FacebookTwitterLinkedIn

Policia Nacional de Uruguay Virus

Also Known As: Policia Nacional Ransomware
Damage level: Severe

What is Policia Nacional de Uruguay?

The Policia Nacional de Uruguay message locks computer screens, demanding payment of a US$100 or 2000 Peso fine. This is a scam. The message is created by cyber criminals who make money from unsuspecting PC users who falls for their trickery and pay the bogus fine.

Accusations of watching pornography and downloading or sharing copyrighted content are false - these are displayed to scare computer users into believing that they have committed a crime and required to pay a fine. In fact, neither the Policia Nacional de Uruguay nor any other international authority or organization, use desktop locking messages to collect fines for law violations.

Policia Nacional de Uruguay Ukash scam

This message is a ransomware infection originating from a family called Urausy. This particular ransomware predominantly targets PC users from Uruguay, however, other variants target other countries.

Ransomware infections from the Urausy family have the capability to detect the IP addresses of computers they are about to infiltrate, and thus can adapt the deceptive message to appear as if delivered by a local authority.

For example, computer users from the USA see this message as if it sent by the FBI Cybercrime Division, and PC users from the UK, as if sent by the United Kingdom Police. The Policia Nacional de Uruguay message, which blocks computer screens and orders payment of a fine using Ukash, is a scam. Do not trust it and do not pay the bogus fine.

Commonly, ransomware infections from the Urausy family are proliferated by exploiting security vulnerabilities within users' computers. To avoid infections by Policia Nacional de Uruguay or other ransomware, always keep your operating system and installed software (Java, Flash, etc.) up-to-date. In addition, always use legitimate antivirus and anti-spyware programs.

Note that there is a slight delay between actual infection and the appearance of the rogue message, and moreover, this ransomware infection also displays a logo of any existing installed antivirus program within the "Apoyado y Protegido por..." section (if no existing antivirus program is installed, the Windows logo is displayed).

Do not trust Policia Nacional de Uruguay ransomware and use the removal guide provided to eliminate it from your PC.

A fake message displayed by the Policia Nacional de Uruguay virus:

¡ATENCIÓN! Su OP (ordenador) está bloqueado debido a al menos una de las razones especificadas siguientes. Usted ha violado ‹,el derecho de autor y los derechos conexo, (video, música, software) y ha utilizado de una manera ilegal con la distribución de contenido los derechos de autor, infringiendo así el articulo 128 del Criminal Code de la República Oriental del Uruguay.
El artículo 128 del Criminal Code prevé una multa 200 a 500 de los salarios minimos o la privación de la libertad de 2 a 8 años.
Usted ha visto o distribuido el contenido prohibido pornográfico (porno infantil/Zoofilia y etc), violando así el articulo 202 del Criminal Code de la República Oriental del Uruguay. El articulo 202 del Criminal Code prevé la privación de la libertad de 4a 12 años.
El acceso ilegal al contenido prohibido se ha iniciado desde su OP (ordenador), o usted habia sido...
El articulo 208 del Criminal Code prevé una multa hasta UYU 52,000,000 (Peso) y/o la privación de la libertad de 4 a 9 años.
El acceso ilegal se ha iniciado desde su OP (ordenador) sin su conocimiento o consentimiento, su OP puede ser infectado por malware, por eso usted está violando la ley sobre el «Uso negligente de un OP (ordenador) personal". El articulo 210 del Criminal Code prevé una multa de UYU $40,000 (Peso) a UYU 5160,000 (Peso).
La distribución de spam o una otra publicidad ilícita se ha efectuado desde su OP (ordenador) como una actividad con fines de lucro o sin su conocimiento, su OP (ordenador) puede ser infectado por malware.
El artículo 212 del Criminal Code prevé una multa hasta UYU 55,000,000 (Peso) y una privación de la libertad hasta 6 años. En caso de que esta actividad se ha realizado sin su conocimiento, usted se cae en el mencionado articulo 210 del Criminal Code de la República Oriental del Uruguay.
Su personalidad y la dirección están siendo identificadas, un caso criminal va a ser lanzado en su contra en conformidad con uno o varios artículos mencionados dentro de las próximas 72 horas.
En conformidad con la enmienda al Criminal Code de la República Oriental del Uruguay del 25 de Febrero 2013, esta infracción de la ley (si no se repite - la primera vez) puede ser considerada como condicional en caso de que usted paga la multa al Estado.
Las multas deben solamente ser pagadas durante 72 horas después de la infracción. Tan pronto como 72 horas transcurren, su posibilidad de pagar la multa será expirada, así, un proceso penal será automáticamente iniciado en su contra durante las próximas 72 horas! El importe de la multa es de UYU $2,000 (Peso) o USO $100 (US Dólar). Usted puede pagar esta multa por Ukash. Cuando usted paga la multa, su OP (ordenador) será desbloqueado durante de 1 a 72 horas después de que el dinero arriba en la cuenta del Estado.

