Police Central e-crime Unit virus – a false message targeting users from the UK and seeking to collect 100-pound fines
Police Central e-crime Unit virus (also called United Kingdom Police virus and PCeU virus) is a malicious scam[1] that blocks the computer screen and demands payments in Ukash or PaySafeCard. The fake message claims that the user has violated some Copyright and Related Rights Laws and now a 100-pound fee needs to be transferred, according to the Criminal Code. Nevertheless, Police Central e-crime Unit virus threatens users that they might get imprisoned from four to nine years for violating the laws.
The scam continues to urge for even bigger prices that start from 250 and end up with 8,000 pounds. Police Central e-crime Unit virus claims that the user has violated laws related to the distribution of copyrighted content, viewing or spreading pornographic material, etc. Hackers give 3 days to make the payment, otherwise, a criminal case will be opened against the user. Do not get frightened, it is just total nonsense.
There are multiple but very similar versions of Police Central e-crime Unit virus. All of them accuse users of violating some types of laws and demand to transfer fees to repay the guilt. Some of the malware even has access to the user's computer camera and shows a video recording the surroundings that are being filmed to plant even more fear. However, you should keep in mind that no type of law agency would urge for fees through such types of messages.
| Name | Police Central e-crime Unit virus |
|---|---|
| Type | Scam/malware |
| Goal | To collect income from gullible users that agree to pay 100-pound, 250-pound, 2,000-pound, etc. fees via Ukash or PaySafeCard. The malware accuses people of violating some copyright laws and distributing pornographic content |
| Features | Comes with the emblem of the country, provides the user's IP, location, and OS type, includes a police officer at the top right of the message, records a video of what the victim is doing at the moment because the malware has access to the computer's camera |
| Appearance | You can download such type of virus by visiting unsecured sources such as torrenting websites. Additionally, the scam can be provoked by a trojan infection that is hiding in your computer system |
| Danger | You can end up paying huge fees for random people that will just take your money and runoff, the malware can compromise your system settings, install malicious processes, and create machine slowdowns |
| Removal | If you have been dealing with this malware lately, you should get rid of it right away. For this task, employ only reliable antimalware software |
| Fix | If you have discovered any compromised areas on your computer system, try repairing them with FortectIntego |
Police Central e-crime Unit virus, detected as Trojan:W32/Reveton, includes logos of Metropolitan police and the PCeU to give the scam message a look of legitimacy. In most cases, you will see a police officer on the upper right corner of the notification. Below you might encounter a video of you at your current position but do not rush to make the payment as this is just the malware developers trying to frighten you.
Even though Police Central e-crime Unit virus might really have access to your camera, this still does not mean that the provided message is true and you have to follow the demands. Nevertheless, criminals ask for Ukash and PaySafeCard payments that should ring a bell for you. People who want to use these types of payment methods are usually orientated in total transfer anonymity.
Police Central e-crime Unit virus can also provide your IP address, location (that will likely be Great Britain as hackers are targetting people from the UK), your operating system type, etc. Below, you will see the attention note claiming that your computer has been blocked due to some laws that you have violated and malicious activity that was found on your device.
Depending on the message, Police Central e-crime Unit virus might ask for different payments starting from 100 and ending up with 8,000 pounds that have to be transferred in 72 hours, 48 hours, or a similar time limit. Most of the time, hackers falsely accuse victims of distributing and watching pornographic content that is related to children pornography and zoophilia, illegally managing copyrighted material:
Police Central e-Crime Unit
Your computer has been blocked!
ATTENTION! Your PC is blocked due tout least one of the reasons specified below.
You have been violating. Copyright and Related Rights Law. (Video, Music, Software) and illegally using or distributing copyrighted content, thus infringing Article 128 of the Criminal Code of Great Britain.
Article 128 of the Criminal Code provides for a fine of 200 to 500 minimal wages or a deprivation of liberty for 2 to 8 years.
You have been viewing or distributing prohibited Pornographic content (Child Porn/Zoophilia and etc).
