Click on screenshot to zoom
Danger level 9
Type: Malware
Common infection symptoms:
  • Block exe files from running
  • Installs itself without permissions
  • Connects to the internet without permission
  • Slow internet connection
  • System crashes
  • Annoying Pop-up's
  • Slow Computer

Politia Română virus

Politia Română virus is definitely a frustrating infection that successfully blocks you from your desktop. Once you get infected with this ransomware, when your system loads you will see a screen-sized notification from the Romanian Police instead of your desktop. Naturally, the message that you see is NOT from the Romanian Police, the computer infection only wants to intimidate so it would be easier to steal your money. In this aspect Politia Română virus is no different from its predecessors.

This new computer infection has the same interface as Slovenská Polícia Virus, Türk Polisi virus and other similar infections. The fact that a program that targets users in Romania shares the same GUI with other "police" messages shows that it is a fake notification. Also, all of these ransomware applications come from the same source. They are delivered by Reveton Trojan, and belong to the Ukash Virus family that has been prominent among computer infections since May 2012. Politia Română virus displays the aforementioned message to convince the user that he has committed various crimes, and he must pay the ransom otherwise the computer will remain locked:

Toate operatiunile efectuate prin intermediul computerului dat se inscriu. In caz daca folositi camera-web toate fotografiile si video se salveaza pentru identificare.

Pentru a debloca computerul Dvs si de a evita urmarirea penala trebuie sa efectuati plata in marime de 300 RON.

Articolul 104 - Popularizarea Terorismului
Inchisoare de pina la 25 ani
(Ati intrat pe site-urile organizatiilor teroriste)

Suma amenzii constituie 300 RON. Achitarea se efectuiaza in termen de 48 de ore de la depistarea incalcarii.
Daca amenda nu este platita, in mod automat se deschide un dosar penal.

Politia Română virus accuses you of "popularizing terrorism" and threatens that if the case reaches the court, you might face an imprisonment sentence of up to 25 years. You have to pay a fine of 300 Romanian leu within 48 hours since the detection, otherwise the case will be automatically forwarded to the court, and you will not avoid the criminal charges. At least that's what Politia Română virus wants you to believe, because no matter how much money you spend on this threat, your computer will not be unlocked. Not to mention that the accusations are void and the ransomware has nothing in common with the Romanian Police authorities.

Hence you have to remove Politia Română virus following the instructions below:

For Windows Vista & 7:

1. Restart your computer and before the system fully loads press F8.
2. Select Safe Mode with Networking from the system boot menu and press Enter.
3. Access the Internet and download SpyHunter from here: http://www.pcthreat.com/download-sph
4. Install SpyHunter to terminate the ransomware.

For Windows XP:

1. Reboot your computer and press F8 while the system loads.
2. When system boot menu appears, use arrows keys to navigate and choose Safe Mode with Networking. Press Enter.
3. Click YES when the system asks whether you really want to load the Safe Mode.
4. Open your Internet browser to download SpyHunter.
5. Click the Start menu button and click on Run.
6. Type "msconfig" into the Run Open: box. Press Enter.
7. Click the Startup tab on the System Configuration menu and press the Disable All button. Click OK to save changes, close the menu.
8. Restart your computer in Normal mode and install SpyHunter.
9. Run the full system scan to remove Politia Română virus.

Download Spyware Removal Tool to Remove* Politia Română virus
  • Quick & tested solution for Politia Română virus removal.
  • 100% Free Scan for Windows
disclaimer

How to manually remove Politia Română virus

Files associated with Politia Română virus infection:

Nbt.exe
WINDED6.exe
audipbrd.exe
ifgxpers.exe
zqmkrehUkpoKfsafsaZg.exe
%APPDATA%\updates
msshell.exe
questscan.dll
wpbt0.dll
UpdatePriv.exe
wlsidten.dll
JfCqQ5JC.exe
xmlfilter.exe
wlsidten.exe
Firewallservice.exe
魔法桌面第三方主题破解补丁V1.1.exe
setex.exe
yaiiwockc.dll
%LOCALAPPDATA%\lollipop
2084473.dll
00b5d693.exe
C87C.exe
scvhost.exe
ctfmon.exe
m2PythonLoader.exe
pmstcdjwz.exe
p1.exe
MusicCollector.exe
systemcpl.exe
mplayer2.exe
bf8h8d02hf.exe
crack.exe
%APPDATA%\Task Scheduler
idiokbbrv.exe
3511172082012Build.exe
%UserProfile%
%LOCALAPPDATA%\Temp
acuvzomo.exe
87b2cb3916261d5c807bf44262755cb0.exe
%WINDIR%\system32
TimeDateMUICallback.exe
50E1.exe
%TEMP%
wgsdgsdgdsgsd.exe
b34btbztdb0vavaw.exe
Task Scheduler.exe
DLL321.dll
Updating.exe
ubvhynpxh.exe
securitywindrv.exe
%CommonProgramFiles%
cf6640a77ed4926a4c6be661ab93def9d13408753dd07e8d02836996a2f247b6.exe
msdtmsrd.exe
WinSyncMetastore.exe
taskhost.exe.exe
oygqyunapnp.exe
n.
%ALLUSERSPROFILE%
%SystemDrive%\????????????
aPr0hY9.exe
wjthvwjb.dss
%WINDIR%\Temp
{097444e7-2d87-ba3c-2efe-9f54812d824a}.exe
install_0_msi.exe
brenasa.exe
bzsbkotiu.exe
ssntvs.exe
svchost.exe
ACEIEAddOn.dll
ieudator.dll
rool0_pk.exe
skype.dat
xlqbteeb.exe
dqnbdq7.dss
VaultSysUi.exe
obvwo.exe
SyncHostps.exe
comeo.exe
UpgradeHelper.exe
csrsss.exe
puozlkmyj.dll
najeoxtt.exe
OmaSG21e.exe
bvhylsviw.exe
uenovfiu.exe
Piranha.exe
96dddda4.dll
xaZYOVJW.exe
sqlncli.exe
ex3b.dll
dyjdl.exe
secproc_isv.exe
rvcbcyks.exe
%APPDATA%\system
Q3d38543.exe
DA0B.exe
hwj3ba6j.dss
administration.exe
xctqakcqbeo.dll
videotwisterSA.exe
dtkmujvo.exe
%AppData%
msavfit.exe
Other.res
iner.exe
00qbipeq.exe
%ALLUSERSPROFILE%\Application Data
gcrwcoak.exe
jsdhlexdqkllnbcxgai.bfg
pYunY8m4VL3qLc.exe
NTServiceManager.exe
msn.exe
msnmsgrr.exe
wahneaqa.exe

Politia Română virus DLL's to remove:

2084473.dll
xctqakcqbeo.dll
ex3b.dll
wpbt0.dll
puozlkmyj.dll
yaiiwockc.dll
96dddda4.dll
ieudator.dll
DLL321.dll
wlsidten.dll
ACEIEAddOn.dll
questscan.dll

Politia Română virus processes to kill:

xaZYOVJW.exe
msdtmsrd.exe
msn.exe
00b5d693.exe
dtkmujvo.exe
NTServiceManager.exe
MusicCollector.exe
administration.exe
WinSyncMetastore.exe
uenovfiu.exe
bf8h8d02hf.exe
C87C.exe
WINDED6.exe
acuvzomo.exe
TimeDateMUICallback.exe
Q3d38543.exe
魔法桌面第三方主题破解补丁V1.1.exe
Nbt.exe
ifgxpers.exe
UpdatePriv.exe
msavfit.exe
JfCqQ5JC.exe
SyncHostps.exe
idiokbbrv.exe
zqmkrehUkpoKfsafsaZg.exe
bvhylsviw.exe
ctfmon.exe
ubvhynpxh.exe
setex.exe
taskhost.exe.exe
najeoxtt.exe
scvhost.exe
87b2cb3916261d5c807bf44262755cb0.exe
svchost.exe
Piranha.exe
Firewallservice.exe
Task Scheduler.exe
VaultSysUi.exe
wgsdgsdgdsgsd.exe
sqlncli.exe
xlqbteeb.exe
p1.exe
pYunY8m4VL3qLc.exe
iner.exe
{097444e7-2d87-ba3c-2efe-9f54812d824a}.exe
csrsss.exe
DA0B.exe
gcrwcoak.exe
obvwo.exe
bzsbkotiu.exe
mplayer2.exe
brenasa.exe
m2PythonLoader.exe
comeo.exe
rool0_pk.exe
secproc_isv.exe
Updating.exe
crack.exe
securitywindrv.exe
50E1.exe
OmaSG21e.exe
pmstcdjwz.exe
b34btbztdb0vavaw.exe
audipbrd.exe
systemcpl.exe
dyjdl.exe
install_0_msi.exe
aPr0hY9.exe
msnmsgrr.exe
msshell.exe
rvcbcyks.exe
oygqyunapnp.exe
xmlfilter.exe
00qbipeq.exe
videotwisterSA.exe
wahneaqa.exe
wlsidten.exe
ssntvs.exe
3511172082012Build.exe
UpgradeHelper.exe
cf6640a77ed4926a4c6be661ab93def9d13408753dd07e8d02836996a2f247b6.exe
Disclaimer

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.