Home Malware Programs Ransomware Türk Polisi Virus Ransomware

Türk Polisi Virus Ransomware

Posted: October 30, 2012

Threat Metric

Threat Level: 2/10
Infected PCs: 99
First Seen: October 30, 2012
OS(es) Affected: Windows

Turk Polisi Virus Ransomware Screenshot 1The Türk Polisi Virus marks the first foray of Reveton Trojan-based ransomware attacks into the Middle East. Keeping true to the same tactics and aesthetics that have been used in similar attacks throughout Europe, the Türk Polisi Virus infects your PC through dishonest means, displays a fake legal alert (supposedly sent by the Turkish police) and warns you that your online crimes will result in imprisonment if you don't pay its fine. Naturally, the real Turkish police aren't in the habit of using Trojans to lock people's computers for random Internet-related crimes, nor do they request legal fees through Ukash or Paysafecard. SpywareRemove.com malware researchers recommend that you treat the Türk Polisi Virus the same as any other ransomware Trojan and use tried-and-true methods of disabling and deleting the Türk Polisi Virus infection with reliable anti-malware products.

The Türk Polisi Virus: a Bad Moon Rises Over Turkey's Cyberspace

The Türk Polisi Virus, while not an actual virus and not equipped with self-distributive functions, is hardly less fright-mongering than a virus when the Türk Polisi Virus strikes. The Türk Polisi Virus is loaded by one of many potential variants of Trojans from the Reveton family, which detect the infected computer's IP address and launch a ransomware Trojan attack that matches the IP address's country. Identical attacks to Türk Polisi Virus's that SpywareRemove.com malware experts have observed include Polizia Slovena Ransomware in Slovenia, the France Ministère de l'Intérieur Virus in France, the Poliisi Tietoverkkorikos Tutkinnan Yksikkö Ransomware in Finland and the Polizei Control Department Virus in Austria.

After the Türk Polisi Virus is launched, the Türk Polisi Virus displays a fake alert that claims to have been sent by Turkey's police 'cybercrime department,' complete with the symbol of the Turkish National Police on display. This alert warns you about illegal activities (such as viewing forbidden types of pornography) that have been associated with your computer and will recommend that you pay a fine before you face other legal penalties. SpywareRemove.com malware research team has taken particular pains to emphasis the usage of Paysafecard and Ukash for payment, both of which are often used by ransomware Trojans (especially ones from the same family as the Türk Polisi Virus).

The fine leveraged by the Türk Polisi Virus is illegal and never should be paid, regardless of how difficult the Türk Polisi Virus may make it for you to use your PC. Probable Türk Polisi Virus-related issues, as noted by SpywareRemove.com malware researchers, are listed further in this article.

The Real Dangers Waiting Their Turn Behind the Türk Polisi Virus's Fake Warnings

A Türk Polisi Virus may not be able to call the police or throw you into jail, but any Türk Polisi Virus infection is still a noticeable security risk that should be removed promptly. SpywareRemove.com malware analysts have found that the Türk Polisi Virus and members of its family have been known to use Registry changes and code injection (inserting malicious code into the memory processes of normal programs) to achieve results like these:

  • Browser changes that cause Internet Explorer to load malicious content automatically.
  • Blocked Windows tools like Task Manager.
  • Usage of malicious DLL files with spyware features (features that allow confidential information, such as passwords, to be stolen).
  • Monitored webcam input.

Without doubt, it may be a hard task to remove the Türk Polisi Virus if the Türk Polisi Virus is blocking any other program you can use, which is why SpywareRemove.com malware experts can recommend the usage of a USB-loaded OS or Safe Mode to disable a Türk Polisi Virus infection. Given the concealed nature of the Türk Polisi Virus's components, anti-malware software should be used to remove the Türk Polisi Virus after that.

Technical Details

Additional Information

The following messages's were detected:
# Message
1All transactions on the computer are recorded. The webcam is used to record video and images to identify you. Computer is locked!
2Bilgisayarda yapilan tum islemler, kaydedilmektedir. Web kamerasini kullandiginiz halde video ve fotograflari tespit icin kaydedilmektedir. Bilgisayarinizi kilitlendi!

Related Posts