Instant automatic malware removal: Manual threat removal might be a lengthy and complicated process that requires advanced IT skills. Combo Cleaner is a professional automatic malware removal tool that is recommended to get rid of malware. Download it by clicking the button below:
▼ DOWNLOAD Combo Cleaner By downloading any software listed on this website you agree to our Privacy Policy and Terms of Use. To use full-featured product, you have to purchase a license for Combo Cleaner. 7 days free trial available. Combo Cleaner is owned and operated by Rcs Lt, the parent company of PCRisk.com read more.

Quick menu:

Policia Nacional de Uruguay virus removal:

Step 1

Start your computer in Safe Mode. Click Start, click Shut Down, click Restart, click OK. During your computer starting process press the F8 key on your keyboard multiple times until you see the Windows Advanced Option menu, then select Safe Mode with Networking from the list.

Safe Mode with Networking

Video showing how to start Windows 8 in "Safe Mode with Networking":

Video showing how to start Windows 7 in "Safe Mode with Networking":

Step 2

Log in to the account infected with the Policia Nacional de Uruguay virus. Start your Internet browser and download a legitimate anti-spyware program. Update the anti-spyware software and start a full system scan. Remove all entries detected.


If you cannot start your computer in Safe Mode with Networking, try performing a System Restore.

Video showing how to remove ransomware virus using "Safe Mode with Command Prompt" and "System Restore":

1. During your computer starting process, press the F8 key on your keyboard multiple times until the Windows Advanced Options menu appears, and then select Safe Mode with Command Prompt from the list and press ENTER.

Boot your computer in Safe Mode with Command Prompt

2. When Command Prompt Mode loads, enter the following line: cd restore and press ENTER.

system restore using command prompt type cd restore

3. Next, type this line: rstrui.exe and press ENTER.

system restore using command prompt rstrui.exe

4. In the opened window click "Next".

restore system files and settings

5. Select one of the available restore points and click "Next" (this will restore your computer system to an earlier time and date, prior to the ransomware infiltrating your PC).

select a restore point

6. In the opened window click "Yes".

run system restore

7. After restoring your computer to a previous date, download and scan your PC with recommended malware removal software to eliminate any remnants of the Policia Nacional de Uruguay scam.

Other tools known to remove the Policia Nacional de Uruguay virus:

▼ Show Discussion

About the author:

Tomas Meskauskas

Tomas Meskauskas - expert security researcher, professional malware analyst.

I am passionate about computer security and technology. I have an experience of over 10 years working in various companies related to computer technical issue solving and Internet security. I have been working as an author and editor for pcrisk.com since 2010. Follow me on Twitter and LinkedIn to stay informed about the latest online security threats. Contact Tomas Meskauskas.

PCrisk security portal is brought by a company RCS LT. Joined forces of security researchers help educate computer users about the latest online security threats. More information about the company RCS LT.

Our malware removal guides are free. However, if you want to support us you can send us a donation.

About PCrisk

PCrisk is a cyber security portal, informing Internet users about the latest digital threats. Our content is provided by security experts and professional malware researchers. Read more about us.

Malware activity

Global malware activity level today:

Medium threat activity

Increased attack rate of infections detected within the last 24 hours.

QR Code
Policia Nacional Ransomware QR code
Scan this QR code to have an easy access removal guide of Policia Nacional Ransomware on your mobile device.
We Recommend:

Get rid of Windows malware infections today:

▼ REMOVE IT NOW
Download Combo Cleaner

Platform: Windows

Editors' Rating for Combo Cleaner:
Editors ratingOutstanding!

[Back to Top]

To use full-featured product, you have to purchase a license for Combo Cleaner. 7 days free trial available. Combo Cleaner is owned and operated by Rcs Lt, the parent company of PCRisk.com read more.