Dansk Rigspolitiet virus - How to remove

Dansk Rigspolitiet virus is a ransomware program that has been noticed on computers located in Denmark. The application uses the name of police and tries to make users think that they have been involved into some activities that violated the law. The application completely locks targeted system and pretends to be a message from Danish police. It displays a message on the locked system that looks like this.

DANSK RIGSPOLITIET Koncern IT
OBS! Computeren er blevet blokeret af sikkerhedsmæssige årsager anført nedenfor.
Du er anklaget for visning/lagring og/eller spredning af forbudte pornografi (børnepornografi/ dyresex/voldtægt osv). Du har overtrådt World Declaration om ikke-spredning af børnepornografi. Du er anklaget for at begå forbrydelsen omhandlet i artikelt61 i strafferet af Kongeriget Danmark.
Artikel 161 i strafferet af Kongeriget Danmark indeholder bestemmelser om straf for frihedsstraf fra 5 til 11 år.
Også, er du mistænkt for overtrædelse af “ophavsret og beslægtede rettigheder Lou” (downloading af piratkopieret musik, video) og anvendelse og/eller udbredelse af ophavsretligt beskyttet indhold. Således er du mistænkt for overtrædelse af artikel 148 i strafferet af Kongeriget Danmark.
Artikel 148 i strafferet af Kongeriget Danmark indeholder bestemmelser om straf for frihedsstraf fra 3 til 7 år eller 150-550 grundbeløb bøder. Det var fra din computer, at uautoriseret adgang til information om statens betydning og data lukket for offentlig adgang var blevet stjålet fra.
Uautoriseret adgang kunne have været arrangeret af dig selv om lejesoldat motiver. Eller uden din viden og samtykke, kunne din computer have været påvirket af malware. Derfor er du mistanket af uskyldigt overtrædelse af artikel 215 i strafferet af Kongeriget Danmark Flov om uagtsom og hensynsløs tilsidesættelse af computere og hjælpemidler”) indtil undersøgelsen er holdt.

In fact, appearance of this notification on your computer means that your computer has been attacked by a Trojan virus. It installs to the system without users’ permission and completely takes over computer. The Trojan can get to your system through spam email attachments, because of clicking on malicious links and visiting compromised websites.

You should know that Dansk Rigspolitiet virus is a scam that only wants to rip you off. It tells you to pay some made up fine just because it wants to swindle your money away. The application has nothing to do with Danish police and it only uses their name to scare users more. If you have a closer look at the message of Dansk Rigspolitiet virus you will that it uses Ukash and Paysafecard systems to collect payments. There are no chances that police would collect money using such methods. It is clearly a scam and you should not fall for it.

Remove Dansk Rigspolitiet virus from your system with no hesitations. If your computer has more than one user account and not all of them are locked, scan whole PC with anti-malware programs, e.g. spyhunter, by logging to the account that is not blocked. Another option is to use system restore. If none of these methods worked for you, do the following:

• Restart your computer;
• Press F8 while it is still restarting;
• Choose between safe modes in following order: Safe mode, Safe mode with command prompt

Then follow the guides below:

If your computer runs in Safe mode or Safe mode with networking

1. Launch MSConfig.
2. Disable startup items rundll32 turning on any application from Application Data;. Note, that these are typical locations for Dansk Rigspolitiet virus but some others might be used.
3. Restart the system once again.
4. Scan with https://www.2-viruses.com/downloads/spyhunter-i.exe to identify Dansk Rigspolitiet virus files and delete it.

Here is a video showing how to complete the steps:

If your computer runs in Safe mode with command prompt

1. Run Regedit.
2. Search for WinLogon Entries. Write down all files it references that are not explorer.exe or blank. Replace them with explorer.exe
3. Search registry for Dansk Rigspolitiet virus files and delete the registry keys referencing the files
4. Try to reboot and scan with Spyhunter.
5. If this fails, try doing system restore from safe mode with command prompt (rstrui.exe)

If none of safe modes could be launched

Some versions of Dansk Rigspolitiet virus disable all safe modes, but give a short gap that you can use to run anti-malware programs:

1. Reboot normally.
2. Start->Run.
3. Enter: http://2-viruses.com/downloads/spyhunter-i.exe . If malware is loaded, just press alt+tab once and keep entering the string blindly. Press Enter.
4. Press Alt+tab and then R couple times. Dansk Rigspolitiet virus process should be killed.

Here is a video detailing this approach:

Hitman Pro USB disk

If you did not succeed using any of the methods above, try scanning PC with a bootable USB or DVD disk. These should be able to remove all versions of Dansk Rigspolitiet virus, but will not work if your hard drive is encrypted.

For that, we recommend using Hitman Pro Kickstarter USB.

1. Download Hitman Pro on uninfected PC.
2. Run Hitman and ask to create Kickstarter USB (option on initial screen)
3. When USB ready, reboot infected PC with USB attached and press DEL
4. Choose USB as primary boot device.
5. Boot normally.
6. Run Hitman Pro and https://www.2-viruses.com/downloads/spyhunter-i.exe . One of these programs should detect and remove malware from your PC.

Automatic Malware removal tools

Manual removal