Home Malware Programs Ransomware Politia Romana Virus Ransomware

Politia Romana Virus Ransomware

Posted: October 31, 2012

Threat Metric

Ranking: 13,280
Threat Level: 2/10
Infected PCs: 316
First Seen: October 31, 2012
Last Seen: September 26, 2023
OS(es) Affected: Windows

Politia Romana Virus Ransomware Screenshot 1While fake police alerts are being displayed throughout the world, but with a particular emphasis on Europe, the Politia Romana Virus has made sure that Romania hasn't been left out of this wave of Reveton-based ransomware attacks. The immediate symptom of a Politia Romana Virus attack is a fake pop-up from Romania's 'cybercrime police department' that demands money in penance for your computer-based crimes. However, SpywareRemove.com malware analysts have also found other malicious functions associated with the Politia Romana Virus, including harmful browser modifications and program-blocking attacks. Ransomware Trojan threats and demands for money always should be ignored, and this goes just as much for the Politia Romana Virus, which has no right to your finances and should be removed by qualified anti-malware programs whenever the Politia Romana Virus is detected.

Politia Romana Virus: the Real Vampire that Sucks the Lifeblood from Your Bank Account

The Politia Romana Virus uses social engineering attacks to trick its victims into sending money to criminals via vouchers like Paysafecard and Ukash. These attacks show themselves in the form of borderless HTML pop-ups that claim to be from the Romanian police. Along with fake legal warnings about criminal actions associated with your computer, the Politia Romana Virus's pop-ups will show a webcam feed if any is available (to imply that you're being monitored visually), the Romanian coat of arms and various logos that are associated with retailers that sell vouchers.

The punchline to the Politia Romana Virus's fake police warning is its insistent that you pay out Euros via Ukash or Paysafecard before other penalties are enacted. However, since the Politia Romana Virus is illegal and unaffiliated with any Romanian police department, SpywareRemove.com malware experts recommend that you keep your money to yourself.

Because a Politia Romana Virus may interfere with your computer in a variety of ways, SpywareRemove.com malware researchers also encourage you to attempt to use Safe Mode or a reboot from a clean USB device before trying to remove the Politia Romana Virus. Further details on the harm that Politia Romana Viruses can cause are provided below.

All the Trouble that Politia Romana Virus Can Get into While You're Protecting Your Assets

Besides the definitive fake police warnings associated with Politia Romana Virus, SpywareRemove.com malware experts also have connected the following functions to Politia Romana Virus attacks:

  • Changes to your browser that degrade its security.
  • Problems with launching other programs, especially basic Windows tools like Task Manager.
  • The installation of malicious DLL files that can perform a variety of functions. Some payloads related to Politia Romana Viruses have been known to include spyware (information-stealing) features.

These attacks also are standard for other Reveton-derived ransomware Trojans such as the Slovenská Polícia VirusSlovenská Polícia Virus, the Polizei Control Department Virus, the Poliisi Tietoverkkorikos Tutkinnan Yksikkö Ransomware, the France Ministère de l'Intérieur Virus, the Türk Polisi Virus or Polizia Slovena Ransomware. Although the Politia Romana Virus is targeted at Romania, SpywareRemove.com malware researchers stress that similar attacks have been found to target specific countries throughout the world – especially Europe. Naturally, scans from competent anti-malware programs are the preferable way to remove a Politia Romana Virus without harming your computer.

Politia Romana Virus Ransomware Screenshot 2

Technical Details

Additional Information

The following messages's were detected:
# Message
1All operations performed by the computer will fail.
In case if you use the web camera all the photos and videos are saved for identification.
Your computer is blocked!
2Toate operatiunile efectuate prin intermediul computerului dat se inscriu.
in caz daca folositi camera-web toate fotografiile si video se salveaza pentru identificare.
Calculatorul dvs. Este blocat!