Title: Police Central e-crime Unit virus
Type: Ransomware
Also known as: Ukash virus

Remove Police Central e-crime Unit virus
Removal instructions

 
Severity scale:Police Central e-crime Unit virus severity is 93  (93 / 100)
 

Police Central e-crime Unit virus (also called as United Kingdom Police virus and PCeU virus) is a ransomware infection that should never be trusted. We have already notified you about Police Central e-crime Unit virus some months ago. However, it seems that this serious ransomware keeps disabling its victims and locks up the entire computer's system. In addition, this cyber threat displays its trustworthy-looking alert, which requires to pay the 'fine' in order to unlock the PC. This virus is also known as a member of Ukash viruses that are set to present themselves as legitimate institutions or police units. Police Central e-crime Unit virus presents itself as UK’s Police representative, so it attacks users located in the UK. However, there are other Ukash versions that are actively spread in other countries as well. Before you think you have been locked by your local police office and now you have to pay the fine, check your PC with anti-malware program.

HOW CAN I GET INFECTED WITH Police Central e-crime Unit virus?

PCeU virus uses typical ways of distribution. You need only to open the spam letter or click on the misleading link and you will be infected with trojan horse that will additionally download this ransomware into your computer. As soon as it gets there, Police Central e-crime Unit virus displays its misleading notification and waits until its victim falls for it and pays the fine. This fine is required for invented crimes, like copyrighted content's distribution or even malware's distribution:

Attention!!!

This operating system is locked due to the violation of the laws of the United Kingdom Following violations detected:
This IP address was used to visit websites containing pornography, child pornography, zoophilia and child abuse, your computer also contains video files with Pornographic content, elements of violence and child pornography! Spam-messages with terrorist motives were also sent from your computer. This computer lock is aimed to stop your illegal activity.(...)

To unlock the computer you are obliged to pay a fine of £ 100.
You could pay the forfeit in two ways: (...)

If an error occurs, send the code to address [email protected]

Please, never believe these words because they seek to make you pay for invented activity on your computer. Governmental authorities never collect their fines in such way, so you should simply ignore United Kingdom police virus notification instead of paying the fine through one of its prepayment systems given. Additionally, we highly recommend to remove this threat completely.

HOW CAN I REMOVE Police Central e-crime Unit virus?

As you can see, cyber criminals are actively inventing new ways of tricking users and Police Central e-crime Unit virus is one of these ways. If we talk about successful removal of such ransomware, you should firstly unlock the system and then use SpyHunterSTOPzilla or Malwarebytes Anti Malware to remove PCeU virus for good. In order to unlock your PC follow one of these options:

Flash drive method:

1. Take another machine and use it to download SpyHunter or other reputable anti-malware program.
2. Update the program and put into the USB drive or simple CD.
3. In the meanwhile, reboot your infected machine to Safe Mode with command prompt and stick USB drive in it.
4. Reboot computer infected with United Kingdom Police virus once more and run a full system scan.

* Users infected with these ransomware threats are allowed to access other accounts on their Windows systems. If one of such accounts has administrator rights, you should be capable to launch anti-malware program.

*   Try to deny the Flash to make your ransomware stop function as intended. In order to disable the Flash, go to Macromedia support and select 'Deny': http://www.macromedia.com/support/documentation/en/flashplayer/help/help09.html. After doing that, run a full system scan with anti-malware program.

* Manual PCeU virus removal:

  1. Reboot you infected PC to 'Safe mode with command prompt' to disable thisI virus (this should be working with all versions of this threat)
  2. Run Regedit
  3. Search for WinLogon Entries and write down all the files that are not explorer.exe or blank. Replace them with explorer.exe.
  4. Search the registry for these files you have written down and delete the registry keys referencing the files.
  5. Reboot and run a full system scan with updated SpyHunterSTOPzilla or Malwarebytes Anti Malware to remove remaining files.

Automatic Police Central e-crime Unit virus removal:

It might be that we are affiliated with any of our recommended products. Full disclosure can be found in our Agreement of Use.
By downloading any of provided Anti-spyware software to remove Police Central e-crime Unit virus you agree with our Privacy Policy and Agreement of Use.
SpyHunter is recommended remover to uninstall Police Central e-crime Unit virus. You should confirm using free trial that it detects current version of parasite.

Note: Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manual removal instructions below.

