‘Nemzeti Nyomozó Iroda’ Ransomware

Posted: July 30, 2013

Threat Metric

The Threat Meter is a malware assessment that SpywareRemove.com's research team is able to give every identifiable malware threat. Our Threat Meter includes several criteria based off of specific malware threats to value their severity, reach and volume. The Threat Meter is able to give you a numerical breakdown of each threat's initial Threat Level, Detection Count, Volume Count, Trend Path and Percentage Impact. The overall ranking of each threat in the Threat Meter is a basic breakdown of how all threats are ranked within our own extensive malware database. The scoring for each specific malware threat can be easily compared to other emerging threats to draw a contrast in its particular severity. The Threat Meter is a useful tool in the endeavor of seeking a solution to remove a threat or pursue additional analytical research for all types of computer users.

The following fields listed on the Threat Meter containing a specific value, are explained in detail below:

Threat Level: The threat level scale goes from 1 to 10 where 10 is the highest level of severity and 1 is the lowest level of severity. Each specific level is relative to the threat's consistent assessed behaviors collected from SpyHunter's risk assessment model.

Detection Count: The collective number of confirmed and suspected cases of a particular malware threat. The detection count is calculated from infected PCs retrieved from diagnostic and scan log reports generated by SpyHunter.

Volume Count: Similar to the detection count, the Volume Count is specifically based on the number of confirmed and suspected threats infecting systems on a daily basis. High volume counts usually represent a popular threat but may or may not have infected a large number of systems. High detection count threats could lay dormant and have a low volume count. Criteria for Volume Count is relative to a daily detection count.

Trend Path: The Trend Path, utilizing an up arrow, down arrow or equal symbol, represents the level of recent movement of a particular threat. Up arrows represent an increase, down arrows represent a decline and the equal symbol represent no change to a threat's recent movement.

% Impact (Last 7 Days): This demonstrates a 7-day period change in the frequency of a malware threat infecting PCs. The percentage impact correlates directly to the current Trend Path to determine a rise or decline in the percentage.

Threat Level:	2/10
Infected PCs:	36

First Seen:	July 30, 2013
OS(es) Affected:	Windows

The 'Nemzeti Nyomozó Iroda' Ransomware is a fake Police Trojan targeting Hungarian victims, similar to the 'Police Magyarország Rendőrség' Ransomware or the 'Magyar Rendőrség' Virus. After infiltrating susceptible computers seemingly at random, the 'Nemzeti Nyomozó Iroda' Ransomware will configure its fake pop-up alert to display once Windows starts, using it to accuse you of abusing your computer for criminal purposes while simultaneously locking Windows. As a Trojan without any ties to Hungary's police force, the 'Nemzeti Nyomozó Iroda' Ransomware doesn't need to be heeded, and SpywareRemove.com malware experts personally suggest the use of all appropriate anti-malware software and basic security strategies for disabling the 'Nemzeti Nyomozó Iroda' Ransomware without giving in to the ransom its pop-up demands.

Investigating the Investigators with a Look at 'Nemzeti Nyomozó Iroda' Ransomware

The 'Nemzeti Nyomozó Iroda' Ransomware is a recent addition to its family of Police Ransomware Trojans, with previous attacks scattered throughout the world, always using their fake alerts to target specific countries, just as the 'Nemzeti Nyomozó Iroda' Ransomware targets Hungary. Some samples of these include the 'Služba Kriminální Policie a Vyšetřování' Ransomware, the 'Ministry of Public Safety New Zealand' Virus, the 'FEDPOL BundesKriminalPolizei' Ransomware, the 'Arma dei Carabinieri' Ransomware, the 'Unité Spéciale de la Police' Ransomware, the 'Police Judiciaire Fédérale' Ransomware, the 'Canadian Association Of Chiefs Of Police' Virus, the 'Dansk Rigspolitiet' Ransomware and the 'Svensk National Bureau of Investigation' Ransomware.

Current infection vectors related to the 'Nemzeti Nyomozó Iroda' Ransomware are estimated to include drive-by-download exploits, which may install 'Nemzeti Nyomozó Iroda' Ransomware without any symptoms. However, once the 'Nemzeti Nyomozó Iroda' Ransomware is installed, the 'Nemzeti Nyomozó Iroda' Ransomware shows an absolutely unmissable symptom: a Hungarian pop-up alert claiming that your computer has been locked by the authorities for its misuse in pornographic endeavours and similar Internet crimes.

Since its pop-up warning is easily identified as fraudulent with just a little foreknowledge, SpywareRemove.com malware experts are most concerned with the 'Nemzeti Nyomozó Iroda' Ransomware's system lockdown, which can require strenuous security measures to circumvent. Booting your PC from CD, DVD or USB device is recommended on any first attempt at disabling the 'Nemzeti Nyomozó Iroda' Ransomware's lockdown – and is needed to access the utilities that can disinfect your PC and remove 'Nemzeti Nyomozó Iroda' Ransomware.

Throwing Your False Police Officer into the Virtual Slammer

The 'Nemzeti Nyomozó Iroda' Ransomware uses its combination of police alert and system lockdown to demand your payment of a supposedly legal fine, but this fee will not help your computer and, above all else, is an unlawful request not backed up by the Hungarian government. Knowing this, you always should act quickly to delete the 'Nemzeti Nyomozó Iroda' Ransomware with a strong anti-malware program as soon as you begin to see its pop-ups.

The 'Nemzeti Nyomozó Iroda' Ransomware requires the assistance of other types of PC threats, such as exploit kits and other Trojans, to be installed onto your PC. In most cases, malicious websites, hacked websites or spam-distributed files are related to the attacks that install the 'Nemzeti Nyomozó Iroda' Ransomware and related Police Trojans. SpywareRemove.com malware experts accordingly emphasize the usefulness of Web browser security for preventing the 'Nemzeti Nyomozó Iroda' Ransomware attacks, which can include disabling exploitable Web content, using your browser's security features and keeping all related software patched.

Technical Details

Additional Information

The following messages's were detected:

#	Message
1	Nemzeti Nyomozó Iroda Nemzeti Védelmi Szolgálat Országos Rend?r-f?kapitányság lFIGYELEM! A számítógépe meg van blokkolva a biztonsági megfontolásokból a következ? okok miatt. önt vádolják a tiltott tartalmú pornográf anyagok megtekintésével/tárolásával ?s/vagy terjesztésével (gyermekpornográfia/bestialitás/nemi er?szak stb.). ön megsértette A gyermekpornográfia terjesztése elleni küzdelemr?l szóló Nemzetközi Nyilatkozatot, és Önt vádolják a Magyarország Büntet? Törvénykönyve 161 cikkében meghatározott b?ncselekmény elkövetésével. (...)

Message

Nemzeti Nyomozó Iroda
Nemzeti Védelmi Szolgálat Országos Rend?r-f?kapitányság
lFIGYELEM! A számítógépe meg van blokkolva a biztonsági megfontolásokból a következ? okok miatt.
önt vádolják a tiltott tartalmú pornográf anyagok megtekintésével/tárolásával ?s/vagy terjesztésével
(gyermekpornográfia/bestialitás/nemi er?szak stb.). ön megsértette A gyermekpornográfia terjesztése elleni küzdelemr?l szóló Nemzetközi Nyilatkozatot, és Önt vádolják a Magyarország Büntet? Törvénykönyve 161 cikkében meghatározott b?ncselekmény elkövetésével.
(...)