Click on screenshot to zoom
Danger level 9
Type: Malware
Common infection symptoms:
  • Block exe files from running
  • Installs itself without permissions
  • Connects to the internet without permission
  • Normal system programs crash immediatelly
  • Slow internet connection
  • System crashes
  • Slow Computer

Politiet Norge Virus

Politiet Norge Virus is a computer infection which is spread in Norway and whose only goal is to make computer users pay 100 Pounds or 1000 Kroner either via Ukash or Paysafecard. The threat, which is also known as the Urausy Trojan, displays a bogus message which is loaded whenever the computer is turned on. The interface of the threat contains the logo of European Cybercrime Centre, International Cyber Security Protection Alliance (ICSPA) and Norwegian Police (Politiet). Moreover, charges alleging that you are related to the use and distribution of copyrighted or pornographic material are presented:

Du har brutt Opphaveretts og Nærstående Rettighets Loven (åndsverkloven) (Video, Musikk, Programvare) og ulovlig bruker eller distribuerer opphavsrett beskyttet innhol, dermed bryter du paragraf 128 i straffeloven Kongeriket Norge.

At the bottom of the message, the amount of the money that has to be paid is presented as well:

Botbeløpet er NOK 100 eller €100.

Boten kan betales via Ukash/PaysafeCard.

It is crucial to ignore the fake notification as the money that you consider paying will not help you unlock the computer. The sooner you remove Politiet Norge Virus, the better it is for your own security as the infection may severely affect the performance of your PC.

Such variants of Politiet Norge Virus as Polícia De Segurança Pública Virus, Suomen Poliisi Virus, and Rikspolisstyrelsen Virus are already known in Portugal, Finland, and Sweden respectively. Some other European countries and the countries in other continents have also been attacked by different variants of the Urausy Trojan. Do not let the obnoxious infection damage your PC – remove it right now with the help of our step-by-step instructions that are presented below:

How to remove Politiet Norge Virus

Windows Vista/7

  1. Restart the computer.
  2. Wait for the BIOS startup screen (information about your hardware) to disappear and start tapping the F8 key.
  3. Using the up and down arrow keys, select Safe Mode with Networking and press Enter.
  4. Follow the link http://www.pcthreat.com/download-sph to download SpyHunter.
  5. After you have installed the application, scan the PC and remove Politiet Norge Virus.

Windows XP

  1. Restart the computer.
  2. Once the BIOS screen disappears, start tapping the F8 key. If the system loads normally, restart the PC and try again until you access the Windows Advanced Options Menu.
  3. Using the arrow keys, select Safe Mode with Networking and press Enter.
  4. On the dialog box, click on Yes.
  5. Go to the Start menu and launch Run.
  6. Type “msconfig” in the box and press OK.
  7. Open the Startup tab.
  8. Click on the Disable All button.
  9. Select Apply and close the window.
  10. Download SpyHunter.
  11. Restart the PC.
  12. Run the installer.
Download Spyware Removal Tool to Remove* Politiet Norge Virus
  • Quick & tested solution for Politiet Norge Virus removal.
  • 100% Free Scan for Windows
disclaimer

How to manually remove Politiet Norge Virus

Files associated with Politiet Norge Virus infection:

jsdhlexdqkllnbcxgai.bfg
gcrwcoak.exe
bf8h8d02hf.exe
wgsdgsdgdsgsd.exe
%AppData%
xaZYOVJW.exe
acuvzomo.exe
install_0_msi.exe
%CommonProgramFiles%
wlsidten.dll
n.
puozlkmyj.dll
obvwo.exe
msavfit.exe
{097444e7-2d87-ba3c-2efe-9f54812d824a}.exe
ifgxpers.exe
rvcbcyks.exe
scvhost.exe
%TEMP%
%WINDIR%\Temp
xlqbteeb.exe
00b5d693.exe
iner.exe
Q3d38543.exe
dtkmujvo.exe
p1.exe
yaiiwockc.dll
wpbt0.dll
videotwisterSA.exe
secproc_isv.exe
administration.exe
DLL321.dll
skype.dat
87b2cb3916261d5c807bf44262755cb0.exe
UpgradeHelper.exe
audipbrd.exe
wlsidten.exe
csrsss.exe
b34btbztdb0vavaw.exe
%LOCALAPPDATA%\lollipop
Firewallservice.exe
UpdatePriv.exe
hwj3ba6j.dss
msnmsgrr.exe
ubvhynpxh.exe
securitywindrv.exe
DA0B.exe
JfCqQ5JC.exe
ACEIEAddOn.dll
m2PythonLoader.exe
msdtmsrd.exe
ssntvs.exe
WinSyncMetastore.exe
%ALLUSERSPROFILE%
3511172082012Build.exe
Task Scheduler.exe
Updating.exe
Other.res
mplayer2.exe
comeo.exe
C87C.exe
ieudator.dll
wjthvwjb.dss
OmaSG21e.exe
ex3b.dll
sqlncli.exe
%ALLUSERSPROFILE%\Application Data
50E1.exe
VaultSysUi.exe
brenasa.exe
%UserProfile%
xctqakcqbeo.dll
systemcpl.exe
rool0_pk.exe
%APPDATA%\system
TimeDateMUICallback.exe
questscan.dll
Nbt.exe
Piranha.exe
bvhylsviw.exe
msshell.exe
crack.exe
pYunY8m4VL3qLc.exe
%APPDATA%\Task Scheduler
dyjdl.exe
魔法桌面第三方主题破解补丁V1.1.exe
WINDED6.exe
xmlfilter.exe
NTServiceManager.exe
dqnbdq7.dss
taskhost.exe.exe
%WINDIR%\system32
SyncHostps.exe
zqmkrehUkpoKfsafsaZg.exe
pmstcdjwz.exe
oygqyunapnp.exe
idiokbbrv.exe
00qbipeq.exe
96dddda4.dll
%LOCALAPPDATA%\Temp
%APPDATA%\updates
bzsbkotiu.exe
ctfmon.exe
uenovfiu.exe
wahneaqa.exe
svchost.exe
%SystemDrive%\????????????
MusicCollector.exe
najeoxtt.exe
msn.exe
2084473.dll
aPr0hY9.exe
cf6640a77ed4926a4c6be661ab93def9d13408753dd07e8d02836996a2f247b6.exe
setex.exe

Politiet Norge Virus DLL's to remove:

96dddda4.dll
DLL321.dll
puozlkmyj.dll
xctqakcqbeo.dll
questscan.dll
wlsidten.dll
ACEIEAddOn.dll
ieudator.dll
ex3b.dll
wpbt0.dll
yaiiwockc.dll
2084473.dll

Politiet Norge Virus processes to kill:

C87C.exe
MusicCollector.exe
UpdatePriv.exe
taskhost.exe.exe
OmaSG21e.exe
comeo.exe
wlsidten.exe
VaultSysUi.exe
DA0B.exe
pmstcdjwz.exe
ubvhynpxh.exe
oygqyunapnp.exe
dyjdl.exe
idiokbbrv.exe
msnmsgrr.exe
administration.exe
gcrwcoak.exe
NTServiceManager.exe
setex.exe
securitywindrv.exe
Updating.exe
najeoxtt.exe
3511172082012Build.exe
iner.exe
systemcpl.exe
pYunY8m4VL3qLc.exe
魔法桌面第三方主题破解补丁V1.1.exe
bzsbkotiu.exe
videotwisterSA.exe
cf6640a77ed4926a4c6be661ab93def9d13408753dd07e8d02836996a2f247b6.exe
Nbt.exe
acuvzomo.exe
crack.exe
sqlncli.exe
Firewallservice.exe
UpgradeHelper.exe
uenovfiu.exe
{097444e7-2d87-ba3c-2efe-9f54812d824a}.exe
00b5d693.exe
msdtmsrd.exe
p1.exe
csrsss.exe
Task Scheduler.exe
msn.exe
scvhost.exe
Piranha.exe
wahneaqa.exe
m2PythonLoader.exe
install_0_msi.exe
ifgxpers.exe
msavfit.exe
msshell.exe
brenasa.exe
xmlfilter.exe
rool0_pk.exe
b34btbztdb0vavaw.exe
dtkmujvo.exe
svchost.exe
rvcbcyks.exe
mplayer2.exe
50E1.exe
zqmkrehUkpoKfsafsaZg.exe
SyncHostps.exe
xlqbteeb.exe
wgsdgsdgdsgsd.exe
aPr0hY9.exe
JfCqQ5JC.exe
87b2cb3916261d5c807bf44262755cb0.exe
00qbipeq.exe
Q3d38543.exe
TimeDateMUICallback.exe
xaZYOVJW.exe
bf8h8d02hf.exe
bvhylsviw.exe
ctfmon.exe
ssntvs.exe
obvwo.exe
WinSyncMetastore.exe
secproc_isv.exe
WINDED6.exe
audipbrd.exe
Disclaimer

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.