{"id":4904,"date":"2012-11-15T15:30:23","date_gmt":"2012-11-15T15:30:23","guid":{"rendered":"http:\/\/malwaretips.com\/blogs\/?p=4904"},"modified":"2012-12-01T09:38:10","modified_gmt":"2012-12-01T09:38:10","slug":"polska-policja-virus","status":"publish","type":"post","link":"https:\/\/malwaretips.com\/blogs\/polska-policja-virus\/","title":{"rendered":"Remove POLSKA POLICJA virus (PaySafeCard scam)"},"content":{"rendered":"<p>The <strong>Polska Policja Ukash Ransom<\/strong> is a computer virus, which will display a <strong>bogus notification<\/strong>, that pretends to be from <strong>CYBERPRZEST\u0118PCZO\u015a\u0106 DEPARTAMENT<\/strong> (Cyber Crime Department) and states that your computer has been blocked due to it being involved with the distribution of pornographic material, SPAM and copyrighted content.<br \/>\nThe <strong>Polska Policja virus will lock you out of your computer and applications<\/strong>, so whenever you&#8217;ll try to log on into your Windows operating system or Safe Mode with Networking, it will display instead a lock screen asking you to pay 300 PLN in the form of a Ukash or PaySafeCard code.<br \/>\nFurthermore, to make its alert seem more authentic, <strong>this virus also has the ability to access your installed webcam<\/strong>\u00a0,so that the bogus Polska Policja notification shows what is happening in the room.<br \/>\nIf your computer is infected with Polska Policja virus,then you are seeing the below notification:<br \/>\n<a href=\"http:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2012\/11\/polska-policja-virus.jpg\"><img decoding=\"async\" class=\"alignnone size-full wp-image-4905\" title=\"Polska Policja - Cyberprzest\u0119pczo\u015b\u0107 Departament virus\" src=\"\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2012\/11\/polska-policja-virus.jpg\" alt=\"Polska Policja virus\" width=\"1172\" height=\"842\" srcset=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2012\/11\/polska-policja-virus.jpg 1172w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2012\/11\/polska-policja-virus-300x215.jpg 300w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2012\/11\/polska-policja-virus-1024x735.jpg 1024w\" sizes=\"(max-width: 1172px) 100vw, 1172px\" \/><\/a><\/p><div id=\"mwtad3892218406\" class=\"gas_fallback-ad_309684--placement_360520\" style=\"margin-top: 30px;margin-bottom: 30px;\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-7750719144850257\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-7750719144850257\" \ndata-ad-slot=\"3957935887\" \ndata-ad-format=\"auto\" data-full-width-responsive=\"true\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div>\n<p>The <strong>Polska Policja Ransom is a scam<\/strong> and you should <strong>ignore any alert that this malicious software might generate<\/strong> and remove this trojan ransomware from your computer.<br \/>\n<strong>Under no circumstance should you send any money to this cyber criminals<\/strong>,as this could lead to identity theft,and if you have, you should contact your credit card company and dispute the charge stating that the program is a scam and a computer virus.<\/p>\n<div id=\"mwtad1554652810\" class=\"gas_fallback-ad_309746-ad_309691-placement_360521\" style=\"margin-top: 30px;margin-bottom: 30px;\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-7750719144850257\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-7750719144850257\" \ndata-ad-slot=\"4456629336\" \ndata-ad-format=\"auto\" data-full-width-responsive=\"true\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div><h2>Polska Policja Ukash Ransomware &#8211; Virus Removal Guide<\/h2>\n<div id=\"mwtad2844285867\" class=\"gas_fallback-ad_309747-ad_309691-placement_360587\" style=\"margin-top: 30px;margin-bottom: 