If you failed to remove Police Central e-crime Unit virus using SpyHunter, submit question to our support team and provide as much details as possible.
dot
STOPzilla
download
manual required
We are testing STOPzilla's efficiency at removing Police Central e-crime Unit virus (2012-08-23 03:34:15)
dot
Malwarebytes Anti Malware
download
manual required
We are testing Malwarebytes Anti Malware's efficiency at removing Police Central e-crime Unit virus (2012-08-23 03:34:15)
dot
XoftSpySE Anti Spyware
download
manual required
We are testing XoftSpySE Anti Spyware's efficiency at removing Police Central e-crime Unit virus (2012-08-23 03:34:15)
dot
Defender Pro Ultimate
download
manual required
We are testing Defender Pro Ultimate's efficiency at removing Police Central e-crime Unit virus (2012-08-23 03:34:15)

what to do if you failed to remove the infection?
Virus Removal
Phone Support
Help Line to remove Police Central e-crime Unit virus
Police Central e-crime Unit virus snapshot:
Police Central e-crime Unit virus snapshot
United Kingdom Police virus snapshot

Police Central e-crime Unit virus manual removal:

Kill processes:
[random]
Delete registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\

Geolocation of Police Central e-crime Unit virus:

This map reveals the prevalence of Police Central e-crime Unit virus. Countries and regions that have been affected the most are: United Kingdom.

QR code for Police Central e-crime Unit virus removal instructions:

Police Central e-crime Unit virus qrcode
QR is short for Quick Response. They can be read quickly by the mobile phones. QR codes can store more data than standard barcodes, including url links, geo coordinates, and text.

The reason we add QR code to the website is that parasites like Police Central e-crime Unit virus are really hard to remove on infected computer. you can quicly scan the QR code with your mobile device and have manual removal instructions to uninstall Police Central e-crime Unit virus right in your pocket.

Simply use the QR scanner and read removal instructions from mobile device.

Removal guides in other languages

Information added: 2013-09-24 06:21:25
Information updated: 2013-09-24 06:21:25

Ask us discussions:

Modern viruses are really hard to remove. They have random file names, random registry entries, they can immitale legal products and files. Removal instructions sometimes can't Help to remove infection manually. Please take a look at our discussion where users like you share they experience in fighting the parasite:

Additional resources:

Attention: If you know know a reputable website reated to security threats, please add a link here: add url

