Police Nationale virus - How to remove

Police Nationale virus is one more ransomware program that is installed to computers without users’ consent by Trojan viruses. The program attacks PCs that are located in France and uses the name of local French police. In fact it has nothing in common with French authorities and only uses this name in order to look more reliable.

Once Police Nationale virus gets access to the chosen computer, it completely locks the system and does not allow you to do anything there. The program displays a message on your screen saying that your machine has been blocked because you are suspected to be using illegal content (pornographic files). The warning contains various logos of French police and actually sounds scary. Here’s how it looks like:

Police Nationale
Votre ordinateur est bloqué en raison de soupçons de téléchargement et de distribution du contenu illégale.
Les contenus illicites mentionnées (de 641 mb des dossiers visuels) ons été automatiquement classés comme les matériaux de la pornographie enfantine.
Ces actions, en totalité ou en partie, violent les lois suivant de la France L’ARTICLE 227-23: La photocopie, l’enregistrement ou la transmission d’images, qui représentent les mineurs, pour la distribution avec le contenu pornographique est puni d’un emprisonnement de trois ans et une amende de 45.000 euros. La même sanction s’applique d’offrir ou de distribuer une telle photo ou la représentation, par quelque moyen, et d’importer ou creeerter ou à être téléchargée ou transférée via (Internet ou le réseau cellulaire. Les peines sont portées à un emprisonnement de cinq ans et une amende de 75.000 euros s’il a été fait usage des réseaux de la communication pour la diffusion de messages à un public sans restriction pour la distribution d’image du mineur.
Les dispositions de la présente article sont également applicables aux images pornographiques d’une personne avec l’apparition physique qu’est ressemblante du mineur, sauf s’il est prouvé que la personne a plus de dix-huit ans au jour de sa photo a été prise ou enregistrée.

Finally, Police Nationale virus tells you to pay 100 euros if you want to get your system unblocked and avoid bigger punishments. Despite how scary the message looks like, you should know that it is a scam. Police would never notify you about the fines you have to pay using remote access via computer. Besides, it would never block your PC blocking functioning of all of your programs.

Remove Police Nationale virus from your computer immediately after detecting it on your system. If your PC has more than one user account and not all of them are locked, scan it whole with anti-malware programs, e.g. spyhunter, by logging to the account that is not blocked. Another option is to use system restore. If none of these methods worked for you, do the following:

• Restart your computer;
• Press F8 while it is still restarting;
• Choose between safe modes in following order: Safe mode, Safe mode with command prompt

Then follow the guides below:

If your computer runs in Safe mode or Safe mode with networking

1. Launch MSConfig.
2. Disable startup items rundll32 turning on any application from Application Data. Note, that these are typical locations for Police Nationale virus but some others might be used.
3. Restart the system once again.
4. Scan with https://www.2-viruses.com/downloads/spyhunter-i.exe to identify Police Nationale virus files and delete it.

Here is a video showing how to complete the steps:

If your computer runs in Safe mode with command prompt

1. Run Regedit.
2. Search for WinLogon Entries. Write down all files it references that are not explorer.exe or blank. Replace them with explorer.exe
3. Search registry for Police Nationale virus files and delete the registry keys referencing the files
4. Try to reboot and scan with Spyhunter.
5. If this fails, try doing system restore from safe mode with command prompt (rstrui.exe)

If none of safe modes could be launched

Some versions of Police Nationale virus disable all safe modes, but give a short gap that you can use to run anti-malware programs:

1. Reboot normally.
2. Start->Run.
3. Enter: http://2-viruses.com/downloads/spyhunter-i.exe . If malware is loaded, just press alt+tab once and keep entering the string blindly. Press Enter.
4. Press Alt+tab and then R couple times. Police Nationale virus process should be killed.

Here is a video detailing this approach:

Hitman Pro USB disk

If you did not succeed using any of the methods above, try scanning PC with a bootable USB or DVD disk. These should be able to remove all versions of Police Nationale virus, but will not work if your hard drive is encrypted.

For that, we recommend using Hitman Pro Kickstarter USB.

1. Download Hitman Pro on uninfected PC.
2. Run Hitman and ask to create Kickstarter USB (option on initial screen)
3. When USB ready, reboot infected PC with USB attached and press DEL
4. Choose USB as primary boot device.
5. Boot normally.
6. Run Hitman Pro and https://www.2-viruses.com/downloads/spyhunter-i.exe . One of these programs should detect and remove malware from your PC.

 

Automatic Malware removal tools