30px;\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-7750719144850257\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-7750719144850257\" \ndata-ad-slot=\"9589536513\" \ndata-ad-format=\"auto\" data-full-width-responsive=\"true\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div><h2>STEP 1: Remove Polska Policja lock screen from your computer<\/h2>\n<p>The Polska Policja Ukash Ransomware has modified your Windows registry so that when you&#8217;re trying to boot your computer it will launch instead its bogus notification.To remove this malicious registry change,we can use any of the below methods:<\/p><div id=\"mwtad2329860239\" class=\"gas_fallback-ad_381396-ad_309691-placement_360566\" style=\"margin-top: 30px;margin-bottom: 30px;\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-7750719144850257\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-7750719144850257\" \ndata-ad-slot=\"1471373341\" \ndata-ad-format=\"auto\" data-full-width-responsive=\"true\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div>\n<h3>Method 1: Restore Windows to a previous state using System Restore<\/h3>\n<ol>\n<li>Restart your computer, and then <strong>press and hold F8 during the initial startup<\/strong> to start your computer in safe mode with a Command prompt.<br \/>\n<em>Note<\/em>: With some computers, if you press and hold a key as the computer is booting you will get a stuck key message. If this occurs, instead of pressing and holding the &#8220;F8 key&#8221;, <strong>tap the &#8220;F8 key&#8221; continuously<\/strong> until you get the Advanced Boot Options screen.<\/li>\n<li>Use the arrow keys to select the\u00a0<strong>Safe mode with a Command prompt<\/strong>\u00a0option.<br \/>\n<img decoding=\"async\" title=\"Safe Mode with Command Prompt Screen\" src=\"\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2012\/06\/safemode12.jpg\" alt=\"Enter Safe Mode with Command Prompt\" width=\"539\" height=\"292\" \/><\/li>\n<li>At the command prompt, type\u00a0<em><strong>cd restore<\/strong><\/em>, and then press ENTER.<br \/>\nNext,we will type <em><strong>rstrui.exe\u00a0<\/strong><\/em>, and then press ENTER<br \/>\n<img decoding=\"async\" class=\"alignnone size-full wp-image-4564\" title=\"Start System Restore from Safe Mode with Command Prompt\" src=\"\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2012\/11\/cmd-restore.png\" alt=\"System Restore commands\" width=\"677\" height=\"118\" srcset=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2012\/11\/cmd-restore.png 677w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2012\/11\/cmd-restore-300x52.png 300w\" sizes=\"(max-width: 677px) 100vw, 677px\" \/><\/li>\n<li>The System Restore window will start and you&#8217;ll need to select a restore point previous to this infection.<br \/>\n<img decoding=\"async\" class=\"alignnone size-full wp-image-4573\" title=\"Select a previous restore point\" src=\"\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2012\/06\/system-restore.png\" alt=\"Restore points in Windows 7\" width=\"580\" height=\"465\" srcset=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2012\/06\/system-restore.png 580w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2012\/06\/system-restore-300x240.png 300w\" sizes=\"(max-width: 580px) 100vw, 580px\" \/><\/li>\n<li>After System Restore has completed its task,you should be able to boot in Windows normal mode,from there you&#8217;ll need to perform a system scan (<em>as seen on STEP 2<\/em>) with <a href=\"http:\/\/malwaretips.com\/download-malwarebytes\" rel=\"nofollow\" target=\"_blank\"><strong>Malwarebytes Anti-Malware<\/strong><\/a> and <a href=\"http:\/\/malwaretips.com\/download-hitmanpro\" rel=\"nofollow\" target=\"_blank\"><strong>HitmanPro<\/strong><\/a> to remove the malicious files from your machine.