Polska Policja Virus
Written by Tomas Meskauskas
Damage level: Severe
Polska Policja virus removal guide
What is Polska Policja?
The Polska Policja "Komputer Zostal Zablokowany" message is a scam proliferated by cyber criminals, and never sent to computer users by the Polish Police. This is a ransomware infection, which blocks computer users' screens and demands payment of a bogus fine, supposedly to unlock their PCs. This scam originates from a family of screen lockers called Reveton and predominantly targets PC users from Poland. When this ransomware infects a computer, it blocks the desktop and displays a deceptive message in the Polish language, accompanied by Polish police graphics. Note that Poland's police cybercrime department has no connection with this message - it is a scam created by Cyber criminals who extort money from unsuspecting PC users who fall for their trickery and pay the bogus fine.
To make their fake messages appear authentic, cyber criminals localize them - a ransomware infection on a computer located in Romania is displayed in the Romanian language and enhanced with graphics pertaining to local authorities. Such localization is possible, since ransomware infections are capable of detecting the IP addresses of computers. The screen capture window and text claiming that the computer was blocked due to law violations, were developed with the sole purpose of intimidating PC users. If you observe such a message blocking your computer screen, you have been targeted by cyber criminals. Do not pay the bogus 200zl. fine - you will lose your money and your computer will remain infected.
A variant of this ransomware virus:
Another variant of this ransomware virus - Polska Policja "Komputer jest zablokowany przez policję", originates from a family called Revoyem (DirtyDecrypt). At the time of writing, no known tools are available to decrypt files encrypted by this ransomware virus.
There are several variants of the Polska Policja virus, and you should not trust any of the messages. In fact, no authorities, including Poland's police, send such messages to computer users in order to collect fines for holding copyrighted content or watching pornography. Your computer may be infected with this scam if you visit malicious websites or download video codecs from dubious sources. The best practice to avoid this type of ransomware and other computer infections, is to use legitimate antivirus and anti-spyware programs, and to keep your operating system and installed software up-to-date. If your computer is already infected with the Polska Policja virus, use the removal information provided to eliminate this scam from your PC.
Ukash (Smart Voucher Limited) is a legitimate company and not associated with ransomware viruses - cyber criminals use this service to extort money from unsuspecting PC users.
A deceptive message displayed by the Polska Policja virus:
Wszystkie operacje wykonywane na tym komputerze, są rejestrowane. Jeżeli używasz kamerę internetową , wideo i zdjęcia zachowywają się w celu identyfikacji. Można Cię fatwo utożsamić przez Twój adres IP i związaną z nim nazwą domeny. Komputer został zablokowany!
- What is Polska Policja?
- STEP 1. "Polska Policja" virus removal using safe mode with networking.
- STEP 2. "Polska Policja" ransomware removal using System Restore.
Polska Policja virus removal:
Start your computer in Safe Mode. Click Start, click Shut Down, click Restart, click OK. During your computer starting process press the F8 key on your keyboard multiple times until you see the Windows Advanced Option menu, then select Safe Mode with Networking from the list.
Video showing how to start Windows 7 in "Safe Mode with Networking":
Log in to the account infected with Polska Policja virus. Start your Internet browser and download a legitimate anti-spyware program. Update the anti-spyware software and start a full system scan. Remove all entries detected.
After completing these steps, your computer should be clean. Reboot your computer in Normal Mode.
Alternative Polska Policja virus removal guide:
Video showing how to remove ransomware virus using "Safe Mode with Command Prompt" and "System Restore":
If this ransomware blocks your screen when you start your computer in Safe Mode with Networking, try starting your PC in Safe Mode with Command Prompt.
1. During your computer starting process, press the F8 key on your keyboard multiple times until the Windows Advanced Options menu appears, and then select Safe Mode with Command Prompt from the list and press ENTER.
2. When Command Prompt Mode loads, enter the following line: cd restore and press ENTER.
3. Next type this line: rstrui.exe and press ENTER.
4. In the opened window, click 'Next'.
5. Select one of the available restore points and click 'Next' (this will restore your computer system to an earlier time and date, prior to the ransomware infiltrating your PC).
6. In the opened window, click 'Yes'.
7. After restoring your computer to a previous date, download and scan your PC with recommended malware removal software to eliminate any remnants of the Polska Policja virus.
Other methods used to eliminate this ransomware infection from your PC:
Remove Polska Policja virus virus using a Rescue Disk.
Other tools known to remove Polska Policja virus: