Politiet Norge Virus - How to remove

Politiet Norge virus is yet another scam that is programmed to swindle your money away. If you see the warning you can be sure it has nothing to do with local police authorities. Politiet Norge name and emblem has been used illegally. The ransomware hijacks your desktop completely therefore your computer does not react to almost any commands. The message charges you with various crimes committed online, such as viewing and distributing illegal music, films, software, using your computer for spam and similar.

OBS! PC-en din er blocker på grunn av minst én av folgende grunner.
Du har brutt Opphaveretts og Nærstáende Rettighets Loven (Ăndsverkloven) (Video, Musikk, Programvare) og ulovlig bruker elier distribuerer opphavsrett beskyttet innhold, dermed bryter du paragraf 128 i straffeloven Kongeriket Norge.

According to the message displayed by Politiet Norge virus, you must pay a fine as soon as possible. This is supposed to be the only way to unlock your computer and remove the charges. If you do not make a payment, you will be taken to the court. Two payment methods: Ukash voucher (coupon) or the Paysafecard PIN-code are offered. Do not make any payment as it will not remove the virus from your computer. The only way to eliminate the blocking is by following removal steps given below. If you have any questions or face any difficulties when following the steps, post it in comments.

Special Removal Instructions for Politiet Norge virus

 

If your computer has more than one user account and not all of them are locked, scan whole PC with anti-malware programs, e.g. spyhunter, by logging to the account that is not blocked. Another option is to use system restore. If none of these methods worked for you, do the following:

• Restart your computer;
• Press F8 while it is still restarting;
• Choose between safe modes in following order: Safe mode, Safe mode with command prompt.

Depending on outcome, use following guides:

If your computer runs in Safe mode or Safe mode with networking

1. Launch MSConfig.
2. Disable startup items rundll32 turning on any application from Application Data;. Note, that these are typical locations for Politiet Norge virus but some others might be used.
3. Restart the system once again.
4. Scan with https://www.2-viruses.com/downloads/spyhunter-i.exe to identify Politiet Norge virus files and delete it.

Here is a video showing how to complete the steps:

If your computer runs in Safe mode with command prompt

1. Run Regedit.
2. Search for WinLogon Entries. Write down all files it references that are not explorer.exe or blank. Replace them with explorer.exe.
3. Search registry for Politiet Norge virus files and delete the registry keys referencing the files.
4. Try to reboot and scan with Spyhunter.
5. If this fails, try doing system restore from safe mode with command prompt (rstrui.exe).

If none of safe modes could be launched

Some versions of Politiet Norge virus disable all safe modes, but give a short gap that you can use to run anti-malware programs:

1. Reboot normally.
2. Start->Run.
3. Enter: http://2-viruses.com/downloads/spyhunter-i.exe . If malware is loaded, just press alt+tab once and keep entering the string blindly. Press Enter.
4. Press Alt+tab and then R couple times. The Politiet Norge virus process should be killed.

Here is a video detailing this approach:

Hitman Pro USB disk

If you did not succeed using any of the methods above, try scanning PC with a bootable USB or DVD disk. These should be able to remove all versions of Politiet Norge virus, but will not work if your hard drive is encrypted.

For that, we recommend using Hitman Pro Kickstarter USB.

1. Download Hitman Pro on uninfected PC. 
2. Run Hitman and ask to create Kickstarter USB (option on initial screen).
3. When USB ready, reboot infected PC with USB attached and press DEL.
4. Choose USB as primary boot device.
5. Boot normally.
6. Run Hitman Pro and https://www.2-viruses.com/downloads/spyhunter-i.exe . One of these programs should detect and remove malware from your PC.

Automatic Malware removal tools