Policía Nacional del Ecuador Virus - How to remove

Policía Nacional del Ecuador Virus

Policía Nacional del Ecuador virus is another ransomware that belongs to a wide Urausy family of Trojans. Just like any other this type of virus, it blocks an infected computer’s screen with a message which is supposed to be from official authorities. The latter warning has a logo of The National Police of Ecuador (Policía Nacional del Ecuador). One can determine that she is facing a virus because Policía Nacional del Ecuador virus matches all of the ransomware features:

  • It acts in the name of local police authorities but if one checks it out, the warning has nothing to do with them;
  • It accuses with various crimes related to computer using, such as illegal downloading and distributing of copyrighted content (music, movies, software, etc.), employing PC for sending Spam e-mails and similar crimes;
  • For the supposed charges to be removed and a computer unlocked one is asked for a ransom to be paid as soon as possible. Policía Nacional del Ecuador virus asks for 100 USD;
  • The method of payment is always using prepaid PINs, such as Ukash or Paysafecard.

Here is an extract from the warning text:

Policía Nacional del Ecuador
¡ATENCIÓN! Su OP (ordeandor) está bloqueado debido a al menos una de las razones especificadas siguientes.
Usted ha estado violando “Derecho de Autor y Derechos Conexos Ley o (vídeo, música, software) y utilización ilegal o distribución de contenido con derechos de autor, infringiendo así el artículo 128 del Criminal Code de la Republica de Ecuador.
……..
El importe de la multa es de USD $100 (US Dólar). Usted puede pagar una multa Ukash o Paysafecard.

Once you are convinced your computer is blocked by a virus and not by a police, you should remove it immediately. Do not pay the fine under no circumstances! You will not only get ripped off but also finance future attacks like this one. The only right way to unlock your computer is by using antimalware tools and following the instructions below. If your computer has more than one user’s account and at least one of them is not infected, login to it and scan your system using, for example Spyhunter. If you cannot login to your computer, try the following:

  1. Restart your computer; press F8 while it is restarting;
  2. Choose safe mode or safe mode with networking (it might be that Policía Nacional del Ecuador virus will not let you select safe mode or safe mode with networking, in such a case try the other method) ;
  3. Launch MSConfig;
  4. Disable startup items rundll32 turning on any application from Application Data;.
  5. Restart the system once again.
  6. scan with https://www.2-viruses.com/downloads/spyhunter-i.exe.

Here is a video of another ransomware but the removal steps are the same therefore it will help you to better understand what to do:

  1. Restart your computer; press F8 while it is restarting;
  2. Choose Safe mode with command prompt (if Policía Nacional del Ecuador virus does not let you choose this mode, visit this webpage for more removal tips) .
  3. Run Regedit
  4. Search for WinLogon Entries, write down all files it references that are not explorer.exe or blank. Replace them with explorer.exe
  5. Search registry for Policía Nacional del Ecuador virus files and delete the registry keys referencing the files
  6. Try to reboot and scan with Spyhunter.
  7. If this fails, try doing system restore from safe mode with command prompt (rstrui.exe)

To avoid being tricked by ransomware in the future please note that none of official authorities collect fines using prepaid payment system. If you are asked for money to be paid using it, call the authorities to check before spending the money if this is not a scam. Viruses employ many psychological tricks, such as turning on a webcam and filming you with the aim to scare that your identity will be disclosed, accessing your Internet browser history and displaying the addresses of websites that were actually visited and many others. Do not get tricked by those as none of the threats are real.

You should also be aware of the means used for Policía Nacional del Ecuador virus and other ransomware distribution as this might help to avoid similar infections. One of the most popular ones is using malicious websites or compromising legitimate ones. It means that you might get infected from a site that was always a trustworthy but got corrupted one day. Usually the virus does not start to work straight away in order to hide its traces of where it came from. If the site administrator hasn’t removed the threat you might get attacked again after visiting this webpage. Another method is spam e-mails with attachments. There is no need to tell you should not open these. Social engineering is also a way of injecting viruses. A victim gets convinced to install infection manually thinking it is some useful update or important program. Peer to peer file sharing websites having pirated or illegally acquired software is another possible source of attacks.

Automatic Malware removal tools

Download Spyhunter for Malware detection
(Win)

Note: Spyhunter trial provides detection of parasites and assists in their removal for free. limited trial available, Terms of use, Privacy Policy, Uninstall Instructions,

Download Combo Cleaner for Malware detection
(Mac)

Note: Combo Cleaner trial provides detection of parasites and assists in their removal for free. limited trial available, Terms of use, Privacy Policy, Uninstall Instructions, Refund Policy ,

Manual removal

Removal guides in other languages

Leave a Reply

Your email address will not be published. Required fields are marked *