<\/li>\n<\/ol>\n<h3>Method 2: Use a Kaspersky Kaspersky Rescue Disk CD to remove the bogus Polska Policja lock screen<\/h3>\n<p><strong>IF<\/strong> you cannot access Safe Mode with Command Prompt we will need to use a <strong>Kaspersky Rescue Disk Bootable CD<\/strong> to clean the Windows registry and to perform a system scan to remove the malicious files.<br \/>\nWhat you&#8217;ll need to perform this removal guide :<\/p>\n<ol>\n<li>A computer with Internet access.<\/li>\n<li>1 blank DVD or CD<\/li>\n<li>1 DVD\/CD Burner<\/li>\n<li>Software which can create a bootable CD<\/li>\n<li>A copy of the latest Kaspersky Rescue Disc<\/li>\n<li>About 1 -2 hours depending on how much data you have on C:<\/li>\n<\/ol>\n<h4>STEP A: Download and create a bootable Kaspersky Rescue Disk CD<\/h4>\n<ol>\n<li><strong>Download the Kaspersky Rescue Disk ISO<\/strong>image from below.<br \/>\n<a href=\"http:\/\/rescuedisk.kaspersky-labs.com\/rescuedisk\/updatable\/kav_rescue_10.iso\" target=\"_blank\" rel=\"noopener\"><strong>KASPERSKY RESCUE DISK DOWNLOAD LINK<\/strong><\/a> <em>(This link will open a new page from where you can download Kaspersky Rescue Disk ISO)<\/em><\/li>\n<li><strong>Download ImgBurn<\/strong>, a software that will help us create this bootable disk.<br \/>\n<a href=\"http:\/\/www.imgburn.com\/index.php?act=download\" rel=\"nofollow noopener\" target=\"_blank\"><strong>IMGBURN DOWNLOAD LINK<\/strong><\/a> <em>(This link will open a new page from where you can download ImgBurn)<\/em><\/li>\n<li>You can now <strong>insert your blank DVD\/CD in your burner<\/strong>.<\/li>\n<li><strong>Install ImgBurn by following the prompts<\/strong> and then start this program.<\/li>\n<li>Click on the <strong>Write image file to disc<\/strong> button.<br \/>\n<img decoding=\"async\" title=\"Create a bootable CD\" src=\"\/\/malwaretips.com\/images\/removalguide\/img1.png\" alt=\"Create bootable CD step1\" width=\"510\" height=\"537\" \/><\/li>\n<li>Under <strong>&#8216;Source&#8217;<\/strong> click on the <strong>Browse for file<\/strong> button, then browse to the location where you previously saved the Kaspersky Rescue Disk ISO file.(kav_rescue_10.iso)<br \/>\n<img decoding=\"async\" title=\"Browse to the Kaspersky Rescue Disk Image\" src=\"\/\/malwaretips.com\/images\/removalguide\/img3.png\" alt=\"Create bootable CD step2\" width=\"512\" height=\"171\" \/><\/li>\n<li>Click on the big <strong>Write<\/strong> button.<br \/>\n<img decoding=\"async\" title=\"Click 'Write' to create the bootable disk\" src=\"\/\/malwaretips.com\/images\/removalguide\/img4.png\" alt=\"Create bootable CD step3\" width=\"480\" height=\"91\" \/><\/li>\n<li>The disc creation process will now start and it will take around 5-10 minutes to complete.<\/li>\n<\/ol>\n<h4>STEP B:Configure the computer to boot from CD-ROM<\/h4>\n<p>On some machines,if you restart the computer and <strong>repeatedly tap the F11<\/strong> key it should bring up the Boot Menu, from there you can select to boot from the CD.<br \/>\n<strong>IF<\/strong> this doesn&#8217;t happen then you&#8217;ll need to configure your computer to boot for a CD like you&#8217;ll see below.<\/p>\n<ol>\n<li><strong>Use the Delete or F2 keys, to load the BIOS menu<\/strong>.Information how to enter the BIOS menu is displayed on the screen at the start of the OS boot:<br \/>\n<img decoding=\"async\" title=\"Boot into BIOS\" src=\"\/\/malwaretips.com\/images\/removalguide\/kasp1.png\" alt=\"Boot into Bios\" width=\"285\" height=\"137\" \/><\/li>\n<li>In your PC <strong>BIOS<\/strong> settings select the <strong>Boot menu<\/strong> and set CD\/DVD-ROM as a primary boot device.<br \/>\n<img decoding=\"async\" title=\"Select to boot from CD\" src=\"\/\/malwaretips.com\/images\/removalguide\/kasp2.png\" alt=\"Boot into BIOS Step2\" width=\"250\" height=\"146\" \/><\/li>\n<li><strong>Insert your Kaspersky Rescue Disk and restart your computer.