Click on screenshot to zoom
Danger level 9
Type: Malware
Common infection symptoms:
  • Block exe files from running
  • Installs itself without permissions
  • Connects to the internet without permission
  • Normal system programs crash immediatelly
  • Slow internet connection
  • System crashes
  • Slow Computer

Politiet Norge Virus

Politiet Norge Virus is a computer infection which is spread in Norway and whose only goal is to make computer users pay 100 Pounds or 1000 Kroner either via Ukash or Paysafecard. The threat, which is also known as the Urausy Trojan, displays a bogus message which is loaded whenever the computer is turned on. The interface of the threat contains the logo of European Cybercrime Centre, International Cyber Security Protection Alliance (ICSPA) and Norwegian Police (Politiet). Moreover, charges alleging that you are related to the use and distribution of copyrighted or pornographic material are presented:

Du har brutt Opphaveretts og Nærstående Rettighets Loven (åndsverkloven) (Video, Musikk, Programvare) og ulovlig bruker eller distribuerer opphavsrett beskyttet innhol, dermed bryter du paragraf 128 i straffeloven Kongeriket Norge.

At the bottom of the message, the amount of the money that has to be paid is presented as well:

Botbeløpet er NOK 100 eller €100.

Boten kan betales via Ukash/PaysafeCard.

It is crucial to ignore the fake notification as the money that you consider paying will not help you unlock the computer. The sooner you remove Politiet Norge Virus, the better it is for your own security as the infection may severely affect the performance of your PC.

Such variants of Politiet Norge Virus as Polícia De Segurança Pública Virus, Suomen Poliisi Virus, and Rikspolisstyrelsen Virus are already known in Portugal, Finland, and Sweden respectively. Some other European countries and the countries in other continents have also been attacked by different variants of the Urausy Trojan. Do not let the obnoxious infection damage your PC – remove it right now with the help of our step-by-step instructions that are presented below:

How to remove Politiet Norge Virus

Windows Vista/7

  1. Restart the computer.
  2. Wait for the BIOS startup screen (information about your hardware) to disappear and start tapping the F8 key.
  3. Using the up and down arrow keys, select Safe Mode with Networking and press Enter.
  4. Follow the link http://www.pcthreat.com/download-sph to download SpyHunter.
  5. After you have installed the application, scan the PC and remove Politiet Norge Virus.

Windows XP

  1. Restart the computer.
  2. Once the BIOS screen disappears, start tapping the F8 key. If the system loads normally, restart the PC and try again until you access the Windows Advanced Options Menu.
  3. Using the arrow keys, select Safe Mode with Networking and press Enter.
  4. On the dialog box, click on Yes.
  5. Go to the Start menu and launch Run.
  6. Type “msconfig” in the box and press OK.
  7. Open the Startup tab.
  8. Click on the Disable All button.
  9. Select Apply and close the window.
  10. Download SpyHunter.
  11. Restart the PC.
  12. Run the installer.
Download Spyware Removal Tool to Remove* Politiet Norge Virus
  • Quick & tested solution for Politiet Norge Virus removal.
  • 100% Free Scan for Windows
disclaimer

How to manually remove Politiet Norge Virus

Files associated with Politiet Norge Virus infection:

OmaSG21e.exe
gcrwcoak.exe
mplayer2.exe
JfCqQ5JC.exe
xmlfilter.exe
Firewallservice.exe
msnmsgrr.exe
xaZYOVJW.exe
Q3d38543.exe
scvhost.exe
obvwo.exe
MusicCollector.exe
systemcpl.exe
p1.exe
ssntvs.exe
96dddda4.dll
msshell.exe
administration.exe
%SystemDrive%\????????????
ex3b.dll
%APPDATA%\system
ACEIEAddOn.dll
rvcbcyks.exe
msn.exe
%CommonProgramFiles%
%AppData%
WinSyncMetastore.exe
audipbrd.exe
ieudator.dll
yaiiwockc.dll
ifgxpers.exe
%LOCALAPPDATA%\lollipop
VaultSysUi.exe
%ALLUSERSPROFILE%\Application Data
cf6640a77ed4926a4c6be661ab93def9d13408753dd07e8d02836996a2f247b6.exe
bf8h8d02hf.exe
wjthvwjb.dss
skype.dat
wlsidten.exe
Updating.exe
msdtmsrd.exe
pmstcdjwz.exe
setex.exe
dyjdl.exe
pYunY8m4VL3qLc.exe
ctfmon.exe
%APPDATA%\updates
00b5d693.exe
2084473.dll
UpgradeHelper.exe
%ALLUSERSPROFILE%
Piranha.exe
%TEMP%
taskhost.exe.exe
acuvzomo.exe
50E1.exe
C87C.exe
%APPDATA%\Task Scheduler
brenasa.exe
Nbt.exe
xlqbteeb.exe
00qbipeq.exe
aPr0hY9.exe
questscan.dll
oygqyunapnp.exe
DLL321.dll
zqmkrehUkpoKfsafsaZg.exe
rool0_pk.exe
TimeDateMUICallback.exe
SyncHostps.exe
魔法桌面第三方主题破解补丁V1.1.exe
svchost.exe
%WINDIR%\Temp
UpdatePriv.exe
DA0B.exe
wlsidten.dll
jsdhlexdqkllnbcxgai.bfg
ubvhynpxh.exe
csrsss.exe
Other.res
{097444e7-2d87-ba3c-2efe-9f54812d824a}.exe
NTServiceManager.exe
najeoxtt.exe
sqlncli.exe
securitywindrv.exe
m2PythonLoader.exe
videotwisterSA.exe
dtkmujvo.exe
hwj3ba6j.dss
WINDED6.exe
msavfit.exe
%UserProfile%
comeo.exe
iner.exe
secproc_isv.exe
%WINDIR%\system32
87b2cb3916261d5c807bf44262755cb0.exe
wahneaqa.exe
Task Scheduler.exe
bzsbkotiu.exe
install_0_msi.exe
wgsdgsdgdsgsd.exe
%LOCALAPPDATA%\Temp
xctqakcqbeo.dll
bvhylsviw.exe
crack.exe
idiokbbrv.exe
dqnbdq7.dss
n.
b34btbztdb0vavaw.exe
puozlkmyj.dll
wpbt0.dll
3511172082012Build.exe
uenovfiu.exe

Politiet Norge Virus DLL's to remove:

2084473.dll
ex3b.dll
wpbt0.dll
xctqakcqbeo.dll
puozlkmyj.dll
ACEIEAddOn.dll
ieudator.dll
questscan.dll
yaiiwockc.dll
96dddda4.dll
DLL321.dll
wlsidten.dll

Politiet Norge Virus processes to kill:

comeo.exe
rool0_pk.exe
00qbipeq.exe
crack.exe
m2PythonLoader.exe
WinSyncMetastore.exe
NTServiceManager.exe
svchost.exe
TimeDateMUICallback.exe
acuvzomo.exe
msdtmsrd.exe
UpdatePriv.exe
wahneaqa.exe
oygqyunapnp.exe
setex.exe
bf8h8d02hf.exe
mplayer2.exe
wgsdgsdgdsgsd.exe
3511172082012Build.exe
C87C.exe
ctfmon.exe
JfCqQ5JC.exe
VaultSysUi.exe
xmlfilter.exe
Q3d38543.exe
{097444e7-2d87-ba3c-2efe-9f54812d824a}.exe
iner.exe
Updating.exe
pmstcdjwz.exe
videotwisterSA.exe
rvcbcyks.exe
Task Scheduler.exe
UpgradeHelper.exe
b34btbztdb0vavaw.exe
idiokbbrv.exe
Firewallservice.exe
systemcpl.exe
87b2cb3916261d5c807bf44262755cb0.exe
bzsbkotiu.exe
brenasa.exe
msnmsgrr.exe
pYunY8m4VL3qLc.exe
dyjdl.exe
cf6640a77ed4926a4c6be661ab93def9d13408753dd07e8d02836996a2f247b6.exe
securitywindrv.exe
wlsidten.exe
MusicCollector.exe
msavfit.exe
secproc_isv.exe
dtkmujvo.exe
xaZYOVJW.exe
aPr0hY9.exe
OmaSG21e.exe
sqlncli.exe
zqmkrehUkpoKfsafsaZg.exe
p1.exe
msn.exe
WINDED6.exe
DA0B.exe
ssntvs.exe
obvwo.exe
csrsss.exe
gcrwcoak.exe
魔法桌面第三方主题破解补丁V1.1.exe
ifgxpers.exe
50E1.exe
bvhylsviw.exe
Nbt.exe
administration.exe
00b5d693.exe
taskhost.exe.exe
Piranha.exe
install_0_msi.exe
audipbrd.exe
scvhost.exe
najeoxtt.exe
ubvhynpxh.exe
xlqbteeb.exe
msshell.exe
SyncHostps.exe
uenovfiu.exe
Disclaimer

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.