Thus violating article 202 of the Criminal Code of Great Britain. Article 202 of the Criminal Code provides for a deprivation of liberty for 4 to 12 years. Illegal access to computer data has been initiated from your PC, or you have been…
Article 208 of the Criminal Code provides for a fine of up to £100,000 and/or a deprivation of liberty for 4 to 9 years.
Illegal access has been initiated from your PC without your knowledge or consent, your PC may be infected by malware, thus you are violating the law On Neglectful Use of Personal Computer. Article 210 of the Criminal Code provides for a fine of £2,000 to £8,000. Spam distribution or other unlawful advertising has been effected from your PC as a profit. seeking activity or without your knowledge, your PC may be infected by malware.
Article 212 of the Criminal Code provides for a fine of up to £250,000 and a deprivation of liberty of up to 6 years. In case this activity has been effected without your knowledge, you fall under the above mentioned article 210 of the Criminal Code of Great Britain. Your personality and address are currently being identified, a criminal case is going to be initiated against you under one or more articles specified above within the next 72 hours.
Pursuant to the amendment to the Criminal Code of Great Britain of February 04, 2013, this law infringement (if it is not repeated – first time) may be considered as conditional in case you pay the fine to the State.
Fines may only be paid within 72 hours after the infringement.
As soon as 72 hours elapse, the possibility to pay the fine expires, and a criminal case is initiated against you automatically within the next 72 hours! The amount of fine is £100. You can pay a fine Ukash or PaySafeCard.
When you pay the fine, your PC will get unlocked in Ito 72 hours after the money is put into the State’s account. Since your PC is unlocked, you will be given 7 days to correct all violations. In case all violations are not corrected after 7 working days, your PC will be blocked again, and a criminal case will be initiated against you automatically under one or more articles specified above.
Nevertheless, Police Central e-crime Unit virus falsely claims that there has been illegal access to the information that is stored on your computer, some type of malware has been installed on the device, and spamming, illegal advertising activities were also tracked on your machine that might be a sign of a virus infection. Be sure that this is just another false claim.
The main target of Police Central e-crime Unit virus are people living in Great Britain, however, if the malware has landed on a computer or laptop that is located in the United States, the scam will adapt to the new country, change some of its writings, claim to come from America, and start demanding fines that are converted to dollars.
Police Central e-crime Unit virus is a form of malware that can be downloaded from various third-party websites, including torrenting networks. Also, you might start seeing this scam if some type of dangerous infection such as a Trojan virus has been included in your computer system. If this is the case, you can start experiencing additional activities such as frequent computer slowdowns, software crashes, high CPU usage, installation of unknown processes, etc.
However, you should know that Police Central e-crime Unit virus is just a scam and there have not been any laws violated and you do not need to pay the required fine. You should keep in mind that police departments or law agencies will not approach you in such a manner and try to get money from you in all ways possible. If you ever truly make a cybercrime, you will be contacted directly but definitely not through such types of messages.
If you have been dealing with this scam, do not complete any payments as the hacker will just run off with your money. Besides, you need to remove Police Central e-crime Unit virus from your infected computer system as soon as possible as the message might be a sign of a trojan[2] infection. To get rid of the malware, employ only reliable antimalware software. If you need to diminish the lock screen, try booting your device in Safe Mode with Networking.
Police Central e-crime Unit virus removal might require more than just deleting one component from the machine as the malware might have placed additional payload (various processes, files, and keys) that also need to be terminated. Nevertheless, if you have discovered some corrupted areas on your computer that showed up after the virus attack, you can try fixing the applied damage with the help of a repair tool such as FortectIntego.
Malware invasion techniques and prevention tips
Virus experts from NoVirus.uk[3] state that malware finds its way to the targeted devices by manipulating those locations that have the weakest security level and are easy to hack. For example, virus developers like to plant malicious payload on third-party downloading networks such as torrenting websites that are filled with game cracks, key generators, fake setups, movies, videos, updates, and other material that can help to pass the malware.