<\/strong><\/li>\n<\/ol>\n<h4>STEP C:Boot your computer from Kaspersky Rescue Disk<\/h4>\n<ol>\n<li>Your computer will now boot from the Kaspersky Rescue Disk,and you&#8217;ll be asked to <strong>press any key<\/strong> to proceed with this process<br \/>\n<img decoding=\"async\" title=\"Press any key\" src=\"\/\/malwaretips.com\/images\/removalguide\/kasp3.png\" alt=\"Kaspersky Rescue Disk 1\" width=\"450\" height=\"337\" \/><\/li>\n<li>In the start up wizard window that will open, <strong>select your language<\/strong> using the cursor moving keys. <strong>Press the ENTER<\/strong> key on the keyboard.<br \/>\n<img decoding=\"async\" title=\"Select your language\" src=\"\/\/malwaretips.com\/images\/removalguide\/kasp4.png\" alt=\"Kaspersky Rescue Disk 2\" width=\"450\" height=\"337\" \/><\/li>\n<li>On the next screen, select <strong>Kaspersky Rescue Disk. Graphic Mode<\/strong> then press <strong>ENTER<\/strong>.<br \/>\n<img decoding=\"async\" title=\"Select Graphic Mode for Kaspersky Rescue Disk\" src=\"\/\/malwaretips.com\/images\/removalguide\/kasp5.png\" alt=\"Kaspersky Rescue Disk 3\" width=\"450\" height=\"337\" \/><\/li>\n<li>The End User License Agreement of Kaspersky Rescue Disk will be displayed on the screen. Read carefully the agreement then <strong>press the C <\/strong> button on your keyboard.<br \/>\n<img decoding=\"async\" title=\"Accept the End User License Agreement \" src=\"\/\/malwaretips.com\/images\/removalguide\/kasp6.png\" alt=\"Kaspersky Rescue Disk 4\" width=\"487\" height=\"273\" \/><\/li>\n<li>Once the actions described above have been performed, the Kasprsky operating system will start.<\/li>\n<\/ol>\n<h4>STEP D: Launch Kaspersky WindowsUnlocker to remove the malicious registry changes<\/h4>\n<p>This ransomware trojan has modified your Windows system registry so that when you&#8217;re trying to boot your computer it will instead launch his lock screen.To remove this malicious registry changes we need to use the Kasersky WindowsUnlocker from Kaspersky Rescue Disk.<\/p><div id=\"mwtad3241859825\" class=\"gas_fallback-ad_309686-ad_309691-placement_360569\" style=\"margin-top: 30px;margin-bottom: 30px;\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-7750719144850257\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-7750719144850257\" \ndata-ad-slot=\"6935453015\" \ndata-ad-format=\"auto\" data-full-width-responsive=\"true\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div>\n<ol>\n<li><strong>Click on the Start button<\/strong> located in the left bottom corner of the screen and <strong>select the Kaspersky WindowsUnlocker<\/strong>.<br \/>\n<img decoding=\"async\" title=\"Start the Kaspersky WindowsUnlocker utility\" src=\"\/\/malwaretips.com\/images\/removalguide\/kasp13.png\" alt=\"Kaspersky Rescue Disk WindowsUnlocker 1\" width=\"338\" height=\"224\" \/><br \/>\n<span style=\"color: #ff0000;\">IF you can&#8217;t find the <strong>WindowsUnlocker button,<\/strong> you can select <strong>Terminal<\/strong> and in the command prompt type<span style=\"color: #000000;\"> <em><strong>windowsunlocker<\/strong><\/em><\/span> and then press <strong> Enter <\/strong>on the keyboard.<\/span><\/li>\n<li>A white colored console window will appear and will automatically start loading the registry files for scanning and disinfection. The whole process will take only a couple of seconds and after this process you should be able to boot your computer in normal mode.<br \/>\n<img decoding=\"async\" title=\"Kaspersky WindowsUnlocker Log\" src=\"\/\/malwaretips.com\/images\/removalguide\/kasp14.png\" alt=\"Kaspersky Rescue Disk WindowsUnlocker 2\" width=\"558\" height=\"315\" \/><\/li>\n<\/ol>\n<h4>STEP E:Scan your system with Kaspersky Rescue Disk<\/h4>\n<ol>\n<li>Click on the Start button located in the left bottom corner of the screen and <strong>select the Kaspersky Rescue Disk<\/strong> then click on <strong>My Update Center<\/strong> and press <strong>Start update<\/strong>.