3
2
Gavlad
If you find that you have paid cash to paypoint or paysafe and the read its a scam then up to block the payment and get a refund back to an account before the virus organisers take the money from paysafe paypoint. it worked for me
1
2
Phoebe
When I try to launch spyhunter from the USB in safe mode I get told I cant because I am missing ExecutionGuard.dll. What do i do now? Try a different anti-malware program?
5
2
Jake
This is rubbish, after Spyhunter has done its scanning and found the Ukash virus it asks me to purchase a full version before it can remove the threat. You didnt mention we had to pay to have this removed!
1
0
Mad John
Spyhunter does not work in removing the virus.
Your best move is to get in touch with your anti virus provider. it cost almost the same as a spyhunter purchase but they fixed it dead. No problems since.
2
0
D88w
Hi my computer has been locked by this software and i cant login to run the cd or usb as when i log in it takes me straight to the virus screen. So what do i do now? Can somebody please help me.
13
11
rob
listen people . its simple . restart pc tapping f8. choose safe mode with networking . then open internet explorer google combofix and download it for free . save to desktop wen prompted . wen downloaded run it takes 20 mins to sxan and fix .. once its finished . restart hey presto no more ransomware
1
1
andy
ive removed it now but safe with networking doesnt work. im the dimmest computer person ever but i turned off my wifi started laptop, did system restore fast as possible that let me start internet then used online malware to remove any infected files. if that sounds like a right thicko way to do it then im sorry but it worked for me.
0
1
Mad John
I am always very suspicious of stuff that is free? In this world particularly the software world, why do people provide things free??!!
0
0
Jon
Ia tried this i but my PC jus t went to start, did so and the problem was still there? Aaaagh, plsi help. Jon
1
2
Laura
Would you suggest paying for the sky hunter to remove virus? - my computer wont let me access the Internet to download it for free??
1
0
Mad John
No, contact your anti virus provider and they will talk you through it and it will probably cost the same. I was not familiar with spyhunter or the firm that produce it but I was familiar with the anti virus provider. Which would you trust more?
7
0
jay
Tried safe mode, but it just loggs me out then go to a white screen or the police thing. Anymore ideas please
0
0
andy
ive removed it now but safe with networking doesnt work. im the dimmest computer person ever but i turned off my wifi started laptop, did system restore fast as possible that let me start internet then used online malware to remove any infected files. if that sounds like a right thicko way to do it then im sorry but it worked for me.
2
0
Chris
Maybe Spyhunter created this virus in order to sell their spyhunter software to the victims. I think they should be investigated!
0
1
jc87
how do i put on to simple cd
2
1
kevin
Just do what Rob above says and install Combofix in safe made. It worked a treat
1
2
andy
no it definitely doesnt work a treat as screen goes white before you can do anything. eventually, i believe because i turned my internet off it failed to start and then i was able to carry out the necessary actions to remove it.
1
0
Jason
Well I dont even have the option of going into safe mode!!. All I can hope for is to use my friends pc, put the infected drive into their machine as slave and run a virus check on it.
0
0
gg
Absolute scum the ppl who make these, I have took my pc back to factory settings and its still there. I have now lost all my saved data including pics of my kids.
Raging doesnt sum it up
0
0
S
Please do as rob instructed. Thank you!
0
0
Mad John
No dont. Bailey 82 sounds more reasonable and sensible.
0
1
maris
I just restarted pc fev times and then at startup it asked for system restore, i did that and my pc is running again:-) i hope it will help someone
0
0
Pattttttty
Im doing as rob said, but the second it logs in, my laptop automatically restarts into normal fd up mode :( plz help?!!!
1
0
Mad John
My laptop become infected with this virus and it froze completely allowing me to do one thing only, turn the laptop off....
I am not a specialist in computers or their software so my laptop is especially important to me in working and earning a living.
I was able to view the internet on a second (uninfected) laptop I had and realised it was a virus and a scam and that the police were not going to be knocking on my door the next day. I tried to fix myself by purchasing spyhunter.
It did not work and the laptop remained frozen and useless.
I contacted my anti virus provider by phone and for a cost comparable to that of spyhunter they talked me through the repair.
They also assisted in defining a Restore point in case anything further happened to my laptop.
0
1
kyle
the best thing is to do is when you are turning on your pc tap f8 and then press command pront and networking
0
1
feejee
When your nearly out of options read here:

Well, I was fixing a laptop for a friend, and to my horror I found no firewall, no AV, lack of WU, no back up, no sys restore point!

To add to the pain, restarting in safe mode and safe mode with networking instantly rebooted the machine! Only thing I had was safe mode with cmd. I located the winlogon shell in the registry, but all looked fine. Starting to think a wipe was in order, I tried copying some of the AV s/w I trust onto a USB stick and installing on the infected laptop, most of which need a net connection, and the ones that didnt, no worky.... and then I got Superantispyware.

SuperAntiSpyware from cnet actually caught the reg entry and removed it in trial mode (no need to get your purses out!). Im currently running all the AV and things no to make sure the infection is completely gone. Happy days.
1
0
kurt
I start my laptop in safe mode with networking but it just goes straight to the virus?? help please I just bought this thing!!!
0
1
kurt again
I have windows 7 and entered de bugging mode and it got rid of it so try repeatedly pressing f8 then enter de bugging mode and it should go.
0
0
Rich
None of this is working. Kurt - how did you enter de-bugging mode?
0
0
D
For those who are getting a white screen and then th ecrime virus webpage. Once you have booted the machine and pressed F8 are you selecting Networking or Command Line mode. Ive not fixed my issue yet (am trying various AV software and the ones on this thead are next) but boot machine up in command line mode., find another compter where you can download AV software onto a USB stick and once done insert into infected compter.

You might have to go through the alphabet a bit to ind the right drive letter but once done you should be able to run your AV software. If and when Iget the isue resolved I wil post here what worked for me.
0
0
D
Ok, here is how I managed to get rid of the virus.

First I managed to boot my computer up in debug mode. I think this is achieved by repeatedly pressing the F8 key as soon as you start the computer (I may be wrong on that but I believe that is what I did, Im sure Google will tell you exactly what to do)

Once in debug mode, Im not sure if it deleted/removed/prevented the virus from running but either way I got my computer to start up. O then downloaded latest version of malwarer bytes onto a pen drive on another computer then trsansfered sacross to yher infected computer.

