BKA-Trojaner

Posted by Lisa Blanc on October 23, 2013

What is BKA-Trojaner?

BKA-Trojaner is a generic detection for ransomware applications that infect users in Germany and German speaking countries. There are over 30 types of ransomware infections that are classified as BKA-Trojaner. All of them may have different interfaces, but the same come with the same purpose – to steal your money. This infection may seem to be extremely threatening as it denies desktop access, but the program has no legal grounds to do it, no matter what it says. Therefore, user infected with this malware needs to unlock his/her computer and remove BKA-Trojaner immediately. Do not allow this program to take away your money!

Where does BKA-Trojaner come from?

BKA-Trojaner is part of a huge family of ransomware infections. It is called Ukash Virus group and it includes a vast number of infections, each localized for a particular country. As it has been mentioned already, BKA-Trojaner is intended for the German speaking users in Germany, Austria and Switzerland. These infections can be delivered by Urausy, Reveton, Revoyem, Gimemo Trojans, as well as rootkit infections.

Each ransomware program from BKA-Trojaner group may have different interface and different title, but all of them try to pass for legal representatives of law enforcement authorities. Hence their names usually are such as Bundespolizei Virus, GVU Virus, Bundeskriminalamt Virus and so on. Nevertheless, this is nothing but a fake façade as BKA-Trojaner has nothing in common with law enforcement authorities.

What does BKA-Trojaner do?

Since BKA-Trojaner is a ransomware infection, it denies a ransom fee. Once the infection takes place, the program blocks your computer and displays a fake notification that claims you have been involved in illegal activity and so you need to pay a predetermined fine in order to avoid criminal charges. Depending on the type of BKA-Trojaner you are infected with, the fine may vary from 100 to 500 euro, and you could be charged with child pornography distribution, copyright infringement, terrorism promotion and so on. Find an example of a message displayed by one of the infections below:

Achtung!!!

Das Betriebssystem wurde im Zusammenhang mit Verstoßen gegen die Gesetze der Bundesrepublik Deutschland gesperrt!

Es wurden auch Emails in Form von Spam, mit terroristischen Hintergründen, verschickt. Diese Sperre des Computers dient dazu, Ihre illegalen Aktivitäten zu unterbinden.

The message is supposed to make you think that the only way to unlock your computer is to pay the fine via PaySafeCard, Ukash or any other alternative payment system supported by the ransomware. These payment systems are not related to cyber criminals. They are simply exploited due to their simplicity of use.

How to remove BKA-Trojaner?

It goes without saying that paying the “fine” is not an option, and you would only lose your money this way. To remove BKA-Trojaner from your computer, you need to unlock your PC first. For that you can refer to the instructions below. Once you have your PC unlocked, acquire a powerful antimalware tool that will help you to remove BKA-Trojaner and other infections automatically. A computer security program will help you to deal with this problem at a Windows registry level, ensuring that BKA-Trojaner does not regenerate itself.

How to restore desktop access

Windows 8

Press Windows key and metro GUI will open.
Click the built-in Internet Explorer tile.
Type http://www.anti-spyware-101.com/download-sph into the address bar. Hit Enter.
Click Run on download dialog box and install SpyHunter.
Perform a full system scan.

Windows Vista & Windows 7

Reboot the PC and tap F8 repeatedly until Advanced Boot Options menu shows up.
Use arrow keys to navigate and select Safe Mode with Networking. Press Enter.
Access http://www.anti-spyware-101.com/spyhunter and download SpyHunter.
Install the program and run a full system scan.

Windows XP