<br \/>\n<img decoding=\"async\" title=\"Update Kaspersky Rescue Disk AV Definitions\" src=\"\/\/malwaretips.com\/images\/removalguide\/kasp8.png\" alt=\"Kaspersky Bootable Cd scan 1\" width=\"385\" height=\"404\" \/><\/li>\n<li>When the update process has completed, the light at the top of the window will turn green, and the databases release date will be updated.<br \/>\n<img decoding=\"async\" title=\"Kaspersky Updated Definitions\" src=\"\/\/malwaretips.com\/images\/removalguide\/kasp9.png\" alt=\"Kaspersky Bootable Cd scan 2\" width=\"385\" height=\"404\" \/><\/li>\n<li>Click on the <strong>Objects Scan<\/strong> tab, then click <strong>Start Objects Scan<\/strong>to begin the scan.<br \/>\n<img decoding=\"async\" title=\"Start a Kaspersky Rescue Disk scan\" src=\"\/\/malwaretips.com\/images\/removalguide\/kasp10.png\" alt=\"Kaspersky Bootable Cd scan 3\" width=\"385\" height=\"404\" \/><\/li>\n<li>If any malicious items are found, the default settings are to prompt you for action with a red popup window on the bottom right. <strong>Delete<\/strong> is the recommended action in most cases but we <strong>strongly recommend <\/strong>that you try first to disinfect , and if it doesn&#8217;t work chose to quarantine the infected files just to be on the safe side.<br \/>\n<img decoding=\"async\" title=\"Kaspersky Rescue Disk detecting malicious objects\" src=\"\/\/malwaretips.com\/images\/removalguide\/kasp11.png\" alt=\"Kaspersky Bootable Cd scan 5\" width=\"262\" height=\"345\" \/><\/li>\n<li>When all detected items have been processed and removed, the light in the window will turn green and the scan will show as completed.<br \/>\n<img decoding=\"async\" title=\"Kaspersky Rescue Disk After malware removal\" src=\"\/\/malwaretips.com\/images\/removalguide\/kasp12.png\" alt=\"Kaspersky Bootable Cd scan 7\" width=\"385\" height=\"404\" \/><\/li>\n<li>When done you can close the Kaspersky Rescue Disk window and use the Start Menu to <strong>Restart the computer<\/strong>.<\/li>\n<\/ol>\n<div id=\"mwtad3863013853\" class=\"gas_fallback-ad_309748-ad_309691-placement_360588\" style=\"margin-top: 30px;margin-bottom: 30px;\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-7750719144850257\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-7750719144850257\" \ndata-ad-slot=\"3906789406\" \ndata-ad-format=\"auto\" data-full-width-responsive=\"true\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div><h2>STEP 2: Remove the malicious Polska Policja ransomware files from your computer<\/h2>\n<h3>STEP A: Run a system scan with Malwarebytes Anti-Malware FREE<\/h3>\n<ol>\n<li><strong>Download the latest official version of Malwarebytes Anti-Malware FREE<\/strong>.<br \/>\n<a href=\"http:\/\/malwaretips.com\/download-malwarebytes\" rel=\"nofollow\" target=\"_blank\"><strong>MALWAREBYTES ANTI-MALWARE DOWNLOAD LINK<\/strong><\/a> <em>(This link will open a download page in a new window from where you can download Malwarebytes Anti-Malware Free)<\/em><\/li>\n<li>Start the Malwarebytes&#8217; Anti-Malware installation process by <strong>double clicking on mbam-setup<\/strong> file.<br \/>\n<img decoding=\"async\" title=\"Malwarebytes Anti-Malware Installer\" src=\"\/\/malwaretips.com\/images\/removalguide\/malwarebytes-setup.png\" alt=\"[Image: Malwarebytes Installer]\" width=\"74\" height=\"72\" \/><\/li>\n<li>When the installation begins, <strong>keep following the prompts<\/strong> in order to continue with the setup process. <strong>Do not make any changes to default settings<\/strong> and when the program has finished installing, make sure you leave both the <strong>Update Malwarebytes&#8217; Anti-Malware<\/strong> and <strong>Launch Malwarebytes&#8217; Anti-Malware<\/strong> checked. Then click on the <strong>Finish <\/strong>button. If Malwarebytes&#8217; prompts you to reboot, please do not do so.