New Zealand Police Ransomware

Posted: February 25, 2013

Threat Metric

The Threat Meter is a malware assessment that SpywareRemove.com's research team is able to give every identifiable malware threat. Our Threat Meter includes several criteria based off of specific malware threats to value their severity, reach and volume. The Threat Meter is able to give you a numerical breakdown of each threat's initial Threat Level, Detection Count, Volume Count, Trend Path and Percentage Impact. The overall ranking of each threat in the Threat Meter is a basic breakdown of how all threats are ranked within our own extensive malware database. The scoring for each specific malware threat can be easily compared to other emerging threats to draw a contrast in its particular severity. The Threat Meter is a useful tool in the endeavor of seeking a solution to remove a threat or pursue additional analytical research for all types of computer users.

The following fields listed on the Threat Meter containing a specific value, are explained in detail below:

Threat Level: The threat level scale goes from 1 to 10 where 10 is the highest level of severity and 1 is the lowest level of severity. Each specific level is relative to the threat's consistent assessed behaviors collected from SpyHunter's risk assessment model.

Detection Count: The collective number of confirmed and suspected cases of a particular malware threat. The detection count is calculated from infected PCs retrieved from diagnostic and scan log reports generated by SpyHunter.

Volume Count: Similar to the detection count, the Volume Count is specifically based on the number of confirmed and suspected threats infecting systems on a daily basis. High volume counts usually represent a popular threat but may or may not have infected a large number of systems. High detection count threats could lay dormant and have a low volume count. Criteria for Volume Count is relative to a daily detection count.

Trend Path: The Trend Path, utilizing an up arrow, down arrow or equal symbol, represents the level of recent movement of a particular threat. Up arrows represent an increase, down arrows represent a decline and the equal symbol represent no change to a threat's recent movement.

% Impact (Last 7 Days): This demonstrates a 7-day period change in the frequency of a malware threat infecting PCs. The percentage impact correlates directly to the current Trend Path to determine a rise or decline in the percentage.

Ranking:	2,945
Threat Level:	1/10
Infected PCs:	13,528

First Seen:	February 25, 2013
Last Seen:	October 16, 2023
OS(es) Affected:	Windows

The New Zealand Police Virus (or New Zealand Police Ransomware) is a Police Trojan that locks your computer with a fraudulent legal warning that the New Zealand Police Virus displays automatically. This warning message blocks you from using all other programs while the New Zealand Police Virus demands that you pay a fine for your supposed Internet crimes. However, accusations by the New Zealand Police Virus are made without any regard for your real online behavior, and SpywareRemove.com malware experts urge you to ignore the New Zealand Police Virus's demands for money. Instead of paying New Zealand Police Virus for its act of aggression, you should disable the New Zealand Police Virus with the methods noted in this article and then delete the New Zealand Police Virus with an anti-malware product of your choice.

The New Zealand Police Virus: Helping to Polish Off the Last Corners of the Globe for Criminal Profit

Police Trojans like the New Zealand Police Virus usually limit themselves to heavily-populated countries, particularly those in Europe, but the New Zealand Police Virus appears to be part of a new plan to issue Trojans for virtually every country that has money to spare on online scams. Besides being specific to New Zealand (including a pop-up that displays New Zealand's flag colors, coat of arms and national police symbol), the New Zealand Police Virus is identical to similar Police Trojans. SpywareRemove.com malware research team has identified many of the New Zealand Police Virus's clones as being active 'in the wild,' including Polizia Penitenziaria Ransomware, the International Cyber Security Protection Alliance Virus, Rikspolisstyrelsen Ransomware, the United Kingdom Police Ukash Virus, Policia Boliviana Ransomware and Cheshire Police Authority Ransomware.

The New Zealand Police Virus begins its attack with a pop-up that states the apparent crimes that you've committed: viewing illegal pornography, visiting illegal websites and/or downloading protected content (such as non-freeware software). The New Zealand Police Virus asks you to pay a legal fine for these crimes and even threatens you with other punishments (besides locking your computer) if you fail to pay in time, but SpywareRemove.com malware experts haven't seen any cases of the New Zealand Police Virus being able to follow up on these warnings. As a fraudulent program that's no less deceptive than a rogue anti-malware program like Smart HDD, the New Zealand Police Virus never should be rewarded with money or taken at its word.

Keeping Your PC from Being the New Zealand Police Virus's Beat

The New Zealand Police Virus's pop-up will prevent you from using other applications by covering the Windows desktop, and will, unlike a normal pop-up, refuse to be closed. However, SpywareRemove.com malware experts have noted some easy ways of disabling advanced PC threats, including the New Zealand Police Virus, whenever you're denied access to the necessary PC security utilities.

Safe Mode is a default feature of most operating systems, and will allow you to launch your OS with most unnecessary programs (including, hopefully, the New Zealand Police Virus) disabled. Alternately, you also may load an OS from a removable drive – such as your USB thumb drive – and then proceed to scan your hard drive while you're in the separate OS. Because Police Trojans like the New Zealand Police Virus habitually try to conceal their files, SpywareRemove.com malware experts don't recommend that you try to remove the New Zealand Police Virus without any help from anti-malware products.

