Ured Za Posebne Poslove Sigurnosti virus - How to remove

Ured Za Posebne Poslove Sigurnosti virus

Ured Za Posebne Poslove Sigurnosti virus is a ransomware program that blocks computer systems and displays bogus message accusing you for some violations of law and making you pay a fine for that. Actually the program was designed by cyber criminals in order to get money from computer users. The program completely locks the infected system and does not allow to run any programs there. The message of Ured Za Posebne Poslove Sigurnosti virus states that you have been involved into distribution of pornographic content and because of that you must pay a fine.

The program attacks computer systems that are located in Croatia and the message of it is written in Croatian. Basically, you will be asked to pay a fine and it will promise to unlock your system. The funny part is that it asks to pay a fine using Paysafecard or Ukash payment system. You should be aware that police would never collect fine using these payment systems. The truth is that the message of Ured Za Posebne Poslove Sigurnosti virus was created by cyber criminals and it is just one more scam that is used to rip you off. Have a look at this message and never take it for granted:

Ministarstvo unutarnjih poslova Republike Hrvatske
Ured Za Posebne Poslove Sigurnosti
Zapovjedništvo specijalne policije
PAŽNJA! Vaš kompjuter je blokiran zbog barem jednoga od razloga navedenog u nastavku.
Tu su kršenja «autorskom pravu i srodnim pravima u području prava« (video, glazba, softver) i protuzakonito korištenje ili distribuiranje sadržaja zaštićenih autorskim pravima, čime se krši članak 128. Krivičnog Zakona Republike Hrvatske.
Članak 128. Krivičnog Zakona predviđa novčane kazne od 200 do 500 minimalnih mjesečnih plaća ili oduzimanjem slobode od 2 do 8 godina.
Gledanje ili distribuiranje pornografskog sadržaja je zabranjeno (Dječja pornografija/Zoofilija i tako slično). Tako se krši članak 202 Krivičnog Zakona Republike Hrvatske.
Članak 202. Krivičnog Zakona predviđa oduzimanje slobode od 4 do 12 godina.
Ilegalni pristup kompjuterskih podataka je pokrenut sa kompjutera ili ste pokrenul.

If you noticed this notification on your computer, you can be sure that your computer has been infected. Remove Ured Za Posebne Poslove Sigurnosti virus immediately after detecting it on your computer. We highly recommend scanning your computer with a legitimate antispyware program in order to get rid of this nasty program immediately after detecting it. As the program completely blocks your system, the removal is not that simple.

If your PC has more than one user’s account and at least one of them is not blocked, you have to log in to an unaffected account and scan your computer with anti-malware programs, e.g. spyhunter. Another method is using System Restore. You should restore your computer to the date before the infection. Please note that even though the blocking might have been removed, the virus remains inside your computer therefore it is extremely important to perform a full system scan using antimalware tools. It might be that those you have installed are blocked by Ured Za Posebne Poslove Sigurnosti virus therefore it is recommended to either check if your computer protection is functioning properly or use another program, such as spyhunter.

If neither of the methods works for you, restart your computer and press F8 while it is booting. Select Safe Mode. If the virus blocks it, select Save Mode with Networking. If it is also blocked, select Safe Mode with Command Prompt. Follow the steps below:

Removal using Safe mode or Safe mode with networking

  1. When your computer runs in a needed mode, launch MSConfig;
  2. Disable startup items rundll32 turning on any application from Application Data;. Note, that these are typical locations for Ured Za Posebne Poslove Sigurnosti virus but some others might be used;
  3. Restart the system once again;
  4. scan with https://www.2-viruses.com/downloads/spyhunter-i.exe to identify Ured Za Posebne Poslove Sigurnosti virus files and delete it.

Here is a video of a very similar virus that illustrates what to do for it to be removed:

Removal with Safe Mode with Command Prompt

  1. When your computer works in a needed Mode, run Regedit;
  2. Search for WinLogon Entries. Write down all files it references that are not explorer.exe or blank. Replace them with explorer.exe.
  3. Search registry for Ured Za Posebne Poslove Sigurnosti virus files and delete the registry keys referencing the files.
  4. Try to reboot and scan with Spyhunter.
  5. If this fails, try doing system restore from safe mode with command prompt (rstrui.exe)

If Ured Za Posebne Poslove Sigurnosti virus disables all safe modes

  1. Reboot normally.
  2. Start->Run.
  3. enter : http://2-viruses.com/downloads/spyhunter-i.exe . If malware is loaded, just press alt+tab once and keep entering the string blindly. Press Enter.
  4. Press Alt+tab and then R couple times. Ured Za Posebne Poslove Sigurnosti virus process should be killed.

Here a video detailing this approach:

Hitman Pro USB disk

If all of the above failed, you might need to use a bootable USB or DVD disk having antivirus installed on it. The latter method should be able to remove all versions of Ured Za Posebne Poslove Sigurnosti virus, but will not work if your hard drive is encrypted.

For that, we recommend using Hitman Pro Kickstarter USB.

  1. Download Hitman Pro on uninfected PC.
  2. Run Hitman and ask to create Kickstarter USB (option on initial screen)
  3. When USB ready, reboot infected PC with USB attached and press DEL
  4. Choose USB as primary boot device.
  5. Boot normally.
  6. Run Hitman Pro and https://www.2-viruses.com/downloads/spyhunter-i.exe . One of these programs should detect and remove malware from your PC.

Automatic Malware removal tools

Download Spyhunter for Malware detection
(Win)

Note: Spyhunter trial provides detection of parasites and assists in their removal for free. limited trial available, Terms of use, Privacy Policy, Uninstall Instructions,

Download Combo Cleaner for Malware detection
(Mac)

Note: Combo Cleaner trial provides detection of parasites and assists in their removal for free. limited trial available, Terms of use, Privacy Policy, Uninstall Instructions, Refund Policy ,

Manual removal

Leave a Reply

Your email address will not be published. Required fields are marked *