Severity scale:  

Europol virus. How to remove? (Uninstall guide)

by ,
Also known as Ukash virus | Type: Ransomware | Tags: Ukash
SpyHunter is a tool to detect malware. You need to purchase full version to remove infections.
More information about SpyHunter and steps to uninstall.

Europol virus or EC3 virus is a dangerous ransomware program, which seeks to rip its victims off. It does that by making them believe that they have violated various laws and now have to pay the fine for the real Europol. Besides, it blocks the entire system down and shows only this fake warning instead of typical user's desktop. Before you fall for this scam and pay the 'fine', keep in mind that such governmental organizations have never been blocking computers when trying to collect their fines. They have more effective methods for that. Europol virus is a huge scam, which continues spreading in Europe for a long time. In order to trick its victims, it shows their IP address, location, EC3 logos, webcam and other details. Please, ignore its professionally-designed warning and stay away from it's requirement to pay the fine. The biggest risk to get infected with Europol virus is for those who live in countries that belong to the European Union. 


Europol virus is distributed by trojan horse, which comes on the system without being asked. Mostly, it can be downloaded together with freeware, shareware, fake software and its updates. As soon as it gets inside the target PC, this trojan blocks the whole system and downloads malicious files that belong to Europol virus. So, when eliminating this threat from the system, the main thing will be to get rid of those files.  Additionally, Europol virus replaces PC's desktop with a fake notification, which claims:

Attention! Your PC has been locked! Attention!
Your computer has been trying to download and/or to install pirated software or multimedia files protected by international laws and has been blocked According to EU legislation you are required to pay 100 EUR administrative fees if this is the first time you have violated the copyright law. Downloading, installing and distributing Such materials is highly punishable and may leave a long lasting effect on your job and on your friends and relatives, if we don’t receive a payment within 48 hours your personal information will be Sent TO your local police authorities. Your hardware used for distribution of pirated software will be confiscated and you will be arrested, charged and convicted for up to 5 years in prison time and registered as a thief for the rest of your life.

Be aware that there are many different versions of this ransomware that attack different European countries. Viruses use EC3 or Europol symbolic only to look trustworthy and legitimate while legitimate organizations don't use such methods for collecting their fines. Please, ignore them and remove European virus from the system. 


First of all, you have to remove the lock. Some users have reported about setting computer's date back for that. However, another part of victims find it useless. If you are one of them, please, try these methods:

Flash drive method:

1. Take another machine and use it to download SpyHunter or other reputable anti-malware program.
2. Update the program and put into the USB drive or simple CD.
3. In the meanwhile, reboot your infected machine to Safe Mode with command prompt and stick USB drive in it.
4. Reboot computer infected with Europol virus once more and run a full system scan.

* Users infected with these ransomware threats are allowed to access other accounts on their Windows systems. If one of such accounts has administrator rights, you should be capable to launch anti-malware program.

*   Try to deny the Flash to make your ransomware stop function as intended. In order to disable the Flash, go to Macromedia support and select 'Deny': After doing that, run a full system scan with anti-malware program.

* Manual Europol virus removal (special skills needed!):

  1. Reboot you infected PC to 'Safe mode with command prompt' to disable thisI virus (this should be working with all versions of this threat)
  2. Run Regedit
  3. Search for WinLogon Entries and write down all the files that are not explorer.exe or blank. Replace them with explorer.exe.
  4. Search the registry for these files you have written down and delete the registry keys referencing the files.
  5. Reboot and run a full system scan with updated SpyHunterSTOPzilla or Malwarebytes Anti Malware.
It might be that we are affiliated with any of our recommended products. Full disclosure can be found in our Agreement of Use.
By downloading any of provided Anti-spyware software you agree with our Privacy Policy and Agreement of Use.
remover for Europol virus
Compatible with OS X
Webroot SecureAnywhere AntiVirus is recommended remover to uninstall Europol virus. You should confirm using free trial that it detects current version of parasite.
Not using OS X? Download a remover for Windows.
Do it now!
remover for Europol virus Happiness
Compatible with Microsoft Microsoft Windows logo
SpyHunter is recommended to uninstall Europol virus. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of SpyHunter malware removal tool. More information about this program can be found in SpyHunter review. If you decided to select another anti-spyware, uninstall SpyHunter from your computer.
more than 40.000.000 downloads!
What to do if failed? If you failed to remove infection using Webroot SecureAnywhere AntiVirus SpyHunter, read here how to submit a support ticket or submit a question to our support team and provide as much details as possible.
Alternate Software
We are testing STOPzilla's efficiency (2013-09-24 06:18)
Malwarebytes Anti Malware
We are testing Malwarebytes Anti Malware's efficiency (2013-09-24 06:18)
XoftSpySE Anti Spyware
We are testing XoftSpySE Anti Spyware's efficiency (2013-09-24 06:18)
Defender Pro Ultimate

Geolocation of Europol virus

Map reveals the prevalence of Europol virus. Countries and regions that have been affected the most are: United Kingdom.

Removal guides in other languages

Information updated:

Comments on Europol virus

Thank you so much about this info, I thought I was going to prison for something that I didnt do. Im only 13

Post a comment

Attention: Use this form only if you have additional information about a parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.

Home page Name


(All fields are required)
Like us on Facebook