The best way to avoid receiving malware from torrenting websites is to just stop using them for your downloads. If you want to get some type of product or service, you should better apply for the downloading process on official websites. Furthermore, malware can get installed from infectious hyperlinks and advertisements that appear on unsecured secondary websites.
What you should do is be aware if your browser alerts that there is a deceptive website waiting ahead of you. Also, avoid stepping on every hyperlink and advert that you see, install AdBlock[4] to decrease the load of advertising that you receive daily. Furthermore, make sure that you have a reliable antivirus program operating on your computer system and make sure to update the antimalware regularly.
Removal techniques for Police Central e-crime Unit virus
Police Central e-crime Unit virus removal should be performed as soon as you encounter the malware on your computer system. For this process, you will need to employ reliable automatical software, otherwise, it might be too difficult to complete on your own. If the virus has been blocking your computer screen, you can try diminishing these malicious changes with the help of Safe Mode with Networking function that is described below.
When you remove Police Central e-crime Unit virus from your Windows device, keep in mind that the malware might have brought some system compromisation. Check this speculation by downloading SpyHunterCombo Cleaner or MalwarebytesMalwarebytes and running a full computer checkup process. If the results reveal any altered areas, you can try fixing things by employing a trustworthy repair program such as FortectIntego.
Did this guide help?
52 comments
Gavlad
If you find that you have paid cash to paypoint or paysafe and the read its a scam then up to block the payment and get a refund back to an account before the virus organisers take the money from paysafe paypoint. it worked for me
Phoebe
When I try to launch spyhunter from the USB in safe mode I get told I cant because I am missing ExecutionGuard.dll. What do i do now? Try a different anti-malware program?
Jake
This is rubbish, after Spyhunter has done its scanning and found the Ukash virus it asks me to purchase a full version before it can remove the threat. You didnt mention we had to pay to have this removed!
D88w
Hi my computer has been locked by this software and i cant login to run the cd or usb as when i log in it takes me straight to the virus screen. So what do i do now? Can somebody please help me.
rob
listen people . its simple . restart pc tapping f8. choose safe mode with networking . then open internet explorer google combofix and download it for free . save to desktop wen prompted . wen downloaded run it takes 20 mins to sxan and fix .. once its finished . restart hey presto no more ransomware
Laura
Would you suggest paying for the sky hunter to remove virus? - my computer wont let me access the Internet to download it for free??
jay
Tried safe mode, but it just loggs me out then go to a white screen or the police thing. Anymore ideas please
Chris
Maybe Spyhunter created this virus in order to sell their spyhunter software to the victims. I think they should be investigated!
jc87
how do i put on to simple cd
kevin
Just do what Rob above says and install Combofix in safe made. It worked a treat
andy
ive removed it now but safe with networking doesnt work. im the dimmest computer person ever but i turned off my wifi started laptop, did system restore fast as possible that let me start internet then used online malware to remove any infected files. if that sounds like a right thicko way to do it then im sorry but it worked for me.
andy
ive removed it now but safe with networking doesnt work. im the dimmest computer person ever but i turned off my wifi started laptop, did system restore fast as possible that let me start internet then used online malware to remove any infected files. if that sounds like a right thicko way to do it then im sorry but it worked for me.
andy
no it definitely doesnt work a treat as screen goes white before you can do anything. eventually, i believe because i turned my internet off it failed to start and then i was able to carry out the necessary actions to remove it.
Jason
Well I dont even have the option of going into safe mode!!. All I can hope for is to use my friends pc, put the infected drive into their machine as slave and run a virus check on it.
gg
Absolute scum the ppl who make these, I have took my pc back to factory settings and its still there. I have now lost all my saved data including pics of my kids.
Raging doesnt sum it up
S
Please do as rob instructed. Thank you!
maris
I just restarted pc fev times and then at startup it asked for system restore, i did that and my pc is running again:-) i hope it will help someone
Pattttttty
Im doing as rob said, but the second it logs in, my laptop automatically restarts into normal fd up mode :( plz help?!!!
kyle
the best thing is to do is when you are turning on your pc tap f8 and then press command pront and networking
feejee
When your nearly out of options read here:
Well, I was fixing a laptop for a friend, and to my horror I found no firewall, no AV, lack of WU, no back up, no sys restore point!
