Click on screenshot to zoom
Danger level 9
Type: Malware
Common infection symptoms:
  • Block exe files from running
  • Installs itself without permissions
  • Connects to the internet without permission
  • Slow internet connection
  • System crashes
  • Annoying Pop-up's
  • Slow Computer

Politia Română virus

Politia Română virus is definitely a frustrating infection that successfully blocks you from your desktop. Once you get infected with this ransomware, when your system loads you will see a screen-sized notification from the Romanian Police instead of your desktop. Naturally, the message that you see is NOT from the Romanian Police, the computer infection only wants to intimidate so it would be easier to steal your money. In this aspect Politia Română virus is no different from its predecessors.

This new computer infection has the same interface as Slovenská Polícia Virus, Türk Polisi virus and other similar infections. The fact that a program that targets users in Romania shares the same GUI with other "police" messages shows that it is a fake notification. Also, all of these ransomware applications come from the same source. They are delivered by Reveton Trojan, and belong to the Ukash Virus family that has been prominent among computer infections since May 2012. Politia Română virus displays the aforementioned message to convince the user that he has committed various crimes, and he must pay the ransom otherwise the computer will remain locked:

Toate operatiunile efectuate prin intermediul computerului dat se inscriu. In caz daca folositi camera-web toate fotografiile si video se salveaza pentru identificare.

Pentru a debloca computerul Dvs si de a evita urmarirea penala trebuie sa efectuati plata in marime de 300 RON.

Articolul 104 - Popularizarea Terorismului
Inchisoare de pina la 25 ani
(Ati intrat pe site-urile organizatiilor teroriste)

Suma amenzii constituie 300 RON. Achitarea se efectuiaza in termen de 48 de ore de la depistarea incalcarii.
Daca amenda nu este platita, in mod automat se deschide un dosar penal.

Politia Română virus accuses you of "popularizing terrorism" and threatens that if the case reaches the court, you might face an imprisonment sentence of up to 25 years. You have to pay a fine of 300 Romanian leu within 48 hours since the detection, otherwise the case will be automatically forwarded to the court, and you will not avoid the criminal charges. At least that's what Politia Română virus wants you to believe, because no matter how much money you spend on this threat, your computer will not be unlocked. Not to mention that the accusations are void and the ransomware has nothing in common with the Romanian Police authorities.

Hence you have to remove Politia Română virus following the instructions below:

For Windows Vista & 7:

1. Restart your computer and before the system fully loads press F8.
2. Select Safe Mode with Networking from the system boot menu and press Enter.
3. Access the Internet and download SpyHunter from here: http://www.pcthreat.com/download-sph
4. Install SpyHunter to terminate the ransomware.

For Windows XP:

1. Reboot your computer and press F8 while the system loads.
2. When system boot menu appears, use arrows keys to navigate and choose Safe Mode with Networking. Press Enter.
3. Click YES when the system asks whether you really want to load the Safe Mode.
4. Open your Internet browser to download SpyHunter.
5. Click the Start menu button and click on Run.
6. Type "msconfig" into the Run Open: box. Press Enter.
7. Click the Startup tab on the System Configuration menu and press the Disable All button. Click OK to save changes, close the menu.
8. Restart your computer in Normal mode and install SpyHunter.
9. Run the full system scan to remove Politia Română virus.

Download Spyware Removal Tool to Remove* Politia Română virus
  • Quick & tested solution for Politia Română virus removal.
  • 100% Free Scan for Windows
disclaimer

How to manually remove Politia Română virus

Files associated with Politia Română virus infection:

NTServiceManager.exe
securitywindrv.exe
oygqyunapnp.exe
setex.exe
ifgxpers.exe
rvcbcyks.exe
wlsidten.exe
00b5d693.exe
cf6640a77ed4926a4c6be661ab93def9d13408753dd07e8d02836996a2f247b6.exe
brenasa.exe
Firewallservice.exe
{097444e7-2d87-ba3c-2efe-9f54812d824a}.exe
%AppData%
%APPDATA%\Task Scheduler
obvwo.exe
puozlkmyj.dll
systemcpl.exe
secproc_isv.exe
comeo.exe
DLL321.dll
魔法桌面第三方主题破解补丁V1.1.exe
taskhost.exe.exe
jsdhlexdqkllnbcxgai.bfg
wgsdgsdgdsgsd.exe
%SystemDrive%\????????????
%WINDIR%\system32
%WINDIR%\Temp
%APPDATA%\system
install_0_msi.exe
questscan.dll
administration.exe
%CommonProgramFiles%
Q3d38543.exe
ACEIEAddOn.dll
svchost.exe
rool0_pk.exe
VaultSysUi.exe
%LOCALAPPDATA%\lollipop
msnmsgrr.exe
UpdatePriv.exe
96dddda4.dll
%LOCALAPPDATA%\Temp
dtkmujvo.exe
zqmkrehUkpoKfsafsaZg.exe
Task Scheduler.exe
xaZYOVJW.exe
%TEMP%
p1.exe
xlqbteeb.exe
wlsidten.dll
aPr0hY9.exe
b34btbztdb0vavaw.exe
xmlfilter.exe
videotwisterSA.exe
WinSyncMetastore.exe
wjthvwjb.dss
msshell.exe
gcrwcoak.exe
sqlncli.exe
Other.res
acuvzomo.exe
crack.exe
C87C.exe
csrsss.exe
m2PythonLoader.exe
OmaSG21e.exe
hwj3ba6j.dss
idiokbbrv.exe
ssntvs.exe
JfCqQ5JC.exe
pYunY8m4VL3qLc.exe
Updating.exe
ieudator.dll
mplayer2.exe
yaiiwockc.dll
Piranha.exe
audipbrd.exe
SyncHostps.exe
MusicCollector.exe
wpbt0.dll
iner.exe
skype.dat
uenovfiu.exe
dyjdl.exe
Nbt.exe
msn.exe
dqnbdq7.dss
ubvhynpxh.exe
n.
50E1.exe
%ALLUSERSPROFILE%
WINDED6.exe
UpgradeHelper.exe
%UserProfile%
00qbipeq.exe
ctfmon.exe
%APPDATA%\updates
DA0B.exe
wahneaqa.exe
ex3b.dll
najeoxtt.exe
xctqakcqbeo.dll
2084473.dll
TimeDateMUICallback.exe
msavfit.exe
bzsbkotiu.exe
bf8h8d02hf.exe
bvhylsviw.exe
msdtmsrd.exe
87b2cb3916261d5c807bf44262755cb0.exe
pmstcdjwz.exe
scvhost.exe
3511172082012Build.exe
%ALLUSERSPROFILE%\Application Data

Politia Română virus DLL's to remove:

yaiiwockc.dll
xctqakcqbeo.dll
96dddda4.dll
wlsidten.dll
DLL321.dll
ACEIEAddOn.dll
2084473.dll
questscan.dll
ex3b.dll
puozlkmyj.dll
wpbt0.dll
ieudator.dll

Politia Română virus processes to kill:

cf6640a77ed4926a4c6be661ab93def9d13408753dd07e8d02836996a2f247b6.exe
obvwo.exe
zqmkrehUkpoKfsafsaZg.exe
UpdatePriv.exe
Q3d38543.exe
wahneaqa.exe
setex.exe
DA0B.exe
mplayer2.exe
rvcbcyks.exe
Nbt.exe
taskhost.exe.exe
install_0_msi.exe
xmlfilter.exe
Firewallservice.exe
gcrwcoak.exe
ctfmon.exe
50E1.exe
VaultSysUi.exe
idiokbbrv.exe
WinSyncMetastore.exe
scvhost.exe
rool0_pk.exe
C87C.exe
00qbipeq.exe
pYunY8m4VL3qLc.exe
3511172082012Build.exe
b34btbztdb0vavaw.exe
bzsbkotiu.exe
systemcpl.exe
brenasa.exe
Piranha.exe
87b2cb3916261d5c807bf44262755cb0.exe
crack.exe
wgsdgsdgdsgsd.exe
ifgxpers.exe
p1.exe
bf8h8d02hf.exe
secproc_isv.exe
xlqbteeb.exe
TimeDateMUICallback.exe
oygqyunapnp.exe
msn.exe
aPr0hY9.exe
MusicCollector.exe
JfCqQ5JC.exe
svchost.exe
wlsidten.exe
OmaSG21e.exe
Task Scheduler.exe
NTServiceManager.exe
msdtmsrd.exe
najeoxtt.exe
m2PythonLoader.exe
comeo.exe
administration.exe
dtkmujvo.exe
msnmsgrr.exe
csrsss.exe
WINDED6.exe
UpgradeHelper.exe
securitywindrv.exe
videotwisterSA.exe
audipbrd.exe
msshell.exe
dyjdl.exe
uenovfiu.exe
00b5d693.exe
{097444e7-2d87-ba3c-2efe-9f54812d824a}.exe
sqlncli.exe
acuvzomo.exe
bvhylsviw.exe
iner.exe
SyncHostps.exe
msavfit.exe
Updating.exe
pmstcdjwz.exe
魔法桌面第三方主题破解补丁V1.1.exe
xaZYOVJW.exe
ssntvs.exe
ubvhynpxh.exe
Disclaimer

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.