Politiets Sikkerhetstjeneste virus - How to remove

Politiets Sikkerhetstjeneste virus is a ransomware program that pretends to be a notifications from police accusing you of violating the law. The program attacks computers located in Norway so the message comes in Norwegian. Basically it state, that you have been involved into distribution of pornographic content or copyrighted material and for this reason you have to pay the fine.

Politiets Sikkerhetstjeneste virus blocks your entire computer so you could not use any of your programs, not even your security tools. It seems that paying the fine is the only solution that will allow you to use your system normally. Besides, nobody wants to deal with police and Politiets Sikkerhetstjeneste virus message contains all police logos and other things that makes you believe it is somehow related to it:

Politiets Sikkerhetstjeneste
Det kongelige Justis- og Beredskapsdepartementet
KRIMINALPOLITISENTRALEN
OBS! Datamaskinen din har blitt blokkert av sikkerhetsmessige grunner nevnt nedenfor.
Du er anklaget for visning/ lagring ogleller spredning av ulovlig pornografi (barnepornografilzoofililvoldtekt o.s.v.). Du har brutt Verdenserklæringen om ikke-spredning av barnepornografi. Du er anklaget for å begå kriminalitet ifølge paragraf 161 av Kongeriket Norge strafferett Paragraf 161 av Kongeriket Norge strafferett fastsetter straff for frihetsberøvelse etter termer 5-11 år. Også er du mistenkt for brudd på ‘Opphavsrett og beslektede rettigheter’ (nedlasting av piratkopiert musikk, video, warez) og av bruk og/ eller spredning av opphavsrettsbeskyttet innhold. Dermed er du mistenkt for brudd på paragraf 148 av Kongeriket Norge strafferetten. Paragraf 148 av Kongeriket Norge strafferett fastsetter straff for frihetsberøvelse etter 3-7 år eller bot som tilsvarer 150-550 grunnlønner. Det var fra din datamaskin at uautorisert tilgang hadde blitt stjålet til informasjon av statens betydning og til data stengt for offentlig Internett-tilgang. Uautorisert tilgang kunne ha blitt arrangert av deg selv med vilje, av personlige motiver, eller uten din viten og samtykke, forutsatt at datamaskinen kan ha blitt påvirket av skadelig programmvare. Derfor blir du mistenkt – inntil etterforskningen er holdt – av overtredelse av artikkel 215 av Kongeriket Norge strafferett (“Lov om uaktsom og uvøren ignorering av datamaskiner og hjelpemidler”). Artikkel 21 5 av Kongeriket Norge strafferett fastsetter straff for frihetsberøvelse etter termer 5-8 år og/ eller opp til NOK 1.500.000 kroner stykket fint.

Politiets Sikkerhetstjeneste virus infiltrates into computers with the help of Trojan viruses. It can also be installed to your computer if you open some attachment or link in spam email. Despite how it infiltrates to the system, the users have to deal with the same consequences.

Never pay any fine Politiets Sikkerhetstjeneste virus tells you to pay. You will only lose your money. The program ask you to use Paysafecard or Ukash payment systems to do that, but you should know that it’s completely impossible that police would use prepaid card payment systems to collect the fines. It’s a clear scam that you shouldn’t fall for.

If your computer has more than one user account and not all of them are locked, scan whole PC with anti-malware programs, e.g. spyhunter, by logging to the account that is not blocked. Another option is to use system restore. If none of these methods worked for you, do the following:

• Restart your computer;
• Press F8 while it is still restarting;
• Choose between safe modes in following order: Safe mode, Safe mode with command prompt

Then follow the guides below:

If your computer runs in Safe mode or Safe mode with networking

1. Launch MSConfig.
2. Disable startup items rundll32 turning on any application from Application Data;. Note, that these are typical locations for Politiets Sikkerhetstjeneste virus but some others might be used.
3. Restart the system once again.
4. Scan with https://www.2-viruses.com/downloads/spyhunter-i.exe to identify Politiets Sikkerhetstjeneste virus files and delete it.

Here is a video showing how to complete the steps:

If your computer runs in Safe mode with command prompt

1. Run Regedit.
2. Search for WinLogon Entries. Write down all files it references that are not explorer.exe or blank. Replace them with explorer.exe
3. Search registry for Politiets Sikkerhetstjeneste virus files and delete the registry keys referencing the files
4. Try to reboot and scan with Spyhunter.
5. If this fails, try doing system restore from safe mode with command prompt (rstrui.exe)

If none of safe modes could be launched

Some versions of Politiets Sikkerhetstjeneste virus disable all safe modes, but give a short gap that you can use to run anti-malware programs:

1. Reboot normally.
2. Start->Run.
3. Enter: http://2-viruses.com/downloads/spyhunter-i.exe . If malware is loaded, just press alt+tab once and keep entering the string blindly. Press Enter.
4. Press Alt+tab and then R couple times. Politiets Sikkerhetstjeneste virus process should be killed.

Here is a video detailing this approach:

Hitman Pro USB disk

If you did not succeed using any of the methods above, try scanning PC with a bootable USB or DVD disk. These should be able to remove all versions of Politiets Sikkerhetstjeneste virus, but will not work if your hard drive is encrypted.

For that, we recommend using Hitman Pro Kickstarter USB.

1. Download Hitman Pro on uninfected PC.
2. Run Hitman and ask to create Kickstarter USB (option on initial screen)
3. When USB ready, reboot infected PC with USB attached and press DEL
4. Choose USB as primary boot device.
5. Boot normally.
6. Run Hitman Pro and https://www.2-viruses.com/downloads/spyhunter-i.exe . One of these programs should detect and remove malware from your PC.

Automatic Malware removal tools

Manual removal