To add to the pain, restarting in safe mode and safe mode with networking instantly rebooted the machine! Only thing I had was safe mode with cmd. I located the winlogon shell in the registry, but all looked fine. Starting to think a wipe was in order, I tried copying some of the AV s/w I trust onto a USB stick and installing on the infected laptop, most of which need a net connection, and the ones that didnt, no worky.... and then I got Superantispyware.
SuperAntiSpyware from cnet actually caught the reg entry and removed it in trial mode (no need to get your purses out!). Im currently running all the AV and things no to make sure the infection is completely gone. Happy days.
kurt
I start my laptop in safe mode with networking but it just goes straight to the virus?? help please I just bought this thing!!!
kurt again
I have windows 7 and entered de bugging mode and it got rid of it so try repeatedly pressing f8 then enter de bugging mode and it should go.
Rich
None of this is working. Kurt - how did you enter de-bugging mode?
D
For those who are getting a white screen and then th ecrime virus webpage. Once you have booted the machine and pressed F8 are you selecting Networking or Command Line mode. Ive not fixed my issue yet (am trying various AV software and the ones on this thead are next) but boot machine up in command line mode., find another compter where you can download AV software onto a USB stick and once done insert into infected compter.
You might have to go through the alphabet a bit to ind the right drive letter but once done you should be able to run your AV software. If and when Iget the isue resolved I wil post here what worked for me.
D
Ok, here is how I managed to get rid of the virus.
First I managed to boot my computer up in debug mode. I think this is achieved by repeatedly pressing the F8 key as soon as you start the computer (I may be wrong on that but I believe that is what I did, Im sure Google will tell you exactly what to do)
Once in debug mode, Im not sure if it deleted/removed/prevented the virus from running but either way I got my computer to start up. O then downloaded latest version of malwarer bytes onto a pen drive on another computer then trsansfered sacross to yher infected computer.
I ran malware bytes (took about 4 hours) and it managed to delete the virus. Ive subsequently rerbooted computer normally and things appear to work.
Bailey82
To Remove E-Crime Unit Ransomware I Use F8 On Startup, Repair Computer, System Recovery, Restore To Earlier Point In Time, Select Restore Point Date Before E-Crime Message (Maybe The Last Critical Update), Then After System Restarts, Download Malwarebytes from CNET.com FOR FREE, Scan With Anti-Virus & Malwarebytes - Simple!!
This Has Worked for Many Of My Customers
No Need For Any Fancy Messing Around In The Registry, Debugging Or Paying A Stupid Amount Of Money For An Average Piece of Software, Just Simple And Straight Forward - Cheers Hope This Helps!!
To Prevent This Ramsomware Continuing to Cause Issues With Your System - Stay Off The Porn!! -LOL :-)
Mad John
Spyhunter does not work in removing the virus.
Your best move is to get in touch with your anti virus provider. it cost almost the same as a spyhunter purchase but they fixed it dead. No problems since.
Mad John
No, contact your anti virus provider and they will talk you through it and it will probably cost the same. I was not familiar with spyhunter or the firm that produce it but I was familiar with the anti virus provider. Which would you trust more?
Mad John
I am always very suspicious of stuff that is free? In this world particularly the software world, why do people provide things free??!!
Mad John
No dont. Bailey 82 sounds more reasonable and sensible.
Mad John
My laptop become infected with this virus and it froze completely allowing me to do one thing only, turn the laptop off....
I am not a specialist in computers or their software so my laptop is especially important to me in working and earning a living.
I was able to view the internet on a second (uninfected) laptop I had and realised it was a virus and a scam and that the police were not going to be knocking on my door the next day. I tried to fix myself by purchasing spyhunter.
It did not work and the laptop remained frozen and useless.
