FacebookTwitterLinkedIn

Ravnateljstvo Policije Virus

Also Known As: Ravnateljstvo Policije Ransomware
Damage level: Severe

What is Ravnateljstvo Policije?

The Ravnateljstvo Policije, Sindikat Policije Hrvatske message, "UPOZORENJE! Vaš osoban kompjuter je blokiran zbos sisurnosnih mjera iz sljedečih raziosa", blocks computer screens demanding payment of a 500 HRK fine using paysafecard in order to unblock the PC. This is a scam.

The message should not be trusted - it is a ransomware virus created by cyber criminals and in no way related to any legitimate authorities from Croatia.

This deceptive message makes false accusations of law infringements (watching pornography involving minors, distributing copyrighted content, etc.) to scare unsuspecting PC users from Croatia into paying the bogus fine. Note that paying the 500 HRK fine is equivalent to sending your money to cyber criminals.

Ravnateljstvo Policije

The Ravnateljstvo Policije ransomware virus originates from a family called Urausy. After successful infiltration, this security threat blocks the desktop of the infected PC and displays a fake message accusing the victim of alleged law violations. This security infection disables all Windows features that would otherwise allow termination of the fake message.

Computer users should be aware that neither Ravnateljstvo Policije, nor any other authority, internationally, use screen-blocking messages to collect fines for any law violations. If you observe this message (screenshot below) on your computer screen, your PC is infected with a ransomware virus - do not trust it or pay the fine, it is a scam.

Like other variants, Ravnateljstvo Policije ransomware uses a fake 48-hours countdown timer to create a false sense of urgency. Moreover, this scam is capable of detecting any existing antivirus program used by the victim in order to make the statement, "Under support and Protection of [existing antivirus program name]", at the top of the fake message.

These deceptive tactics are employed to extort money from unsuspecting PC users who fall for such trickery. Common sources of ransomware viruses from the Urausy family are infected email messages, malicious websites, and drive-by downloads. These infections are often proliferated using 'exploit kits', which rely on outdated software in order to infiltrate users' operating systems.

Whilst there are no guaranteed solutions to prevent ransomware from infecting your computer, keeping your installed software up-to-date and using legitimate antivirus and anti-spyware programs drastically reduces the risk of infiltration.

If your computer is already infected with the Ravnateljstvo Policije ransomware virus, use the removal guide provided to eliminate this scam from your PC. 

A fake message displayed by the Ravnateljstvo Policije ransomware virus:

Ravnateljstvo Policije.
Sindikat Policije Hrvatske.

UPOZORENJE! Vaš osoban kompjuter je blokiran zbos sisurnosnih mjera iz sljedečih raziosa.

