Northern Constabulary E-Crime Unit is nothing else but a sneaky ransomware that tries to look like a legitimate program. It belongs to the group of Ukash viruses and should never be trusted. Just like FBI virus, this threat is designed for misleading PC users into thinking that they have a deal with British governmental organization and now they have to give some of their savings for the fine. Similarly to its predecessors Northern Constabulary E-crime Unit tends to block the entire system down and displays a huge alert telling that victim is caught for illegal activities on his/hers computer. This program claims that user has been illegally watching pornographic movies, spreading copyrighted content or using illegally copied music or video files. If you fall for this alert and believe what it says, you are asked to find the Paysafecard or Ukash terminal and pay the money through this prepayment system. However, we highly recommend NOT to do that.
HOW CAN I GET INFECTED WITH Northern Constabulary E-Crime Unit virus?
Northern Constabulary E-Crime Unit relies on a Trojan locker when it decides to infiltrate into ones machine. You can get this threat when browsing on suspicious websites, downloading unofficial files or opening spam emails and their attachments. As soon as it manages to get inside, this ransomware alters some system's parameters and waits for computer's reboot. Mostly, there is no gab between computer's reboot and the alert of Northern Constabulary E-Crime Unit. As a result, computer's system is locked down with a fraudulent alert claiming that you have violated the law and now you have to pay the fine for that. We highly recommend not to fall for this misleading campaign leading to the loss of your money. Instead of that, you should remove Northern Constabulary E-Crime Unit as soon as possible.
HOW CAN I REMOVE Northern Constabulary E-Crime Unit virus?
There are some different ways how you can unlock your computer and remove Northern Constabulary E-Crime Unit virus. The first one is to check your Internet connection and use it to download Plumbytes Anti-MalwareWebroot SecureAnywhere AntiVirus or Reimage that will remove infected files from your computer. However, if you can't get online, you should follow these options:
* Flash drive method:
1. Take another machine and use it to download Reimage or other reputable anti-malware program. Y
2. Update the program and put into the USB drive or simple CD.
3. In the meanwhile, reboot your infected machine to Safe Mode with command prompt and stick USB drive in it.
4. Reboot computer infected with Ukash virus once more and run a full system scan.
* Users infected with Ukash viruses are allowed to access other accounts on their Windows systems. If one of such accounts has administrator rights, you should be capable to launch anti-malware program.
* Try to deny the Flash to make your ransomware stop function as intended. In order to disable the Flash, go to Macromedia support and select 'Deny': http://www.macromedia.com/support/documentation/en/flashplayer/help/help09.html. After doing that, run a full system scan with anti-malware program.
* Manual Ukash virus removal (special skills needed!):
- Reboot you infected PC to 'Safe mode with command prompt' to disable Ukash virus (this should be working with all versions of this threat)
- Run Regedit
- Search for WinLogon Entries and write down all the files that are not explorer.exe or blank. Replace them with explorer.exe.
- Search the registry for these files you have written down and delete the registry keys referencing the files.
- Reboot and run a full system scan with updated Reimage to remove remaining virus files.