I ran malware bytes (took about 4 hours) and it managed to delete the virus. Ive subsequently rerbooted computer normally and things appear to work.
0
1
Bailey82
To Remove E-Crime Unit Ransomware I Use F8 On Startup, Repair Computer, System Recovery, Restore To Earlier Point In Time, Select Restore Point Date Before E-Crime Message (Maybe The Last Critical Update), Then After System Restarts, Download Malwarebytes from CNET.com FOR FREE, Scan With Anti-Virus & Malwarebytes - Simple!!

This Has Worked for Many Of My Customers

No Need For Any Fancy Messing Around In The Registry, Debugging Or Paying A Stupid Amount Of Money For An Average Piece of Software, Just Simple And Straight Forward - Cheers Hope This Helps!!

To Prevent This Ramsomware Continuing to Cause Issues With Your System - Stay Off The Porn!! -LOL :-)
2
0
shaggy72
Totally crapped myself. To the point of taking my laptop to Police until I used my phone to check internet.
@Bailey82 - you saved my life
Cheers
1
0
idiot
Got this , panicked and payed, no recompense I suppose.
1
0
GIGZ
I HAVE TRYED EVERY THING F8 THEN SAFE MODE AND F8 RESTORE FROM LAST UP Date and the all end up back to Police Central e-crime Unit Ransom please help im a compleate idiot on computers need help thanks in advance
0
0
J
Thank u so much bailey ..! It really worked for me
1
1
headache
Latest variant now not allowing to boot into safe mode of any type. Only option is to remove drive from pc and attach it as slave to another and run av program on it.
0
0
stevenparker
safe mode, system restore did it for me, but you still have to be quite quick in clicking the appropriate choices; i made it on the second attempt but i couldnt get close to getting in by any other route, that damn policeman was staring at me after the slightest stumble or hesitation..thanks all anyway for all your help..i think the answer seems to be: dont give up, and try different options till you find "the one" :¬)
and stay patient, formating the harddrive is definately an option worth postponing ...really..dont!
0
0
vlad
hello after i boot my computer in safe mode with network it goes straight to the virus screen what do i do? thanks
0
0
Ian
I found that you can get to your desk top by pressing ctrl-alt-del then click restart then if you have any background programs running such as Skype or spodify or steam windows will wait for them to close at this time if you press cancel you will be returned to the desktop (if you shutdown or restart your computer the virus will lock your computer again) this may help if you dont have a seprate computer to download spyhunter
0
0
Arrow
hahahahaha after a epic 3 hours battle I finally removed the police central e-crime malware hahahaha. I wanna thank the F8 button,Safe Mode with Command Prompt and the rstrui.exe . F... you black hats!!!!!
0
0
Arrow
its really easy, press f8 rapidly before the windows logo ,open safe mode command prompt, write rstrui.exe and choose the last working date, I was really pissed ,but found info at the web. after restored the sys download Malwarebytes Anti-Malware, it helped me...
0
0
Tony
Hello Guys, the latest virus does not allow to boot in Safe Mode, or any modes. Computer restarts immediately if we do so. So, I also tried to unlock the Administrator account via Offline NT Password and Registry Editor" , I activated other accounts and still the same. I also tried to get Command Prompt from Windows Installation Disc, tried regedit and loading hives from NTUser.dat , WindowsSystem32Config, etc. The problem is I dont see any registry values on registry keys like Run, RunOnce, Explorer, WinlogonShell, etc, no weird entries found there too. I dont understand how this virus run at startup.Only solution seems to be remove the HDD and scan it on another computer with MalwareBytes. Any help would be appreciated.
1
0
roof
my pc has bolced due to PCeU virus. the desktop of my pc is fully covered by that file and nothing is visible apart that. when i reboot my pc just after my desktop comes on then that virus page appears. what i do how i recover my pc can i remove it by applying new windows xp installation.. help

Post Comment:

Attention: Use this form only if you have additional information about Police Central e-crime Unit virus parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.
Home page Name



«


* All field required
Like us on Facebook
Latest spyware news:
Subscribe to spyware news
Please enter your e-mail address:
If you do not want to receive our spyware
newsletter please unsubscribe here
48646 Subscribers
Ask us
I failed to remove Police Central e-crime Unit virus using SpyHunter.

Email


Close

Spreading the knowledge:

It is very hard to fight against computer parasites on the Internet alone. If you have a website, we would be more than happy if you would like to cooperate and help us spread the information about latest threats. Remember, knowledge is the most powerful weapon. Help your visitors protect their computers!
add text box
rss feed
help other