Technical Details

Registry Modifications

The following newly produced Registry Values are:

Run keysOnrymSpeedup

Additional Information

The following directories were created:

%programfiles%\OnrymSpeedup

The following messages's were detected:

#	Message
1	New Zealand Police Ng? Pirihimana O Aotearoa ATTENTION! Your PC is blocked due to at least one of the reasons specified below. You have been violating “Copyright and Related Rights Law (Video, Music, Software) and illegally using or distributing copyrighted content, thus infringing Article 128 of the Criminal Code of New Zealand. Article 128 of the Criminal Code provides for a fine of 200 to 500 minimal wages or a deprivation of liberty for 2 to 8 years. You have been viewing or distributing prohibited Pornographic content (Child Porn/Zoophilia and etc). Thus violating Article 202 of the Criminal Code of New Zealand. Article 202 of the Criminal Code provides for a deprivation of liberty for 4 to 12 years. Illegal access to computer data has been initiated from your PC, or you have been… Article 208 of the Criminal Code provides for a fine of up to NOD S100,000 and/or a deprivation of liberty for 4 to 9 years. Illegal access has been initiated from your PC without your knowledge or consent, your PC may be infected by malware, thus you are violating the law On Neglectful Use of Personal Computer. Article 210 of the Criminal Code provides for a fine of NOD 52,000 to NOD $8,000. Spam distribution or other unlawful advertising has been effected from your PC as a profit-seeking activity or without your knowledge, your PC may be infected by malware. Article 212 of the Criminal Code provides for a fine of up to NZD S250,000 and a deprivation of liberty of up to 6 years. In case this activity has been effected without your knowledge, you fall under the above-mentioned article 210 of the Criminal Code of New Zealand. Your personality and address are currently being identified, a criminal case is going to be initiated against you under one or more articles specified above within the next 72 hours. Pursuant to the amendment to the Criminal Code of New Zealand of February 04, 2013, this law infringement (if it is not repeated – first time) may be considered as conditional in case you pay the fine to the State. Fines may only be paid within 72 hours after the infringement. As soon as 72 hours elapse, the possibility to pay the fine expires, and a criminal case is initiated against you automatically within the next 72 hours! The amount of fine is NZD $100. You can pay a fine Ukash. When you pay the fine, your PC will get unlocked in Ito 72 hours after the money is put into the State’s account. Since your PC is unlocked, you will be given 7 days to correct all violations. In case all violations are not corrected after 7 working days, your PC will be blocked again, and a criminal case will be initiated against you automatically under one or more articles specified above.

Message

New Zealand Police
Ng? Pirihimana O Aotearoa
ATTENTION! Your PC is blocked due to at least one of the reasons specified below.
You have been violating “Copyright and Related Rights Law (Video, Music, Software) and illegally using or distributing copyrighted content, thus infringing Article 128 of the Criminal Code of New Zealand.
Article 128 of the Criminal Code provides for a fine of 200 to 500 minimal wages or a deprivation of liberty for 2 to 8 years. You have been viewing or distributing prohibited Pornographic content (Child Porn/Zoophilia and etc). Thus violating Article 202 of the Criminal Code of New Zealand. Article 202 of the Criminal Code provides for a deprivation of liberty for 4 to 12 years. Illegal access to computer data has been initiated from your PC, or you have been…
Article 208 of the Criminal Code provides for a fine of up to NOD S100,000 and/or a deprivation of liberty for 4 to 9 years. Illegal access has been initiated from your PC without your knowledge or consent, your PC may be infected by malware, thus you are violating the law On Neglectful Use of Personal Computer.
Article 210 of the Criminal Code provides for a fine of NOD 52,000 to NOD $8,000.
Spam distribution or other unlawful advertising has been effected from your PC as a profit-seeking activity or without your knowledge, your PC may be infected by malware.
Article 212 of the Criminal Code provides for a fine of up to NZD S250,000 and a deprivation of liberty of up to 6 years. In case this activity has been effected without your knowledge, you fall under the above-mentioned article 210 of the Criminal Code of New Zealand.
Your personality and address are currently being identified, a criminal case is going to be initiated against you under one or more articles specified above within the next 72 hours.
Pursuant to the amendment to the Criminal Code of New Zealand of February 04, 2013, this law infringement (if it is not repeated – first time) may be considered as conditional in case you pay the fine to the State.
Fines may only be paid within 72 hours after the infringement. As soon as 72 hours elapse, the possibility to pay the fine expires, and a criminal case is initiated against you automatically within the next 72 hours!
The amount of fine is NZD $100. You can pay a fine Ukash.
When you pay the fine, your PC will get unlocked in Ito 72 hours after the money is put into the State’s account. Since your PC is unlocked, you will be given 7 days to correct all violations.
In case all violations are not corrected after 7 working days, your PC will be blocked again, and a criminal case will be initiated against you automatically under one or more articles specified above.