Removal guides
Politiet Norge Virus (Ukash Scam)
Politiet Norge Virus (Ukash Scam)
"Politiet Norge (Avdeling for kampen mot datakriminalitet)" virus - how to unlock your computer?
Politiet Norge message which blocks computer user's screen is a ransomware infection which originates from a family called Urausy. This family of ransomware infections is created by Cyber criminals which a sole purpose of stealing money from unsuspecting PC users. It's infamous for it's capabilities of adapting the deceptive message according to the country in which the infiltrated PC is located. Cyber criminals have developed this security infection in such way that it could detect the IP address of the computer that it's about to infect and then show the graphics, authority names and the text adapted to specific country.
Politiet Norge ransomware is targeted at computer users from Norway, however if PC users from France would get their computers infected with this ransomware they would see a message translated to French language and the graphics of local authority. Such localisation is created to make the deceptive messages asking to pay a fine of 100 euro appear more legitimate. Notice that Politiet Norge doesn't have anything to do with this message, if you decide to pay the fine you will send your money to Cyber criminals and your PC will remain locked. You shouldn't be scared by the statements presented in this message, they are fake. You can ignore them and remove this scam from your computer. First screenshot in this article is Reveton - there are several ransomware families that target PC users from Norway. Notice that this removal guide will help you remove wither of these screen lockers.

Politiet Norge is just another version of Urausy ransomware which is targeted at Norwegian PC users. Computer uses shouldn't trust any information presented in this message. It's a security infection that entered your computer using security vulnerabilities, most commonly using Trojans. Such ransomware infections could have been stopped by legitimate antivirus and antispyware programs. If you PC is already infected with Politiet Norge virus use the provided removal instructions and eliminate it from your computer.
Fake message shown in Politiet Norge virus:
Politiet Norge
OBS! PC-en din er blokkert på grunn av minst én av følgende grunner. Du har brutt «Opphaveretts og Nærstående Rettighets Loven (Åndsverkloven)» (Video, Musikk, Programvare) og ulovlig bruker eller distribuerer opphavsrett beskyttet innhold, dermed bryter du paragraf 128 i straffeloven Kongeriket Norge. Paragraf 128 i straffeloven fastsetter en bøtestraff fra 2 opptil 5 hundre minimale lønninger eller en frihetsberøvelse fra 2 til 8 âr. Du har sett eller distribuert forbudt pornografisk innhold (Barneporno I Zoofili og osv.). Dermed bryter paragraf 202 i straffeloven Kongeriket Norge. Paragraf 202 i straffeloven fastsetter en frihetsberøvelse for 4 til 12 år. Ulovlig tigang til elektroniske data er igangsatt fra PC-en din, eller du har vært Paragraf 208 i straffeloven fastsetter en bøtestraff opptil NOK 1000.000 og/eller en frihetsberøvelse fra 4 til 9 âr. Ulovlig tilgang er igangsatt fra PC-en din uten ditt kjennskap eller samtykke, kan PC-en bli infisert av ondsinnet programvare, og dermed bryter du loven med forsømt bruk av personlig datamaskin. Paragraf 210 i straffeloven fastsetter en bot fra NOK 20000 til NOK 80000.
Spam distribusjon eller annen ulovlig reklame er gjennomført fra PC-en din som en fortjeneste søking aktivitet eller ble brukt uten ditt kjennskap, da kan PC-en bli infisert av ondsinnet programvare. Paragraf 212 i straffeloven fastsetter en bøtestraff opptil NOK 2500.000 og en
frihetsberøvelse opptil 6 âr. I tilfelle aktiviteten er gjennomført uten ditt kjennskap, da gjelder den nevnte paragrafen 210 i straffeloven Kongeriket Norge. Din personlige informasjon og adresse blir identifisert nâ, en straffesak skal rettes mot deg under en eller flere lovparagrafer, som er angitt ovenfor, i løpet av de neste 72 timene. I henhold til endringen i straffeloven Kongeriket Norge den 28. august 2012, overtredelse
av loven (hvis det ikke er gjentatt - første gang) kan betraktes som betinget godkjenning i tilfelle du skal betale boten til staten. Bøter kan betales bare innen første 72 timer etter overtredelsen. Så snart 72 timer utløp, muligheten til â betale boten utgår og en straffesak rettes mot deg automatisk i hpet av de neste 72 timene! Botbelpet er NOK 1000 eller ê100. Boten kan betales via Ukash/PaySafeCard. Når boten er betalt, vil PC-en din låses opp i løpet av 1 opptil 72 timer etter at pengene er satt inn i statens konto.
Politiet Norge scam removal:
Step 1
During your computer starting process press F8 key on your keyboard multiple times until Windows Advanced Options menu shows up, then select Safe mode with networking from the list and press ENTER.

