Click on screenshot to zoom
Danger level 9
Type: Malware
Common infection symptoms:
  • Block exe files from running
  • Installs itself without permissions
  • Changes background
  • Connects to the internet without permission
  • Shows commercial adverts
  • Annoying Pop-up's

Türk Polisi virus

Ransomware infections are one of the most prominent computer threats nowadays with the onslaught of Reveton Police lock applications that has not declined ever since May. Türk Polisi virus is a new ransomware infection targeting Turkish users, pretending to be an official representative of the Turkish police force. This ransomware locks your computer and does not allow to utilize any of its functions under the pretext that you have committed serious crimes and now have to pay for it (literally).

Türk Polisi virus asks for a 200 TRY fee in order to unlock your computer. At the same time it says that all the charges against you will be withdrawn if you pay on time. In this case Türk Polisi virus is no different from Slovenská Polícia Virus, Ministere de L’interieur Virus, FBI MoneyPak and all the other infections that belong to the Ukash Virus family. Their main goal is to rip you off, and in order to do that Türk Polisi virus (and others) terrorizes you with the frightening security message the excerpts of which are as follows:

Turk Polisi
Siber suc mucadele bolumu

Bilgisayarda yapilan tum islemler, kaydedilmektedir. Web kamerasini kullandiginiz halde video ve fotograflari tespit icin kaydedilmektedir.

Bilgisayarinizin kilidini ve cezai kovusturma onlemek icin, 200 TRY odemesini yapmaniz gerekir.

Türk Polisi virus makes it seem as though you are being monitored via your webcam, and all your videos and photos will be used further on for the identification, if your case reaches the trial. Then once again, the ransomware offers you an "easy" way out by saying that the computer can be unlocked and the charges dropped if only you paid 200 TRY. Many users do pay, but you cannot do that, because your computer will remain in the same state, and your money will be lost.

You have to terminate Türk Polisi virus on your own, and it is possible if you follow these instructions:

For Windows 7 & Vista:
1. Reboot your computer and press F8.
2. Choose Safe Mode with Networking from the system boot menu and press Enter.
3. When the system loads, access the Internet and download SpyHunter.
4. Install SpyHunter on your computer and erase Türk Polisi virus.

For Windows XP:
1. Restart your computer before Windows logo appears press F8.
2. Use arrow keys to navigate the system boot menu. Select Safe Mode with Networking and press Enter.
3. Click Yes, when you are prompted whether you really want to load the Safe Mode.
4. Open your Internet browser and enter this link to download SpyHunter: http://www.pcthreat.com/download-sph
5. Click the Start menu button and launch Run.
6. Type "msconfig" into the Run box and hit Enter.
7. Click the Startup tab on the System Configuration menu and uncheck all programs on the list. Pres OK to save changes and exit the menu.
8. Restart your computer in Normal Mode, install SpyHunter and remove the malware.

Download Spyware Removal Tool to Remove* Türk Polisi virus
  • Quick & tested solution for Türk Polisi virus removal.
  • 100% Free Scan for Windows
disclaimer

How to manually remove Türk Polisi virus

Files associated with Türk Polisi virus infection:

TimeDateMUICallback.exe
wlsidten.exe
iner.exe
msavfit.exe
%SystemDrive%\????????????
questscan.dll
b34btbztdb0vavaw.exe
%AppData%
sqlncli.exe
scvhost.exe
msn.exe
rool0_pk.exe
cf6640a77ed4926a4c6be661ab93def9d13408753dd07e8d02836996a2f247b6.exe
Updating.exe
%LOCALAPPDATA%\lollipop
Other.res
xctqakcqbeo.dll
msnmsgrr.exe
pmstcdjwz.exe
jsdhlexdqkllnbcxgai.bfg
secproc_isv.exe
acuvzomo.exe
bvhylsviw.exe
2084473.dll
uenovfiu.exe
brenasa.exe
msdtmsrd.exe
securitywindrv.exe
ssntvs.exe
csrsss.exe
DA0B.exe
xaZYOVJW.exe
ex3b.dll
UpdatePriv.exe
dyjdl.exe
install_0_msi.exe
%TEMP%
00b5d693.exe
50E1.exe
%UserProfile%
wahneaqa.exe
zqmkrehUkpoKfsafsaZg.exe
Piranha.exe
puozlkmyj.dll
videotwisterSA.exe
wjthvwjb.dss
%LOCALAPPDATA%\Temp
xlqbteeb.exe
rvcbcyks.exe
oygqyunapnp.exe
mplayer2.exe
ubvhynpxh.exe
ACEIEAddOn.dll
skype.dat
Task Scheduler.exe
WinSyncMetastore.exe
taskhost.exe.exe
dqnbdq7.dss
bzsbkotiu.exe
wlsidten.dll
Q3d38543.exe
n.
wgsdgsdgdsgsd.exe
MusicCollector.exe
idiokbbrv.exe
yaiiwockc.dll
UpgradeHelper.exe
obvwo.exe
administration.exe
dtkmujvo.exe
xmlfilter.exe
najeoxtt.exe
aPr0hY9.exe
m2PythonLoader.exe
%WINDIR%\Temp
JfCqQ5JC.exe
ieudator.dll
comeo.exe
87b2cb3916261d5c807bf44262755cb0.exe
systemcpl.exe
crack.exe
DLL321.dll
bf8h8d02hf.exe
ifgxpers.exe
魔法桌面第三方主题破解补丁V1.1.exe
96dddda4.dll
{097444e7-2d87-ba3c-2efe-9f54812d824a}.exe
OmaSG21e.exe
setex.exe
p1.exe
%APPDATA%\updates
%APPDATA%\system
3511172082012Build.exe
Nbt.exe
ctfmon.exe
audipbrd.exe
VaultSysUi.exe
%CommonProgramFiles%
WINDED6.exe
gcrwcoak.exe
hwj3ba6j.dss
svchost.exe
%APPDATA%\Task Scheduler
C87C.exe
00qbipeq.exe
Firewallservice.exe
%ALLUSERSPROFILE%\Application Data
wpbt0.dll
%ALLUSERSPROFILE%
SyncHostps.exe
%WINDIR%\system32
msshell.exe
pYunY8m4VL3qLc.exe
NTServiceManager.exe

