Suomen Poliisi Ransomware

Posted: February 14, 2013

Threat Metric

The Threat Meter is a malware assessment that SpywareRemove.com's research team is able to give every identifiable malware threat. Our Threat Meter includes several criteria based off of specific malware threats to value their severity, reach and volume. The Threat Meter is able to give you a numerical breakdown of each threat's initial Threat Level, Detection Count, Volume Count, Trend Path and Percentage Impact. The overall ranking of each threat in the Threat Meter is a basic breakdown of how all threats are ranked within our own extensive malware database. The scoring for each specific malware threat can be easily compared to other emerging threats to draw a contrast in its particular severity. The Threat Meter is a useful tool in the endeavor of seeking a solution to remove a threat or pursue additional analytical research for all types of computer users.

The following fields listed on the Threat Meter containing a specific value, are explained in detail below:

Threat Level: The threat level scale goes from 1 to 10 where 10 is the highest level of severity and 1 is the lowest level of severity. Each specific level is relative to the threat's consistent assessed behaviors collected from SpyHunter's risk assessment model.

Detection Count: The collective number of confirmed and suspected cases of a particular malware threat. The detection count is calculated from infected PCs retrieved from diagnostic and scan log reports generated by SpyHunter.

Volume Count: Similar to the detection count, the Volume Count is specifically based on the number of confirmed and suspected threats infecting systems on a daily basis. High volume counts usually represent a popular threat but may or may not have infected a large number of systems. High detection count threats could lay dormant and have a low volume count. Criteria for Volume Count is relative to a daily detection count.

Trend Path: The Trend Path, utilizing an up arrow, down arrow or equal symbol, represents the level of recent movement of a particular threat. Up arrows represent an increase, down arrows represent a decline and the equal symbol represent no change to a threat's recent movement.

% Impact (Last 7 Days): This demonstrates a 7-day period change in the frequency of a malware threat infecting PCs. The percentage impact correlates directly to the current Trend Path to determine a rise or decline in the percentage.

Threat Level:	2/10
Infected PCs:	94

First Seen:	February 14, 2013
OS(es) Affected:	Windows

Suomen Poliisi Ransomware is ransomware that attacks Finnish PC users with a localized pop-up that accuses them of committing crimes related to viewing and/or distributing illegal forms of pornography. Like other ransomware from its family and similar ones, Suomen Poliisi Ransomware uses this accusation to make a completely-illegal request for money through Ukash or Paysafecard. Since giving in to Suomen Poliisi Ransomware will not have any results except to finance criminals, SpywareRemopve.com malware researchers recommend that you ignore Suomen Poliisi Ransomware's threats, if not its presence, and use anti-malware applications to remove Suomen Poliisi Ransomware posthaste.

Fishing Up a Trojan that Jams a Fee in Your Face

Suomen Poliisi Ransomware operates in a manner that's virtually identical to that of other Urausy Trojans like Rikspolisstyrelsen Ransomware, cv Politiet Kongeriget Danmark Ransomware and Landespolizeidirection' Ransomware, with the exception that Suomen Poliisi Ransomware targets Finland. Similar attacks from other types of ransomware also have been reported in most first-world countries throughout the world.

While Suomen Poliisi Ransomware infections may occur from several types of security breaches, SpywareRemopve.com malware research team emphasizes the previous use of Java vulnerabilities and browser exploits to install Suomen Poliisi Ransomware's relatives. These drive-by-download attacks can, in theory, install Suomen Poliisi Ransomware without your consent as soon as your browser launches the malicious (or hacked) web page.

The inevitable consequence of a Suomen Poliisi Ransomware infection is the display of a screen-sized pop-up that's no different from any other web browser pop-up – except that its border has been removed to prevent you from closing it. This fake alert claims that your PC has been locked as a result of online crimes that you've committed and recommends that you pay a fine within seventy-two hours, although SpywareRemopve.com malware analysts stress that the Suomen Poliisi Ransomware isn't affiliated with the Finnish police, and can't cause any further harm to you or your computer.

Getting Yourself Off of Suomen Poliisi Ransomware's Hook

Urausy Trojans like Suomen Poliisi Ransomware, besides blocking your access to Windows, also may use code-injection and other tactics to hide themselves. To make removing Suomen Poliisi Ransomware as easy as possible, SpywareRemopve.com malware experts suggest that you try to disable Suomen Poliisi Ransomware and its pop-up before removing Suomen Poliisi Ransomware. Common techniques for disabling malware like Suomen Poliisi Ransomware include loading peripheral device-based operating systems or using the Safe Mode feature.

After you've stopped Suomen Poliisi Ransomware from being launched, you can feel free to remove Suomen Poliisi Ransomware with any anti-malware program of your preference. Unlike actual fines from the police, ignoring Suomen Poliisi Ransomware's fee will not result in additional fees or jail time, and you can happily ignore its quasi-legal threats without any consequences to you or your computer.

Technical Details

Additional Information

The following messages's were detected:

#	Message
1	HUOMIO! Tietokonenne on tehty vaarattomaksi vähintään yhdestä alla mainituista syistä. Te olette katsoneet tai levittäneet kiellettyjä pornosisällyksiä (Lapsiporno/Zoofilia). Sillä lailla te olette rikkoneet Suomessa rikoslain lakipykälää 202. Lakipykälä 202 edellyttää vapausrangaistusta 4-12 vuotta. (...) Sakot on mahdollista maksaa vain 72 tuntien kuluessa rikoksen jälkeen. 72 tuntien kuluttua sakon maksun mahdollisuus päättyy ja rikosasia aloitetaan automaattisesti seuraavien 72 tunnissa!

Message

HUOMIO! Tietokonenne on tehty vaarattomaksi vähintään yhdestä alla mainituista syistä.
Te olette katsoneet tai levittäneet kiellettyjä pornosisällyksiä (Lapsiporno/Zoofilia). Sillä lailla te olette rikkoneet Suomessa rikoslain lakipykälää 202. Lakipykälä 202 edellyttää vapausrangaistusta 4-12 vuotta.
(...)
Sakot on mahdollista maksaa vain 72 tuntien kuluessa rikoksen jälkeen. 72 tuntien kuluttua sakon maksun mahdollisuus päättyy ja rikosasia aloitetaan automaattisesti seuraavien 72 tunnissa!