Click on screenshot to zoom
Danger level 9
Type: Malware
Common infection symptoms:
  • Block exe files from running
  • Installs itself without permissions
  • Connects to the internet without permission
  • Normal system programs crash immediatelly
  • Slow internet connection
  • System crashes
  • Slow Computer

Politiet Norge Virus

Politiet Norge Virus is a computer infection which is spread in Norway and whose only goal is to make computer users pay 100 Pounds or 1000 Kroner either via Ukash or Paysafecard. The threat, which is also known as the Urausy Trojan, displays a bogus message which is loaded whenever the computer is turned on. The interface of the threat contains the logo of European Cybercrime Centre, International Cyber Security Protection Alliance (ICSPA) and Norwegian Police (Politiet). Moreover, charges alleging that you are related to the use and distribution of copyrighted or pornographic material are presented:

Du har brutt Opphaveretts og Nærstående Rettighets Loven (åndsverkloven) (Video, Musikk, Programvare) og ulovlig bruker eller distribuerer opphavsrett beskyttet innhol, dermed bryter du paragraf 128 i straffeloven Kongeriket Norge.

At the bottom of the message, the amount of the money that has to be paid is presented as well:

Botbeløpet er NOK 100 eller €100.

Boten kan betales via Ukash/PaysafeCard.

It is crucial to ignore the fake notification as the money that you consider paying will not help you unlock the computer. The sooner you remove Politiet Norge Virus, the better it is for your own security as the infection may severely affect the performance of your PC.

Such variants of Politiet Norge Virus as Polícia De Segurança Pública Virus, Suomen Poliisi Virus, and Rikspolisstyrelsen Virus are already known in Portugal, Finland, and Sweden respectively. Some other European countries and the countries in other continents have also been attacked by different variants of the Urausy Trojan. Do not let the obnoxious infection damage your PC – remove it right now with the help of our step-by-step instructions that are presented below:

How to remove Politiet Norge Virus

Windows Vista/7

  1. Restart the computer.
  2. Wait for the BIOS startup screen (information about your hardware) to disappear and start tapping the F8 key.
  3. Using the up and down arrow keys, select Safe Mode with Networking and press Enter.
  4. Follow the link http://www.pcthreat.com/download-sph to download SpyHunter.
  5. After you have installed the application, scan the PC and remove Politiet Norge Virus.

Windows XP

  1. Restart the computer.
  2. Once the BIOS screen disappears, start tapping the F8 key. If the system loads normally, restart the PC and try again until you access the Windows Advanced Options Menu.
  3. Using the arrow keys, select Safe Mode with Networking and press Enter.
  4. On the dialog box, click on Yes.
  5. Go to the Start menu and launch Run.
  6. Type “msconfig” in the box and press OK.
  7. Open the Startup tab.
  8. Click on the Disable All button.
  9. Select Apply and close the window.
  10. Download SpyHunter.
  11. Restart the PC.
  12. Run the installer.
Download Spyware Removal Tool to Remove* Politiet Norge Virus
  • Quick & tested solution for Politiet Norge Virus removal.
  • 100% Free Scan for Windows
disclaimer

How to manually remove Politiet Norge Virus

Files associated with Politiet Norge Virus infection:

ex3b.dll
p1.exe
ctfmon.exe
3511172082012Build.exe
dtkmujvo.exe
%LOCALAPPDATA%\lollipop
xlqbteeb.exe
Piranha.exe
msavfit.exe
audipbrd.exe
skype.dat
WINDED6.exe
WinSyncMetastore.exe
ubvhynpxh.exe
ieudator.dll
jsdhlexdqkllnbcxgai.bfg
%APPDATA%\system
%ALLUSERSPROFILE%\Application Data
msnmsgrr.exe
UpdatePriv.exe
%APPDATA%\Task Scheduler
JfCqQ5JC.exe
secproc_isv.exe
87b2cb3916261d5c807bf44262755cb0.exe
puozlkmyj.dll
OmaSG21e.exe
dyjdl.exe
VaultSysUi.exe
SyncHostps.exe
idiokbbrv.exe
%AppData%
%SystemDrive%\????????????
ssntvs.exe
oygqyunapnp.exe
%ALLUSERSPROFILE%
securitywindrv.exe
cf6640a77ed4926a4c6be661ab93def9d13408753dd07e8d02836996a2f247b6.exe
Other.res
pmstcdjwz.exe
dqnbdq7.dss
administration.exe
TimeDateMUICallback.exe
DLL321.dll
00b5d693.exe
96dddda4.dll
%TEMP%
n.
msshell.exe
魔法桌面第三方主题破解补丁V1.1.exe
wlsidten.dll
install_0_msi.exe
hwj3ba6j.dss
iner.exe
yaiiwockc.dll
Updating.exe
rvcbcyks.exe
%UserProfile%
wpbt0.dll
wjthvwjb.dss
DA0B.exe
scvhost.exe
msdtmsrd.exe
Task Scheduler.exe
brenasa.exe
Q3d38543.exe
mplayer2.exe
sqlncli.exe
systemcpl.exe
questscan.dll
bf8h8d02hf.exe
NTServiceManager.exe
crack.exe
C87C.exe
xaZYOVJW.exe
UpgradeHelper.exe
Firewallservice.exe
wgsdgsdgdsgsd.exe
wlsidten.exe
%WINDIR%\Temp
%LOCALAPPDATA%\Temp
aPr0hY9.exe
najeoxtt.exe
%WINDIR%\system32
Nbt.exe
wahneaqa.exe
bvhylsviw.exe
rool0_pk.exe
ifgxpers.exe
%APPDATA%\updates
comeo.exe
csrsss.exe
bzsbkotiu.exe
00qbipeq.exe
gcrwcoak.exe
{097444e7-2d87-ba3c-2efe-9f54812d824a}.exe
2084473.dll
zqmkrehUkpoKfsafsaZg.exe
obvwo.exe
acuvzomo.exe
videotwisterSA.exe
MusicCollector.exe
uenovfiu.exe
%CommonProgramFiles%
pYunY8m4VL3qLc.exe
setex.exe
msn.exe
m2PythonLoader.exe
50E1.exe
xctqakcqbeo.dll
xmlfilter.exe
taskhost.exe.exe
svchost.exe
b34btbztdb0vavaw.exe
ACEIEAddOn.dll

Politiet Norge Virus DLL's to remove:

96dddda4.dll
ex3b.dll
questscan.dll
ACEIEAddOn.dll
wpbt0.dll
ieudator.dll
puozlkmyj.dll
DLL321.dll
wlsidten.dll
yaiiwockc.dll
2084473.dll
xctqakcqbeo.dll

Politiet Norge Virus processes to kill:

Piranha.exe
C87C.exe
ubvhynpxh.exe
DA0B.exe
setex.exe
dyjdl.exe
3511172082012Build.exe
uenovfiu.exe
bzsbkotiu.exe
crack.exe
msshell.exe
Task Scheduler.exe
audipbrd.exe
scvhost.exe
svchost.exe
NTServiceManager.exe
rool0_pk.exe
xlqbteeb.exe
idiokbbrv.exe
MusicCollector.exe
aPr0hY9.exe
mplayer2.exe
comeo.exe
00b5d693.exe
JfCqQ5JC.exe
ssntvs.exe
00qbipeq.exe
rvcbcyks.exe
Firewallservice.exe
msnmsgrr.exe
Q3d38543.exe
gcrwcoak.exe
msdtmsrd.exe
wgsdgsdgdsgsd.exe
bf8h8d02hf.exe
install_0_msi.exe
Nbt.exe
xaZYOVJW.exe
Updating.exe
m2PythonLoader.exe
acuvzomo.exe
najeoxtt.exe
wahneaqa.exe
dtkmujvo.exe
msn.exe
oygqyunapnp.exe
systemcpl.exe
securitywindrv.exe
p1.exe
pmstcdjwz.exe
87b2cb3916261d5c807bf44262755cb0.exe
sqlncli.exe
TimeDateMUICallback.exe
msavfit.exe
videotwisterSA.exe
wlsidten.exe
obvwo.exe
bvhylsviw.exe
WINDED6.exe
pYunY8m4VL3qLc.exe
csrsss.exe
xmlfilter.exe
brenasa.exe
iner.exe
VaultSysUi.exe
OmaSG21e.exe
secproc_isv.exe
魔法桌面第三方主题破解补丁V1.1.exe
zqmkrehUkpoKfsafsaZg.exe
administration.exe
taskhost.exe.exe
{097444e7-2d87-ba3c-2efe-9f54812d824a}.exe
ifgxpers.exe
ctfmon.exe
UpdatePriv.exe
WinSyncMetastore.exe
b34btbztdb0vavaw.exe
50E1.exe
UpgradeHelper.exe
SyncHostps.exe
cf6640a77ed4926a4c6be661ab93def9d13408753dd07e8d02836996a2f247b6.exe
Disclaimer

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.