<br \/>\n<img decoding=\"async\" title=\"Malwarebytes last setup screen\" src=\"\/\/malwaretips.com\/images\/removalguide\/update-malwarebytes.png\" alt=\"[Image: Finishing Malwarebytes installation]\" width=\"405\" height=\"313\" \/><\/li>\n<li>Malwarebytes Anti-Malware will now start and you&#8217;ll be prompted to start a trial period , please select &#8216;<strong>Decline<\/strong>&#8216; as we just want to use the on-demand scanner.<br \/>\n<img decoding=\"async\" title=\"Decline trial period in Malwarebytes Anti-Malware\" src=\"\/\/malwaretips.com\/images\/removalguide\/malwarebytes-trial.png\" alt=\"[Image: Decline Malwarebytes trial]\" width=\"516\" height=\"392\" \/><\/li>\n<li>On the <strong>Scanner<\/strong> tab,select <strong>Perform quick scan<\/strong> and then click on the <strong>Scan\u00a0<\/strong>button to start scanning your computer.<br \/>\n<img decoding=\"async\" title=\"Perform a Full System Scan with Malwarebytes Anti-Malware\" src=\"\/\/malwaretips.com\/images\/removalguide\/start-scan-malwarebytes.png\" alt=\"[Image: Starting a full system sca]\" width=\"516\" height=\"393\" \/><\/li>\n<li>Malwarebytes&#8217; Anti-Malware will now start scanning your computer for malicious files as shown below.<br \/>\n<img decoding=\"async\" title=\"Malwarebytes Anti-Malware scanning for malware\" src=\"\/\/malwaretips.com\/images\/removalguide\/scan-malwarebytes.png\" alt=\"[Image: Malwarebytes scanning for malicious files]\" width=\"516\" height=\"393\" \/><\/li>\n<li>When the scan is finished a message box will appear, click <strong>OK <\/strong>to continue.<img decoding=\"async\" title=\"Malwarebytes when the system scan has finished\" src=\"\/\/malwaretips.com\/images\/removalguide\/results-malwarebytes.png\" alt=\"[Image: Malwarebytes scan results]\" width=\"516\" height=\"393\" \/><\/li>\n<li>You will now be presented with a screen showing you the malware infections that Malwarebytes&#8217; Anti-Malware has detected.Please note that the infections found may be different from what is shown in the image.Make sure that everything is <strong>Checked (ticked)<\/strong> and click on the <strong>Remove Selected <\/strong>button.<br \/>\n<img decoding=\"async\" title=\"Removing the infections found by Malwarebytes\" src=\"\/\/malwaretips.com\/images\/removalguide\/detection-malwarebytes.png\" alt=\"[Image: Infections found by Malwarebytes]\" width=\"516\" height=\"393\" \/><\/li>\n<\/ol>\n<h3>STEP B: Run a system scan with HitmanPro<\/h3>\n<ol>\n<li>Download the latest official version of HitmanPro from the below link.<br \/>\n<a href=\"http:\/\/malwaretips.com\/download-hitmanpro\" rel=\"nofollow\" target=\"_blank\"> <strong>HITMANPRO DOWNLOAD LINK<\/strong><\/a> <em>(This link will open a download page in a new window from where you can download HitmanPro)<\/em><\/li>\n<li><strong>Double click on the previously downloaded file\u00a0<\/strong>to start the HitmanPro installation.<br \/>\n<img decoding=\"async\" title=\"HitmanPro Installer\" src=\"\/\/malwaretips.com\/images\/removalguide\/hpro1.png\" alt=\"[Image: HitmanPro Icon]\" width=\"54\" height=\"58\" \/><br \/>\n<strong>IF<\/strong> you are experiencing problems while trying to start HitmanPro, you can use the <em>Force Breach<\/em> mode.To start HitmanPro in Force Breach mode,<strong> hold down the left CTRL-key when you start HitmanPro<\/strong> and all non-essential processes are terminated, including the malware process. (<a href=\"http:\/\/www.youtube.com\/watch?feature=player_embedded&amp;v=m6eRWTv2STk\" target=\"_blank\" rel=\"noopener\">How to start HitmanPro in Force Breach mode &#8211; Video<\/a>)<\/li>\n<li>Click on <strong>Next <\/strong>to install HitmanPro on your system.