Politia Romana Virus

What is Politia Romana?

Politia Romana is a ransomware infection originating from a family of screen lockers called Reventon. There are several variants of this scam, which exploit the name of the Romanian Police, each using slightly different graphics.

When this ransomware infects users' computers, it blocks the desktop, displaying a deceptive message demanding users pay a 400 RON fine to unblock their systems. This message states that users' computers were locked due to their systems holding unauthorised copyrighted content or for users watching pornography.

These statements are false. Neither the Romanian Police nor any other authority use screen lockers to collect fines for law violations. This screen locker was developed by cyber criminals in the hope that PC users will fall for their trickery and pay the bogus fine.

Cyber criminals use the Ukash and paysafecard pre-payed card services for money transactions, thus making tracking problematic for the genuine authorities. If you observe the Politia Romana message demanding you pay a fine, your PC has been infiltrated with a ransomware security infection.

Do not be intimidated by the fake statements displayed within this message and do not pay the fine. The correct way to deal with a screen locker such as this, is to eliminate it from your computer. If you pay the fine, you will send your money to cyber criminals and your computer will remain blocked.

Politia Romana is one of many ransomware infections distributed by Cyber criminals. This variant targets PC users from Romania. Ransomware infections from the Reventon family, however, are localized - capable of detecting computer IP addresses and presenting users with a translated message and graphics pertaining to local authorities.

Commonly, ransomware infections are proliferated using Trojans and drive-by downloads. To prevent these computer infections, always use legitimate antivirus and antispyware programs. If your computer is already locked with the Politia Romana virus, use this removal guide to eliminate it from your PC.

A variant of this ransomware virus:

Ukash (Smart Voucher Limited) is a legitimate company and not associated with ransomware viruses - cyber criminals use this service to extort money from unsuspecting PC users.

A deceptive message presented within the Politia Romana virus:

POLIŢIA ROMÂNĂ
Toate operaţiunile efectuate prin intermediul computerului dat se inscriu. in caz dacă folositi camera-web toate fotografiile si video se salvează pentru idenbficare. Puteti 11 uşor identificat prin adresa Dvs IP si numeie domain-ului. Calculatorul dvs. este blocat!
Activitatea computerului Dvs este suspendată din motivele caracterului activ neautorizat. Mai jos urmează Incălcările posibile comise de Dvs: Articolul 274 - Dreptul de autor Amendă sau inchisoare de plriă la 4 ani (Ublizarea sau propagarea fişierelor cu drept de autor —filme, softwarel Articolul 183 - Productie pornografică Amendă sau inchisoarede piriă la 2 ani (Utilizarea sau propagarea fişierelor pornogratice: Articolul 184 - Producţie pornografică cu implicarea copiilor jcu virsta de pină la 18 anil Inchisoare de pină la 15 ani (Ublizarea sau propagarea fiş'erelor pornograrice) Articolul 104 — Popularizarea Terorismului inchisoare de pina la 25 an, (Ati intrat pe site-urile organizaţillor teroriste) Articolul 297 — utilizarea dispretuitoare a computerului care a cauzat consecinţe grave Amendă sau inchisoare de plriă la 2 ani ;Computerul Dvs este infectat cu un virus care, la rIndul său, a virusat alte computere  Articolul 108 — ioCuri de noroc Amenclă sau inchisoare de plriă la 2 ani (Ati jucat jocuri de noroc,Insă conform legislatiei ţării Ovs jocurile de noroc sint interzise  in legătură cu hotărkea Guvernului din 22 august, toate Incălcările acestea pot fi considerate drept condiţionale la achitarea amenzii. Suma amenzii constituie 500 RON. Achitarea se efectuiazăln termen de 48 de ore de la depistarea incălcării. Dacă amenda nu este plătită, 1n mod automat se deschide un dosar penal. Oupă achitarea amenzii computerul Ovs va fi deblocat.

Instant automatic malware removal: Manual threat removal might be a lengthy and complicated process that requires advanced IT skills. Combo Cleaner is a professional automatic malware removal tool that is recommended to get rid of malware. Download it by clicking the button below:
▼ DOWNLOAD Combo Cleaner By downloading any software listed on this website you agree to our Privacy Policy and Terms of Use. To use full-featured product, you have to purchase a license for Combo Cleaner. 7 days free trial available. Combo Cleaner is owned and operated by Rcs Lt, the parent company of PCRisk.com read more.

Quick menu:

• What is Politia Romana?
• STEP 1. "Politia Romana" virus removal using safe mode with networking.
• STEP 2. "Politia Romana" ransomware removal using System Restore.

Politia Romana virus removal:

Step 1

Start your computer in Safe Mode. Click Start, click Shut Down, click Restart, click OK. During your computer starting process press the F8 key on your keyboard multiple times until you see the Windows Advanced Option menu, then select Safe Mode with Networking from the list.

Video showing how to start Windows 7 in "Safe Mode with Networking":

Step 2

Log in to the account infected with the Politia Romana virus. Start your Internet browser and download a legitimate anti-spyware program. Update the anti-spyware software and start a full system scan. Remove all entries detected.

After completing these steps, your computer should be clean. Reboot your computer in Normal Mode.

Alternative Politia Romana virus removal guide:

Video showing how to remove ransomware virus using "Safe Mode with Command Prompt" and "System Restore":

1. During your computer starting process, press the F8 key on your keyboard multiple times until the Windows Advanced Options menu appears, and then select Safe Mode with Command Prompt from the list and press ENTER.

2. When Command Prompt Mode loads, enter the following line: cd restore and press ENTER.

3. Next, type this line: rstrui.exe and press ENTER.

4. In the opened window, click 'Next'.

5. Select one of the available restore points and click 'Next' (this will restore your computer system to an earlier time and date, prior to the ransomware infiltrating your PC).

6. In the opened window, click 'Yes'.

7. After restoring your computer to a previous date, download and scan your PC with recommended malware removal software to eliminate any remnants of the Politia Romana virus.

Other methods used to eliminate this ransomware infection from your PC:

Remove Politia Romana virus using a Rescue Disk.

Other tools known to remove Politia Romana virus:

• Malwarebytes Anti-Malware

▼ Show Discussion