Türk Polisi virus DLL's to remove:

yaiiwockc.dll
xctqakcqbeo.dll
questscan.dll
puozlkmyj.dll
wpbt0.dll
wlsidten.dll
96dddda4.dll
2084473.dll
ACEIEAddOn.dll
ieudator.dll
ex3b.dll
DLL321.dll

Türk Polisi virus processes to kill:

rool0_pk.exe
sqlncli.exe
p1.exe
pYunY8m4VL3qLc.exe
csrsss.exe
3511172082012Build.exe
C87C.exe
魔法桌面第三方主题破解补丁V1.1.exe
00qbipeq.exe
m2PythonLoader.exe
NTServiceManager.exe
dtkmujvo.exe
VaultSysUi.exe
uenovfiu.exe
OmaSG21e.exe
najeoxtt.exe
systemcpl.exe
scvhost.exe
ctfmon.exe
UpgradeHelper.exe
iner.exe
00b5d693.exe
xmlfilter.exe
Q3d38543.exe
msavfit.exe
dyjdl.exe
MusicCollector.exe
mplayer2.exe
50E1.exe
securitywindrv.exe
UpdatePriv.exe
87b2cb3916261d5c807bf44262755cb0.exe
JfCqQ5JC.exe
SyncHostps.exe
wgsdgsdgdsgsd.exe
brenasa.exe
msnmsgrr.exe
gcrwcoak.exe
administration.exe
msshell.exe
WINDED6.exe
msdtmsrd.exe
TimeDateMUICallback.exe
ssntvs.exe
wahneaqa.exe
idiokbbrv.exe
ubvhynpxh.exe
oygqyunapnp.exe
videotwisterSA.exe
acuvzomo.exe
Nbt.exe
b34btbztdb0vavaw.exe
taskhost.exe.exe
rvcbcyks.exe
pmstcdjwz.exe
cf6640a77ed4926a4c6be661ab93def9d13408753dd07e8d02836996a2f247b6.exe
Piranha.exe
secproc_isv.exe
setex.exe
DA0B.exe
audipbrd.exe
bf8h8d02hf.exe
comeo.exe
wlsidten.exe
xaZYOVJW.exe
Firewallservice.exe
ifgxpers.exe
{097444e7-2d87-ba3c-2efe-9f54812d824a}.exe
bzsbkotiu.exe
Updating.exe
svchost.exe
Task Scheduler.exe
aPr0hY9.exe
install_0_msi.exe
bvhylsviw.exe
crack.exe
obvwo.exe
zqmkrehUkpoKfsafsaZg.exe
xlqbteeb.exe
WinSyncMetastore.exe
msn.exe
Disclaimer

Comments

  1. fatih boran berber Nov 7, 2012

    11820 Teknoloji Destek Hattı olarak, polis virüsü ve benzeri bilgisayar problemlerini, telefonla ve uzaktan bağlantı kurarak çözüyoruz. 11820, bir Türk Telekom kuruluşu olan *****ISTT' in Bilgi Danışma Hattıdır. Bilgisayar, Cep Telefonu, İnternet Teknolojileri ile ilgili sorunlarınızı çözüyoruz, 11820' i arayın yardımcı olalım.

    11820 Technology Support Center is a Technology Call Center, giving support to Computer, Mobile, Internet Technologies.

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.