<br \/>\n<img decoding=\"async\" title=\"HitmanPro installation process\" src=\"\/\/malwaretips.com\/images\/removalguide\/hitmanpro36-start.png\" alt=\"[Image: Starting HitmanPro]\" width=\"518\" height=\"410\" \/><\/li>\n<li>The setup screen is displayed, from which you can decide whether you wish to install HitmanPro on your machine or just perform a one-time scan, select an option then click on <strong>Next <\/strong>to start a system scan.<br \/>\n<img decoding=\"async\" title=\"HitmanPro setup options\" src=\"\/\/malwaretips.com\/images\/removalguide\/hitmanpro36-installation.png\" alt=\"[Image: HitmanPro installation screen]\" width=\"518\" height=\"410\" \/><\/li>\n<li>HitmanPro will start scanning your system for malicious files as seen in the image below.<br \/>\n<img decoding=\"async\" title=\"HitmanPro while scanning for  malware\" src=\"\/\/malwaretips.com\/images\/removalguide\/hitmanpro36-scan.png\" alt=\"[Image: HitmanPron scanning]\" width=\"518\" height=\"410\" \/><\/li>\n<li>Once the scan is complete,you&#8217;ll see a screen which will display all the malicious files that the program has found.Click on <strong>Next<\/strong> to remove this malicious files.<br \/>\n<img decoding=\"async\" title=\"HitmanPro displaying scan results\" src=\"\/\/malwaretips.com\/images\/removalguide\/hitmanpro36-results.png\" alt=\"[Image: HitmanPro scan results]\" width=\"518\" height=\"410\" \/><\/li>\n<li>Click <strong>Activate free license <\/strong>to start the free 30 days trial and remove the malicious files.<br \/>\n<img decoding=\"async\" title=\"Activate the HitmanPro free 30 days trial to remove any detected infections\" src=\"\/\/malwaretips.com\/images\/removalguide\/hitmanpro36-activation.png\" alt=\"[Image: Activate HitmanPro license]\" width=\"518\" height=\"410\" \/><\/li>\n<li>HitmanPro will now start removing the infected objects.If this program will ask you to restart your computer,please allow this request.<\/li>\n<\/ol>\n<h4>If you are still experiencing problems while trying to remove \u00a0Polska Policja virus from your machine, please start a new thread in our <a href=\"http:\/\/malwaretips.com\/Forum-Malware-Removal-Assistance-and-Help\" rel=\"nofollow\" target=\"_blank\">Malware Removal Assistance<\/a> forum.<\/h4>\n","protected":false},"excerpt":{"rendered":"<p>The Polska Policja Ukash Ransom is a computer virus, which will display a bogus notification, that pretends to be from CYBERPRZEST\u0118PCZO\u015a\u0106 DEPARTAMENT (Cyber Crime Department) and states that your computer has been blocked due to &#8230; <\/p>\n<p class=\"read-more-container\"><a title=\"Remove POLSKA POLICJA virus (PaySafeCard scam)\" class=\"read-more button\" href=\"https:\/\/malwaretips.com\/blogs\/polska-policja-virus\/#more-4904\" aria-label=\"Read more about Remove POLSKA POLICJA virus (PaySafeCard scam)\">Read more<\/a><\/p>\n","protected":false},"author":1,"featured_media":4905,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2727,49],"tags":[],"class_list":["post-4904","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ransomware","category-scam-reports","masonry-post","generate-columns","tablet-grid-50","mobile-grid-100","grid-parent","grid-50","resize-featured-image"],"_links":{"self":[{"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/posts\/4904","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/comments?post=4904"}],"version-history":[{"count":0,"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/posts\/4904\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/media\/4905"}],"wp:attachment":[{"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/media?parent=4904"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/categories?post=4904"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/tags?post=4904"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}