Title: Europol virus
Type: Ransomware
Also known as: Ukash virus

Remove Europol virus
Removal instructions

Severity scale:Europol virus severity is 97  (97 / 100)

Europol virus or EC3 virus is a dangerous ransomware program, which seeks to rip its victims off. It does that by making them believe that they have violated various laws and now have to pay the fine for the real Europol. Besides, it blocks the entire system down and shows only this fake warning instead of typical user's desktop. Before you fall for this scam and pay the 'fine', keep in mind that such governmental organizations have never been blocking computers when trying to collect their fines. They have more effective methods for that. Europol virus is a huge scam, which continues spreading in Europe for a long time. In order to trick its victims, it shows their IP address, location, EC3 logos, webcam and other details. Please, ignore its professionally-designed warning and stay away from it's requirement to pay the fine. The biggest risk to get infected with Europol virus is for those who live in countries that belong to the European Union. 


Europol virus is distributed by trojan horse, which comes on the system without being asked. Mostly, it can be downloaded together with freeware, shareware, fake software and its updates. As soon as it gets inside the target PC, this trojan blocks the whole system and downloads malicious files that belong to Europol virus. So, when eliminating this threat from the system, the main thing will be to get rid of those files.  Additionally, Europol virus replaces PC's desktop with a fake notification, which claims:

Attention! Your PC has been locked! Attention!
Your computer has been trying to download and/or to install pirated software or multimedia files protected by international laws and has been blocked According to EU legislation you are required to pay 100 EUR administrative fees if this is the first time you have violated the copyright law. Downloading, installing and distributing Such materials is highly punishable and may leave a long lasting effect on your job and on your friends and relatives, if we don’t receive a payment within 48 hours your personal information will be Sent TO your local police authorities. Your hardware used for distribution of pirated software will be confiscated and you will be arrested, charged and convicted for up to 5 years in prison time and registered as a thief for the rest of your life.

Be aware that there are many different versions of this ransomware that attack different European countries. Viruses use EC3 or Europol symbolic only to look trustworthy and legitimate while legitimate organizations don't use such methods for collecting their fines. Please, ignore them and remove European virus from the system. 


First of all, you have to remove the lock. Some users have reported about setting computer's date back for that. However, another part of victims find it useless. If you are one of them, please, try these methods:

Flash drive method:

1. Take another machine and use it to download SpyHunter or other reputable anti-malware program.
2. Update the program and put into the USB drive or simple CD.
3. In the meanwhile, reboot your infected machine to Safe Mode with command prompt and stick USB drive in it.
4. Reboot computer infected with Europol virus once more and run a full system scan.

* Users infected with these ransomware threats are allowed to access other accounts on their Windows systems. If one of such accounts has administrator rights, you should be capable to launch anti-malware program.

*   Try to deny the Flash to make your ransomware stop function as intended. In order to disable the Flash, go to Macromedia support and select 'Deny': http://www.macromedia.com/support/documentation/en/flashplayer/help/help09.html. After doing that, run a full system scan with anti-malware program.

* Manual Europol virus removal (special skills needed!):

  1. Reboot you infected PC to 'Safe mode with command prompt' to disable thisI virus (this should be working with all versions of this threat)
  2. Run Regedit
  3. Search for WinLogon Entries and write down all the files that are not explorer.exe or blank. Replace them with explorer.exe.
  4. Search the registry for these files you have written down and delete the registry keys referencing the files.
  5. Reboot and run a full system scan with updated SpyHunterSTOPzilla or Malwarebytes Anti Malware.

Automatic Europol virus removal:

It might be that we are affiliated with any of our recommended products. Full disclosure can be found in our Agreement of Use.
By downloading any of provided Anti-spyware software to remove Europol virus you agree with our Privacy Policy and Agreement of Use.
SpyHunter is recommended remover to uninstall Europol virus. You should confirm using free trial that it detects current version of parasite.

Note: Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manual removal instructions below.

If you failed to remove Europol virus using SpyHunter, submit question to our support team and provide as much details as possible.
manual required
We are testing STOPzilla's efficiency at removing Europol virus (2013-02-22 06:25:39)
Malwarebytes Anti Malware
manual required
We are testing Malwarebytes Anti Malware's efficiency at removing Europol virus (2013-02-22 06:25:39)
XoftSpySE Anti Spyware
manual required
We are testing XoftSpySE Anti Spyware's efficiency at removing Europol virus (2013-02-22 06:25:39)
Defender Pro Ultimate
manual required
We are testing Defender Pro Ultimate's efficiency at removing Europol virus (2013-02-22 06:25:39)

what to do if you failed to remove the infection?
Virus Removal
Phone Support
Help Line to remove Europol virus
Europol virus snapshot:

Geolocation of Europol virus:

This map reveals the prevalence of Europol virus. Countries and regions that have been affected the most are: United Kingdom.

QR code for Europol virus removal instructions:

Europol virus qrcode
QR is short for Quick Response. They can be read quickly by the mobile phones. QR codes can store more data than standard barcodes, including url links, geo coordinates, and text.

The reason we add QR code to the website is that parasites like Europol virus are really hard to remove on infected computer. you can quicly scan the QR code with your mobile device and have manual removal instructions to uninstall Europol virus right in your pocket.

Simply use the QR scanner and read removal instructions from mobile device.

Removal guides in other languages

Information added: 2013-09-24 06:18:12
Information updated: 2013-09-24 06:18:12

Additional resources:

Attention: If you know know a reputable website reated to security threats, please add a link here: add url

Thank you so much about this info, I thought I was going to prison for something that I didnt do. Im only 13

Post Comment:

Attention: Use this form only if you have additional information about Europol virus parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.
Home page Name


* All field required
Like us on Facebook
Latest spyware news:
Subscribe to spyware news
Please enter your e-mail address:
If you do not want to receive our spyware
newsletter please unsubscribe here
48643 Subscribers
Ask us
I failed to remove Europol virus using SpyHunter.



Spreading the knowledge:

It is very hard to fight against computer parasites on the Internet alone. If you have a website, we would be more than happy if you would like to cooperate and help us spread the information about latest threats. Remember, knowledge is the most powerful weapon. Help your visitors protect their computers!
add text box
rss feed
help other