I contacted my anti virus provider by phone and for a cost comparable to that of spyhunter they talked me through the repair.
They also assisted in defining a Restore point in case anything further happened to my laptop.
idiot
Got this , panicked and payed, no recompense I suppose.
GIGZ
I HAVE TRYED EVERY THING F8 THEN SAFE MODE AND F8 RESTORE FROM LAST UP Date and the all end up back to Police Central e-crime Unit Ransom please help im a compleate idiot on computers need help thanks in advance
J
Thank u so much bailey ..! It really worked for me
headache
Latest variant now not allowing to boot into safe mode of any type. Only option is to remove drive from pc and attach it as slave to another and run av program on it.
stevenparker
safe mode, system restore did it for me, but you still have to be quite quick in clicking the appropriate choices; i made it on the second attempt but i couldnt get close to getting in by any other route, that damn policeman was staring at me after the slightest stumble or hesitation..thanks all anyway for all your help..i think the answer seems to be: dont give up, and try different options till you find "the one" :¬)
and stay patient, formating the harddrive is definately an option worth postponing ...really..dont!
vlad
hello after i boot my computer in safe mode with network it goes straight to the virus screen what do i do? thanks
Ian
I found that you can get to your desk top by pressing ctrl-alt-del then click restart then if you have any background programs running such as Skype or spodify or steam windows will wait for them to close at this time if you press cancel you will be returned to the desktop (if you shutdown or restart your computer the virus will lock your computer again) this may help if you dont have a seprate computer to download spyhunter
shaggy72
Totally crapped myself. To the point of taking my laptop to Police until I used my phone to check internet.
@Bailey82 - you saved my life
Cheers
Jon
Ia tried this i but my PC jus t went to start, did so and the problem was still there? Aaaagh, plsi help. Jon
Arrow
hahahahaha after a epic 3 hours battle I finally removed the police central e-crime malware hahahaha. I wanna thank the F8 button,Safe Mode with Command Prompt and the rstrui.exe . F... you black hats!!!!!
Arrow
its really easy, press f8 rapidly before the windows logo ,open safe mode command prompt, write rstrui.exe and choose the last working date, I was really pissed ,but found info at the web. after restored the sys download Malwarebytes Anti-Malware, it helped me...
Tony
Hello Guys, the latest virus does not allow to boot in Safe Mode, or any modes. Computer restarts immediately if we do so. So, I also tried to unlock the Administrator account via Offline NT Password and Registry Editor" , I activated other accounts and still the same. I also tried to get Command Prompt from Windows Installation Disc, tried regedit and loading hives from NTUser.dat , WindowsSystem32Config, etc. The problem is I dont see any registry values on registry keys like Run, RunOnce, Explorer, WinlogonShell, etc, no weird entries found there too. I dont understand how this virus run at startup.Only solution seems to be remove the HDD and scan it on another computer with MalwareBytes. Any help would be appreciated.
roof
my pc has bolced due to PCeU virus. the desktop of my pc is fully covered by that file and nothing is visible apart that. when i reboot my pc just after my desktop comes on then that virus page appears. what i do how i recover my pc can i remove it by applying new windows xp installation.. help
J
Your all lucky then I have this blasted thing on my mobile foetunately I learned everything about my Sony Ericsson Xperia T and put it into safe mode as soon as id been in contact with the police
Harry
Tia virus has downloaded on my Samsung tab. Thought I was in really big trouble. Im only 12!!
Can anyone help me get Rid of this virus from a tablet???
dean
how do u remove it from mobile phone
kieran
Same here i got this yesterday (25th march) need help ASAP. On HTC one s
alan
how do you remove this virus from a Samsung tablet
Joy
How to remove from samsung tablet please, please, please?
pauline
hi guys please help my galazy tablet got the pcec virius dont know what to do can some one help
johnfyson@ntlworld.com
I have purchased a pay safe card as suggested, but cannot clear blockage from UK police central e crime unit.
I have entered the pin number but this does not appear sufficient. Do I have to enter the pay phone receipt number? if so where.
Thanks
John