Step 2
Log in to the account that is infected with Politiet Norge scam. Start your Internet browser and download a legitimate anti-spyware program. Update the anti-spyware software and start a full system scan. Remove all the entries that it detects.
remover for Politiet Norge virus
After completing these steps your computer should be clean, reboot your computer in normal mode.
Alternative Politiet Norge virus removal guide:
If this ransomware blocks your screen when you start your computer in safe mode with networking, try starting your PC in safe mode with command prompt.
1. Start your computer in Safe Mode with Command Prompt - During your computer starting process press F8 key on your keyboard multiple times until Windows Advanced Options menu shows up, then select Safe mode with command prompt from the list and press ENTER.

2. When command prompt mode loads enter the following line: cd restore and press ENTER.

3. Next type this line: rstrui.exe and press ENTER.

4. In the opened window click "Next".

5. Select one of the available restore point and click "Next" (this will restore your computer's system to an earlier time and date, before the ransomware infiltrated your PC).

6. In the opened window click "Yes".

7. After restoring your computer to a previous date download and scan your PC with a recommended anti-spyware software to eliminate any left remnants of Politiet Norge virus.
remover forPolitiet Norge scam
If you can't start your computer in safe mode with networking (or with command prompt) you should boot your computer using a rescue disk. Some variants of ransomware disables safe mode making it's removal more complicated. For this step you will need access to another computer. After removing Politiet Norge scam from your PC restart your computer and scan it with a legitimate antispyware software to remove any possibly left remnants of this security infection.
Other tools known to remove Politiet Norge virus:
Other methods which can be used to eliminate Politiet Norge infection from your PC:
Remove Politiet Norge virus using a Rescue Disk.
Some malicious software modifies browser settings and disables downloads of spyware and virus removing software. If you have problems downloading anti-spyware software with Internet Explorer, try downloading with Chrome, FireFox, Opera, etc.
If you can't access Internet:
Load your computer in safe mode. Click Start, click Shut down, click Restart, click OK. During your computer starting process press F8 key on your keyboard multiple times until you see Windows Advanced Option menu, then select Safe mode with networking from the list.
Start Task manager. Press ctrl+alt+del (or ctrl+shift+esc) and end task the processes of rogue program. ( if after this procedure you can't access any programs press ctrl+alt+del, click File, select New Task, and type explorer.exe then press OK.
Open Internet explorer, click Tools and select Internet Options. Select Connections, then click LAN settings, if a Use a proxy server for your LAN is checked, un-check it and press OK.
After this procedure you should be able to access Internet. Now you can download anti-spyware software from our "Top spyware removers" section and run a full scan. Download, install and don't forget to update your selected anti-spyware program.
Manual Politiet Norge scam removal:
If you were unable to remove Politiet Norge virus using the steps above, you can use this manual removal instruction. Use it at your own risk. If you don't have strong computer knowledge you could harm your operating system. Be careful and use it only if you are an experienced computer user. (Instructions on how to end processes, remove registry entries...)
End these Politiet Norge virus processes:
random.exe
Delete these Politiet Norge virus files:
%Temp%\<random>.exe
%StartupFolder%\ctfmon.lnk
- FBI Your Computer Has Been Locked scam
- System Care Antivirus
- Department of Justice MoneyPak Virus
- Win 7 Antivirus 2013
- SweetIM Toolbar (Search.sweetim.com Virus)
- Department of Justice scam
- FBI Cybercrime Division - Your PC is Blocked (MoneyPak Virus)
- Metropolitan Police ransomware (PCeU) virus
- Police Central E-Crime Unit Virus
- Internet Security "designed to protect" Scam - Fake Antivirus Program