Vi ste optuženi za gledanjeiskladištenje distribuciju pornografskog materijala zabranjenog sadržajem (pornografijaisodomijaisilovanje, itd.). Vi ste prekršili Svjetsku Deklaraciju o borbi protiv širenja dječje pornografije i optuženi za kažnjeno djelo iz članka 161. Kažnjenog zakona Republike Hrvatske.
Članak 161. Kažnjenog zakona Republike Hrvatske predvida svrhu kažnjavaja zatvorsku kaznu u trajanju od 5 do 11 godina.
Takoder vi ste osumnjičeni za kršenje "Zakona o autorskom pravu i srodnim pravima" (skidanje piratske glazbe, video, softvera koji nije imao licence) uporabi distribucije sadržaja zaštiCenog autorskim pravima. Time vi ste osumnjičeni za kršenje članka 148. Kažnjenog zakona Republike Hrvatske.
Članak148. Kažnjenog zakona Republike Hrvatske, kao svrhu kažnjavanja predvida novčane kazne od 150 do 550 osnovnih jedinica ili kazna zatvora u trajanju od 3 do 7 godina.
Sa vašeg kompjutera je napravljen neovlašteni pristup ograničenim za javnost podacima informacijama od nacionalnog značaja na Internetu.
Neovlašteni pristup mogli ste organizirati svjesno iz sebičnih motiva ili neovlaštenog pristupa ili to se moglo dogoditi bez vašeg znanja ili pristanka kao što je vaš osoban kompjuter mogao biti zaražen vanskim virusima. Dakle, vi ste osumnjičeni do istraživanja nenamjerne povrede Članka 215. Kažnjenog zakona Republike Hrvatske ("Zakon o nesavjesnim i nemarnom koristenju kompjutera /PC").
Članak 215. Kažnjenog zakona Republike Hrvatske propisuje kao svrhu kažnjavanja novčanu kazna do HRK 500.000 Kuna zatvorsku kaznu u trajanju od 5 do 8 godina.
Takoder, u analizi podataka sačuvanih na vašem osobnom kompjuteru, utvrdeno je da je sa kompjutera na redovnoj osnovi dolaze masovni spam-poruke, koji ste svjesno uredili iz sebičnih motiva ili one dolaze bez vašeg znanja ili pristanka, kao što je vaš osoban kompjuter mogao biti zaražen virusima. Podatke distribuira zionamjerni softver ili zabranjeni pornografski materijal. Dakle, vi ste optuženi u istrazi nenamjerne povrede Članak 301. Kažnjenog zakona Republike Hrvatske ("Zakon o suzbijanju širenja spama i softvera (virusa)").
Članak 301. Kažnjenog zakona Republike Hrvatske propisuje kao svrhu kažnjavanja novčana kazna do HRK 1.250.000 Kuna i zatvorsku kaznu do 5 godina.
Napominjemo da se vaši osobni podaci i vaše mjesto je identificirano i protiv vas može biti procesuiran krivični postupak u roku od 96 sata od momenta prekršaja u saglasnosti Članaka Kažnjenog Zakona kako je gore opisano. Materijali de biti prebačeni do suda.
Medutim, u skladu sa izmjenama i dopunama Kažnjenog zakona Republike Hrvatske, 10. srpnja 2013 i Deklaracije o kršenjima ljudskih prava Vaši prekršaji se mogu smatrati nenamjernima (ako ste takve napravili po prvi put) i Vi nećete snositi krivičnu odgovornost. Ovaj uslov može biti zadovoljan plaćanjem novčane kazne državi (za potporu projekta za zaštitu internet prostora).
Kaznu morate platiti u roku od 48 sati od povrede. Nakon 48 sati isteka, za daljnjih 48 sati će biti automatski prikupljeni sve informacije o Vama i protiv Vas de biti pokrenut krivični postupak. Iznos vaše kazna je HRK 500 Kuna. Kaznu možete pLatiti novčanim vaučerima PaySafeCard. Nakon plačenja kazne novac de biti doznačeni na račun d,žave, vaš kompjuter de se odblokirati u roku od 24 sata.
Nakon toga, u roku od 7 dana Vi ste obvezni ukloniliti sve prekršaje povezane s vašim osobnim kompjuterom. Ako prekršaji nisu ispravljeni, Vaš kompjuter će se opet blokirati i protiv vas će biti opet pokrenut krivični postupak (bez mogućnosti plaćanja novčane kazne).
Imajte u vidu što morate unijeti valjane kodove za novac kad plaćate kaznu, a takoder ne mojte unovčati vaučere odmah nakon uplate. Ako unesete pogrešnu šifru novčanog vaučera, novčanih bonova ili napravite pokušaj poništiti nakon uplate osim navedenih prekršaja Vi ćete biti optuženi za prijevaru (čl. 377 Kažnjenog zakona Republike Hrvatske; ovaj članak predvida kaznu zatvora u trajanju od 1 do 3 godine) a protiv vas će biti pokrenut krivični postupak.

Instant automatic malware removal: Manual threat removal might be a lengthy and complicated process that requires advanced computer skills. Combo Cleaner is a professional automatic malware removal tool that is recommended to get rid of malware. Download it by clicking the button below:
▼ DOWNLOAD Combo Cleaner By downloading any software listed on this website you agree to our Privacy Policy and Terms of Use. To use full-featured product, you have to purchase a license for Combo Cleaner. 7 days free trial available. Combo Cleaner is owned and operated by Rcs Lt, the parent company of PCRisk.com read more.

