Removal guides
Suomen Poliisi Virus (Ukash or PaySafeCard Scam)
Suomen Poliisi Virus (Ukash or PaySafeCard Scam)
Suomen Poliisi virus - how to unlock your computer?
Suomen Poliisi screen lock is a ransomware infection which is targeted at PC users from Finland. Cyber criminals who are responsible for creating this scam are hoping that computer users will fall for the trickery displayed in this deceptive message and will pay a fine of 100 euro. This message is designed to look like it came from Finland's police, while in reality it was created by Cyber criminals who are making money from unsuspecting PC users who pays this non existent fine for law infringements that they haven't done. The fake message states that PC users from Finland have to pay the fine of 100 euro for watching pornography and for downloading videos and audio files from the Internet.
Suomen Poliisi ransomware infection originates from a family called Urausy and it uses security vulnerabilities found in users computer to infiltrate it. When this scam enters users PC it will completely block computer's screen and will ask to pay a fine of 100 euro to unblock the computer. Notice that Cyber criminals are using Ukash and paysafecard prepaid cards to collect the fake fines, such money transactions are very complicated to track by real authorities. You shouldn't pay this fine - you will loose your money and your PC will remain locked. If you see such message blocking your computer's screen you can be sure that your PC is infected with a ransowmare infection.

Suomen Poliisi ransomware virus is targeted at PC users from Finland, notice that the same infection on computer located in USA would look like it came from Interpol and the fake message would be translated to English language. Such localisation is designed to further trick PC users into thinking that they have made some law violations and they have to pay a fine. In reality none of the authorities including POLIISI Tietoverkkorikos Tutkinnan Yksikko are using screen lockers to collect fines from law infringements. Don't even consider paying this fake fine and use this removal guide to help you unlock your computer. To prevent such ransomware and other malware infections from entering your PC in the future, use legitimate antivirus and antispyware programs.
Fake message shown in Suomen Poliisi virus:
POLIISI Tietoverkkorikos Tutkinnan Yksikko
Huomio! Tietokoneenne lukkiutui. Huomio! Tietokoneen lukitus automaattinen tieto valvontajärjestelmä. Miksi? Tämä voi olla jokin seuraavista syistä: 1. Tietokonettanne oli käytetty kiellettyjen sivujen katsomiseksi. 2. Tietokonettanne oli käytetty sellaisten lapsipornografian elementtejä sisältävien sivujen katsomiseksi. 3. Tietokonettanne oli käytetty kielteisen tiedon lähettämiseksi. 4. Tietokonettanne oli käytetty lisensoimattoman sisällön tallentamiseksi/katsomiseksi. Miten ongelma voidaan ratkaista? "Tiedon Valvonta -ja tietosuojalain" (28.08.2012) mukaan Teidät velvoitetaan maksamaaan €100 sakko. Sakon voi kätevästi maksaa turvallisen maksutavan - Ukash/PaySafeCard maksutositteiden avulla, Teidän pitää hankkia maksutositteita yhteissummaan €100 ja kirjaamalla ne maksulomakkeeseen, klikkaamalla "Pay Ukash" tai "Pay PaySafeCard". Mitä tapahtuu kun kirjaan tunnuksen? Sen jälkeen kun tunnus järjestelmämme tarkastaa tunnukset, lukitus Teidän tietokoneeltanne heti poistetaan. Mitä jos sinulla ongelmia? Jos jostakin syystä Te ette pystyneet maksamaan sakkoa turvallisen maksutavan kautta, Lähettäkää viesti sähköpostiosoitteeseen: tietoverkkorikospoliisi.fi , viestissä mainitkaa iP sekä Ukash/PaySafeCard maksutositteiden tunnukset summaan €100. Sen jälkeen kun järjestelmämme tarkistaa tunnuksen, lukitus Teidän tietokoneeltanne heti poistetaan.
Suomen Poliisi virus removal:
Step 1
During your computer starting process press F8 key on your keyboard multiple times until Windows Advanced Options menu shows up, then select Safe mode with networking from the list and press ENTER.

Step 2
Log in to the account that is infected with Suomen Poliisi virus. Start your Internet browser and download a legitimate anti-spyware program. Update the anti-spyware software and start a full system scan. Remove all the entries that it detects.
remover for Suomen Poliisi virus
If you can't start your computer in safe mode with networking, try doing a system restore.
1. Start your computer in Safe Mode with Command Prompt - During your computer starting process press F8 key on your keyboard multiple times until Windows Advanced Options menu shows up, then select Safe mode with command prompt from the list and press ENTER.

2. When command prompt mode loads enter the following line: cd restore and press ENTER.

3. Next type this line: rstrui.exe and press ENTER.

4. In the opened window click "Next".

5. Select one of the available restore point and click "Next" (this will restore your computer's system to an earlier time and date, before the ransomware infiltrated your PC).

6. In the opened window click "Yes".

7. After restoring your computer to a previous date download and scan your PC with a recommended anti-spyware software to eliminate any left remnants of Suomen Poliisi virus.
remover for Suomen Poliisi virus
If you can't start your computer in safe mode with networking (or with command prompt) you should boot your computer using a rescue disk. Some variants of ransomware disables safe mode making it's removal more complicated. For this step you will need access to another computer. After removing Suomen Poliisi virus from your PC restart your computer and scan it with a legitimate antispyware software to remove any possibly left remnants of this security infection.
Other tools known to remove Suomen Poliisi scam:
Some malicious software modifies browser settings and disables downloads of spyware and virus removing software. If you have problems downloading anti-spyware software with Internet Explorer, try downloading with Chrome, FireFox, Opera, etc.
If you can't access Internet:
Load your computer in safe mode. Click Start, click Shut down, click Restart, click OK. During your computer starting process press F8 key on your keyboard multiple times until you see Windows Advanced Option menu, then select Safe mode with networking from the list.
Start Task manager. Press ctrl+alt+del (or ctrl+shift+esc) and end task the processes of rogue program. ( if after this procedure you can't access any programs press ctrl+alt+del, click File, select New Task, and type explorer.exe then press OK.
Open Internet explorer, click Tools and select Internet Options. Select Connections, then click LAN settings, if a Use a proxy server for your LAN is checked, un-check it and press OK.
After this procedure you should be able to access Internet. Now you can download anti-spyware software from our "Top spyware removers" section and run a full scan. Download, install and don't forget to update your selected anti-spyware program.
Manual Suomen Poliisi ransomware removal:
If you were unable to remove Suomen Poliisi scam using the steps above, you can use this manual removal instruction. Use it at your own risk. If you don't have strong computer knowledge you could harm your operating system. Be careful and use it only if you are an experienced computer user. (Instructions on how to end processes, remove registry entries...)
End these Suomen Poliisi virus processes:
random.exe
Delete these Suomen Poliisi virus files:
%Temp%\<random>.exe
%StartupFolder%\ctfmon.lnk
Was this helpful to you?
Recommend it!
- FBI Your Computer Has Been Locked scam
- System Care Antivirus
- Department of Justice MoneyPak Virus
- Win 7 Antivirus 2013
- SweetIM Toolbar (Search.sweetim.com Virus)
- Department of Justice scam
- FBI Cybercrime Division - Your PC is Blocked (MoneyPak Virus)
- Metropolitan Police ransomware (PCeU) virus
- Police Central E-Crime Unit Virus
- Internet Security "designed to protect" Scam - Fake Antivirus Program

