Poliisihallituksen virus - How to remove?

 

What is Poliisihallituksen virus?

Poliisihallituksen virus is a ransomware program that is infiltrated to random computer systems with the help of Trojan viruses. The program specifically attacks computer located in Finland. It even uses the name of Finish police to look more trustful. Basically, the program seeks to gets money from random computer users by accusing them on violating the law and making them pay a fine for that.

Poliisihallituksen virus completely blocks targeted system and does not allow running any of your programs. It completely locks the screen displaying one message that comes in Finnish language and tells you to pay 100 euros fine for using copyrighted of pornographic content and distributing it to other users. Here’s is how the message of Poliisihallituksen virus looks like:

Poliisihallituksen
Keskusrikospoliisi
Poliisin Tekniikkakeskus
HUOMIO! Titokonesi on lukittu turvallisuuden vuoksi allamainittujen syiden takia
Sinut syytetään kielletyn pornograafisen aineiston (Lapsiporno/Zoofilia/Raiskaus jne.)
katselusta/säilytyksestä ja/tai levityksestä. Sinä olet rikkoneet lapsipornografian levitystä
vastaisen yleismaailmallisen julistuksen ja sinut syytetään Suomen tasavallan rikoslain lakipykälän
161 edellyttämään rikokseen.
Suomen tasavallan rikoslain 161 edellyttää rangaistuksena vapausrangaismsta 2-8
vuotta.
Sen lisäksi sinua Tekijänoikeuslakia rikoksesta (piraattimusiikin, -videon, luvattoman
ohjelmiston tallentaminen) ja tekijänoikeuden suojassa olevan kontentin käytöstä ja/ tai
levityltsestä. Sillä lailla sinua epäillään Suomen tasavallan lakipykälän 148 rikoksesta.
Suomen tasavallan lakipykälä 148 edellyttää 150-550 perusarvoa suuruista sakkoa tai
vapausrangaistusta 3-7 vuotta.

The program tells you to make a payment using PaySafeCard payment system which is an easy and quick way to make a transfer. However, no legal institutions use such methods to receive any payments. If local police actually wants to fine you for something, you would get an official letter, but nobody would ever block your computer for such reason.

If you have received a message by Poliisihallituksen virus and your computer has been blocked, you definitely became a victim of cyber criminals. Do not fall for this scam and do not pay anything. Remove Poliisihallituksen virus from your computer immediately after its detection. If your computer has more than one user account and not all of them are locked, scan whole PC with anti-malware programs, e.g. spyhunter, by logging to the account that is not blocked. Another option is to use system restore. If none of these methods worked for you, do the following:

  • Restart your computer;
  • Press F8 while it is still restarting;
  • Choose between safe modes in following order: Safe mode, Safe mode with command prompt

Then follow the guides below:

If your computer runs in Safe mode or Safe mode with networking

  1. Launch MSConfig.
  2. Disable startup items rundll32 turning on any application from Application Data;. Note, that these are typical locations for Poliisihallituksen virus but some others might be used.
  3. Restart the system once again.
  4. Scan with http://www.2-viruses.com/downloads/spyhunter-i.exe to identify Poliisihallituksen virus files and delete it.

Here is a video showing how to complete the steps:

If your computer runs in Safe mode with command prompt

  1. Run Regedit.
  2. Search for WinLogon Entries. Write down all files it references that are not explorer.exe or blank. Replace them with explorer.exe
  3. Search registry for Poliisihallituksen virus files and delete the registry keys referencing the files
  4. Try to reboot and scan with Spyhunter.
  5. If this fails, try doing system restore from safe mode with command prompt (rstrui.exe)

If none of safe modes could be launched

Some versions of Poliisihallituksen virus disable all safe modes, but give a short gap that you can use to run anti-malware programs:

  1. Reboot normally.
  2. Start->Run.
  3. Enter: http://2-viruses.com/downloads/spyhunter-i.exe . If malware is loaded, just press alt+tab once and keep entering the string blindly. Press Enter.
  4. Press Alt+tab and then R couple times. Poliisihallituksen virus process should be killed.

Here is a video detailing this approach:

Hitman Pro USB disk

If you did not succeed using any of the methods above, try scanning PC with a bootable USB or DVD disk. These should be able to remove all versions of Poliisihallituksen virus, but will not work if your hard drive is encrypted.

For that, we recommend using Hitman Pro Kickstarter USB.

  1. Download Hitman Pro on uninfected PC. 
  2. Run Hitman and ask to create Kickstarter USB (option on initial screen)
  3. When USB ready, reboot infected PC with USB attached and press DEL
  4. Choose USB as primary boot device.
  5. Boot normally.
  6. Run Hitman Pro and http://www.2-viruses.com/downloads/spyhunter-i.exe . One of these programs should detect and remove malware from your PC.

 

Automatic Poliisihallituksen virus removal tools

 
  Download Spyhunter for Poliisihallituksen virus detectionNote: Spyhunter trial provides detection of parasite like Poliisihallituksen virus and assists in its removal for free. You can remove detected files, processes and registry entries yourself or purchase a full version.
 
 
 
* Support is performed by Callstream.
 
 

Manual Poliisihallituksen virus removal

 

Important Note: Although it is possible to manually remove Poliisihallituksen virus, such activity can permanently damage your system if any mistakes are made in the process, as advanced spyware parasites are able to automatically repair themselves if not completely removed. Thus, manual spyware removal is recommended for experienced users only, such as IT specialists or highly qualified system administrators. For other users, we recommend using Spyhunter or other tools found on 2-viruses.com.

Processes:
Files:

It is impossible to list all file names and locations of modern parasites. You can identify remaining parasites, other Poliisihallituksen virus infected files and get help in Poliisihallituksen virus removal by using Spyhunter scanner. 

 

Poliisihallituksen virus screenshots

 
Poliisihallituksen-Virus
           
     

Leave a Reply

Your email address will not be published. Required fields are marked *

You may use these HTML tags and attributes: <a href="" title="" rel=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>