Quick menu:

Ravnateljstvo Policije virus removal:

Step 1

Windows XP and Windows 7 users: Start your computer in Safe Mode. Click Start, click Shut Down, click Restart, click OK. During your computer starting process press the F8 key on your keyboard multiple times until you see the Windows Advanced Option menu, then select Safe Mode with Networking from the list.

Safe Mode with Networking

Video showing how to start Windows 7 in "Safe Mode with Networking":

Windows 8 users: Go to the Windows 8 Start Screen, type Advanced, in the search results select Settings. Click on Advanced Startup options, in the opened "General PC Settings" window select Advanced Startup. Click on the "Restart now" button. Your computer will now restart into "Advanced Startup options menu".

Click on the "Troubleshoot" button, then click on "Advanced options" button. In the advanced option screen click on "Startup settings". Click on the "Restart" button. Your PC will restart into the Startup Settings screen. Press "5" to boot in Safe Mode with Networking.

Windows 8 Safe Mode with networking

Video showing how to start Windows 8 in "Safe Mode with Networking":

Step 2

Log in to the account infected with this ransomware virus. Start your Internet browser and download a legitimate anti-spyware program. Update the anti-spyware software and start a full system scan. Remove all entries detected.


If you cannot start your computer in Safe Mode with Networking, try performing a System Restore.

Video showing how to remove ransomware virus using "Safe Mode with Command Prompt" and "System Restore":

1. During your computer starting process, press the F8 key on your keyboard multiple times until the Windows Advanced Options menu appears, and then select Safe Mode with Command Prompt from the list and press ENTER.

Boot your computer in Safe Mode with Command Prompt

2. When Command Prompt Mode loads, enter the following line: cd restore and press ENTER.

system restore using command prompt type cd restore

3. Next, type this line: rstrui.exe and press ENTER.

system restore using command prompt rstrui.exe

4. In the opened window click "Next".

restore system files and settings

5. Select one of the available Restore Points and click "Next" (this will restore your computer system to an earlier time and date, prior to the Ravnateljstvo Policije ransomware virus infiltrating your PC).

select a restore point

6. In the opened window click "Yes".

run system restore

7. After restoring your computer to a previous date, download and scan your PC with recommended malware removal software to eliminate any remnants of the Ravnateljstvo Policije ransomware virus.

If you cannot start your computer in Safe Mode with Networking (or with Command Prompt),boot your computer using a rescue disk. Some variants of ransomware disable Safe Mode making its removal complicated. For this step, you require access to another computer.

After removing the Ravnateljstvo Policije ransomware virus from your PC, restart your computer and scan it with legitimate antispyware software to remove any possible remnants of this security infection.

Other tools known to remove the Ravnateljstvo Policije ransomware virus:

▼ Show Discussion

About the author:

Tomas Meskauskas

Tomas Meskauskas - expert security researcher, professional malware analyst.

I am passionate about computer security and technology. I have an experience of over 10 years working in various companies related to computer technical issue solving and Internet security. I have been working as an author and editor for pcrisk.com since 2010. Follow me on Twitter and LinkedIn to stay informed about the latest online security threats. Contact Tomas Meskauskas.

PCrisk security portal is brought by a company RCS LT. Joined forces of security researchers help educate computer users about the latest online security threats. More information about the company RCS LT.

Our malware removal guides are free. However, if you want to support us you can send us a donation.

About PCrisk

PCrisk logo

PCrisk is a cyber security portal, informing Internet users about the latest digital threats. Our content is provided by security experts and professional malware researchers. Read more about us.

Malware activity

Global malware activity level today:

Medium threat activity

Increased attack rate of infections detected within the last 24 hours.

QR Code
Ravnateljstvo Policije Ransomware QR code
Scan this QR code to have an easy access removal guide of Ravnateljstvo Policije Ransomware on your mobile device.
We Recommend:

Get rid of Windows malware infections today:

▼ REMOVE IT NOW
Download Combo Cleaner

Platform: Windows

Editors' Rating for Combo Cleaner:
Editors ratingOutstanding!

[Back to Top]

To use full-featured product, you have to purchase a license for Combo Cleaner. 7 days free trial available. Combo Cleaner is owned and operated by Rcs Lt, the parent company of PCRisk.com read more.