, open a new topic
--
¤¤¤¤¤¤¤¤¤¤_g3n-h@ckm@n_Development_¤¤¤¤¤¤¤¤¤¤
¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤_Pre_Scan_¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤
1
1. Master Flex Posted messages 450 Status Member 36
  
  hihihihihihihihi
  
  0
Answer 19 / 50
g3n-h@ckm@n

http://shp13.free.fr/divers/humour/malpolitus.swf
--
¤¤¤¤¤¤¤¤¤¤_g3n-h@ckm@n_Development_¤¤¤¤¤¤¤¤¤¤
¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤_Pre_Scan_¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤
1
1. nessa97439
  
  Hello
  You seem to know a lot about this!!! Can you tell me how to remove this virus? Just so you know, I'm completely useless at computer-related stuff!
  Thank you
  
  0
2. g3n-h@ckm@n
  
  Hello, starting a new topic.
  
  0
Answer 20 / 50
g3n-h@ckm@n

following the variant it doesn't work, it eats the resto ^^

following the variant it doesn't work the resto is disabled

following the variant it doesn't work because you have a big rootkit with

following the variant it doesn't work, how do you search for malwarebytes in safe mode without explorer.exe?
¤¤¤¤¤¤¤¤¤¤_g3n-h@ckm@n_Development_¤¤¤¤¤¤¤¤¤¤
¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤_Pre_Scan_¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤
1

Computer blocked by the national gendarmerie

50 answers

Display of an amount based on two lists?

Mosaic+pixels tv image by waves, fransat all programmes

Limit of simultaneous connections via 5g sim

Hp deskjet 3639 is not printing anymore

Fan spinning continuously

Application note does not stay open on my iphone

Delete cubbie web search

Orange and sosh push up internet cancellation costs

Gran turismo on ps4

Black screen on my windows security