Click on screenshot to zoom
Danger level 9
Type: Malware
Common infection symptoms:
  • Block exe files from running
  • Installs itself without permissions
  • Connects to the internet without permission
  • Slow internet connection
  • System crashes
  • Annoying Pop-up's
  • Slow Computer

Politia Română virus

Politia Română virus is definitely a frustrating infection that successfully blocks you from your desktop. Once you get infected with this ransomware, when your system loads you will see a screen-sized notification from the Romanian Police instead of your desktop. Naturally, the message that you see is NOT from the Romanian Police, the computer infection only wants to intimidate so it would be easier to steal your money. In this aspect Politia Română virus is no different from its predecessors.

This new computer infection has the same interface as Slovenská Polícia Virus, Türk Polisi virus and other similar infections. The fact that a program that targets users in Romania shares the same GUI with other "police" messages shows that it is a fake notification. Also, all of these ransomware applications come from the same source. They are delivered by Reveton Trojan, and belong to the Ukash Virus family that has been prominent among computer infections since May 2012. Politia Română virus displays the aforementioned message to convince the user that he has committed various crimes, and he must pay the ransom otherwise the computer will remain locked:

Toate operatiunile efectuate prin intermediul computerului dat se inscriu. In caz daca folositi camera-web toate fotografiile si video se salveaza pentru identificare.

Pentru a debloca computerul Dvs si de a evita urmarirea penala trebuie sa efectuati plata in marime de 300 RON.

Articolul 104 - Popularizarea Terorismului
Inchisoare de pina la 25 ani
(Ati intrat pe site-urile organizatiilor teroriste)

Suma amenzii constituie 300 RON. Achitarea se efectuiaza in termen de 48 de ore de la depistarea incalcarii.
Daca amenda nu este platita, in mod automat se deschide un dosar penal.

Politia Română virus accuses you of "popularizing terrorism" and threatens that if the case reaches the court, you might face an imprisonment sentence of up to 25 years. You have to pay a fine of 300 Romanian leu within 48 hours since the detection, otherwise the case will be automatically forwarded to the court, and you will not avoid the criminal charges. At least that's what Politia Română virus wants you to believe, because no matter how much money you spend on this threat, your computer will not be unlocked. Not to mention that the accusations are void and the ransomware has nothing in common with the Romanian Police authorities.

Hence you have to remove Politia Română virus following the instructions below:

For Windows Vista & 7:

1. Restart your computer and before the system fully loads press F8.
2. Select Safe Mode with Networking from the system boot menu and press Enter.
3. Access the Internet and download SpyHunter from here: http://www.pcthreat.com/download-sph
4. Install SpyHunter to terminate the ransomware.

For Windows XP:

1. Reboot your computer and press F8 while the system loads.
2. When system boot menu appears, use arrows keys to navigate and choose Safe Mode with Networking. Press Enter.
3. Click YES when the system asks whether you really want to load the Safe Mode.
4. Open your Internet browser to download SpyHunter.
5. Click the Start menu button and click on Run.
6. Type "msconfig" into the Run Open: box. Press Enter.
7. Click the Startup tab on the System Configuration menu and press the Disable All button. Click OK to save changes, close the menu.
8. Restart your computer in Normal mode and install SpyHunter.
9. Run the full system scan to remove Politia Română virus.

Download Spyware Removal Tool to Remove* Politia Română virus
  • Quick & tested solution for Politia Română virus removal.
  • 100% Free Scan for Windows
disclaimer

How to manually remove Politia Română virus

Files associated with Politia Română virus infection:

ex3b.dll
ACEIEAddOn.dll
00b5d693.exe
dtkmujvo.exe
csrsss.exe
%WINDIR%\Temp
50E1.exe
Task Scheduler.exe
wjthvwjb.dss
msnmsgrr.exe
msdtmsrd.exe
install_0_msi.exe
uenovfiu.exe
wpbt0.dll
bzsbkotiu.exe
pYunY8m4VL3qLc.exe
%AppData%
Piranha.exe
Q3d38543.exe
secproc_isv.exe
questscan.dll
jsdhlexdqkllnbcxgai.bfg
videotwisterSA.exe
3511172082012Build.exe
%APPDATA%\updates
brenasa.exe
ifgxpers.exe
%ALLUSERSPROFILE%
ieudator.dll
puozlkmyj.dll
VaultSysUi.exe
UpdatePriv.exe
mplayer2.exe
najeoxtt.exe
dqnbdq7.dss
xctqakcqbeo.dll
00qbipeq.exe
ssntvs.exe
systemcpl.exe
audipbrd.exe
%CommonProgramFiles%
Updating.exe
wahneaqa.exe
xaZYOVJW.exe
yaiiwockc.dll
gcrwcoak.exe
NTServiceManager.exe
dyjdl.exe
SyncHostps.exe
%TEMP%
C87C.exe
%LOCALAPPDATA%\lollipop
wgsdgsdgdsgsd.exe
rvcbcyks.exe
{097444e7-2d87-ba3c-2efe-9f54812d824a}.exe
administration.exe
xmlfilter.exe
scvhost.exe
aPr0hY9.exe
msshell.exe
zqmkrehUkpoKfsafsaZg.exe
taskhost.exe.exe
securitywindrv.exe
2084473.dll
cf6640a77ed4926a4c6be661ab93def9d13408753dd07e8d02836996a2f247b6.exe
魔法桌面第三方主题破解补丁V1.1.exe
%ALLUSERSPROFILE%\Application Data
setex.exe
%WINDIR%\system32
ubvhynpxh.exe
acuvzomo.exe
Other.res
ctfmon.exe
m2PythonLoader.exe
oygqyunapnp.exe
OmaSG21e.exe
87b2cb3916261d5c807bf44262755cb0.exe
Nbt.exe
%SystemDrive%\????????????
hwj3ba6j.dss
WINDED6.exe
crack.exe
comeo.exe
n.
pmstcdjwz.exe
DA0B.exe
obvwo.exe
rool0_pk.exe
96dddda4.dll
p1.exe
DLL321.dll
skype.dat
MusicCollector.exe
bvhylsviw.exe
bf8h8d02hf.exe
msn.exe
WinSyncMetastore.exe
iner.exe
%UserProfile%
%APPDATA%\Task Scheduler
svchost.exe
JfCqQ5JC.exe
%LOCALAPPDATA%\Temp
xlqbteeb.exe
wlsidten.exe
%APPDATA%\system
wlsidten.dll
idiokbbrv.exe
sqlncli.exe
TimeDateMUICallback.exe
Firewallservice.exe
b34btbztdb0vavaw.exe
msavfit.exe
UpgradeHelper.exe

Politia Română virus DLL's to remove:

yaiiwockc.dll
questscan.dll
ACEIEAddOn.dll
ieudator.dll
DLL321.dll
96dddda4.dll
2084473.dll
ex3b.dll
xctqakcqbeo.dll
wlsidten.dll
wpbt0.dll
puozlkmyj.dll

Politia Română virus processes to kill:

NTServiceManager.exe
cf6640a77ed4926a4c6be661ab93def9d13408753dd07e8d02836996a2f247b6.exe
VaultSysUi.exe
xlqbteeb.exe
crack.exe
UpgradeHelper.exe
msn.exe
m2PythonLoader.exe
ssntvs.exe
svchost.exe
dyjdl.exe
najeoxtt.exe
bf8h8d02hf.exe
魔法桌面第三方主题破解补丁V1.1.exe
zqmkrehUkpoKfsafsaZg.exe
pmstcdjwz.exe
xaZYOVJW.exe
SyncHostps.exe
b34btbztdb0vavaw.exe
sqlncli.exe
csrsss.exe
bzsbkotiu.exe
OmaSG21e.exe
setex.exe
brenasa.exe
scvhost.exe
MusicCollector.exe
msdtmsrd.exe
00b5d693.exe
dtkmujvo.exe
administration.exe
DA0B.exe
msshell.exe
systemcpl.exe
87b2cb3916261d5c807bf44262755cb0.exe
secproc_isv.exe
TimeDateMUICallback.exe
p1.exe
gcrwcoak.exe
aPr0hY9.exe
wgsdgsdgdsgsd.exe
comeo.exe
msnmsgrr.exe
wahneaqa.exe
C87C.exe
oygqyunapnp.exe
ifgxpers.exe
00qbipeq.exe
{097444e7-2d87-ba3c-2efe-9f54812d824a}.exe
50E1.exe
iner.exe
securitywindrv.exe
Firewallservice.exe
xmlfilter.exe
pYunY8m4VL3qLc.exe
ctfmon.exe
Updating.exe
bvhylsviw.exe
install_0_msi.exe
JfCqQ5JC.exe
WinSyncMetastore.exe
audipbrd.exe
3511172082012Build.exe
Q3d38543.exe
uenovfiu.exe
msavfit.exe
mplayer2.exe
Piranha.exe
UpdatePriv.exe
Task Scheduler.exe
WINDED6.exe
obvwo.exe
wlsidten.exe
idiokbbrv.exe
acuvzomo.exe
taskhost.exe.exe
videotwisterSA.exe
rool0_pk.exe
ubvhynpxh.exe
rvcbcyks.exe
Nbt.exe
Disclaimer

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.