Severity scale:  

Remove Police Central e-crime Unit virus

removal by Julie Splinters - -   Also known as Ukash virus | Type: Ransomware

Police Central e-crime Unit virus (also called as United Kingdom Police virus and PCeU virus) is a ransomware infection that should never be trusted. We have already notified you about Police Central e-crime Unit virus some months ago. However, it seems that this serious ransomware keeps disabling its victims and locks up the entire computer's system. In addition, this cyber threat displays its trustworthy-looking alert, which requires to pay the 'fine' in order to unlock the PC. This virus is also known as a member of Ukash viruses that are set to present themselves as legitimate institutions or police units. Police Central e-crime Unit virus presents itself as UK’s Police representative, so it attacks users located in the UK. However, there are other Ukash versions that are actively spread in other countries as well. Before you think you have been locked by your local police office and now you have to pay the fine, check your PC with anti-malware program.

HOW CAN I GET INFECTED WITH Police Central e-crime Unit virus?

Questions about Police Central e-crime Unit virus

PCeU virus uses typical ways of distribution. You need only to open the spam letter or click on the misleading link and you will be infected with trojan horse that will additionally download this ransomware into your computer. As soon as it gets there, Police Central e-crime Unit virus displays its misleading notification and waits until its victim falls for it and pays the fine. This fine is required for invented crimes, like copyrighted content's distribution or even malware's distribution:


This operating system is locked due to the violation of the laws of the United Kingdom Following violations detected:
This IP address was used to visit websites containing pornography, child pornography, zoophilia and child abuse, your computer also contains video files with Pornographic content, elements of violence and child pornography! Spam-messages with terrorist motives were also sent from your computer. This computer lock is aimed to stop your illegal activity.(…)

To unlock the computer you are obliged to pay a fine of £ 100.
You could pay the forfeit in two ways: (…)

If an error occurs, send the code to address [email protected]

Please, never believe these words because they seek to make you pay for invented activity on your computer. Governmental authorities never collect their fines in such way, so you should simply ignore United Kingdom police virus notification instead of paying the fine through one of its prepayment systems given. Additionally, we highly recommend to remove this threat completely.

HOW CAN I REMOVE Police Central e-crime Unit virus?

As you can see, cyber criminals are actively inventing new ways of tricking users and Police Central e-crime Unit virus is one of these ways. If we talk about successful removal of such ransomware, you should firstly unlock the system and then use Reimage Reimage Cleaner , SpyHunter 5Combo Cleaner or Malwarebytes to remove PCeU virus for good. In order to unlock your PC follow one of these options:

Flash drive method:

1. Take another machine and use it to download Reimage Reimage Cleaner or other reputable anti-malware program.
2. Update the program and put into the USB drive or simple CD.
3. In the meanwhile, reboot your infected machine to Safe Mode with command prompt and stick USB drive in it.
4. Reboot computer infected with United Kingdom Police virus once more and run a full system scan.

* Users infected with these ransomware threats are allowed to access other accounts on their Windows systems. If one of such accounts has administrator rights, you should be capable to launch anti-malware program.

* Try to deny the Flash to make your ransomware stop function as intended. In order to disable the Flash, go to Macromedia support and select 'Deny': After doing that, run a full system scan with anti-malware program.

* Manual PCeU virus removal:

  1. Reboot you infected PC to 'Safe mode with command prompt' to disable thisI virus (this should be working with all versions of this threat)
  2. Run Regedit
  3. Search for WinLogon Entries and write down all the files that are not explorer.exe or blank. Replace them with explorer.exe.
  4. Search the registry for these files you have written down and delete the registry keys referencing the files.
  5. Reboot and run a full system scan with updated Reimage Reimage Cleaner , SpyHunter 5Combo Cleaner or Malwarebytes to remove remaining files.
do it now!
Reimage Happiness
Reimage Cleaner Happiness
Compatible with Microsoft Windows Supported versions Compatible with OS X Supported versions
What to do if failed?
If you failed to remove virus damage using Reimage Reimage Cleaner, submit a question to our support team and provide as much details as possible.
Reimage Reimage Cleaner has a free limited scanner. Reimage Reimage Cleaner offers more through scan when you purchase its full version. When free scanner detects issues, you can fix them using free manual repairs or you can decide to purchase the full version in order to fix them automatically.
Alternative Software
Different software has a different purpose. If you didn’t succeed in fixing corrupted files with Reimage, try running SpyHunter 5.
Alternative Software
Different software has a different purpose. If you didn’t succeed in fixing corrupted files with Reimage Cleaner, try running Combo Cleaner.
Police Central e-crime Unit virus snapshot
Police Central e-crime Unit virus snapshot

About the author

Julie Splinters
Julie Splinters - Malware removal specialist

If this free removal guide helped you and you are satisfied with our service, please consider making a donation to keep this service alive. Even a smallest amount will be appreciated.

Contact Julie Splinters
About the company Esolutions

Removal guides in other languages

  1. Gavlad says:
    December 10th, 2012 at 10:12 am

    If you find that you have paid cash to paypoint or paysafe and the read its a scam then up to block the payment and get a refund back to an account before the virus organisers take the money from paysafe paypoint. it worked for me

  2. Phoebe says:
    December 21st, 2012 at 3:00 pm

    When I try to launch spyhunter from the USB in safe mode I get told I cant because I am missing ExecutionGuard.dll. What do i do now? Try a different anti-malware program?

  3. Jake says:
    December 22nd, 2012 at 6:54 am

    This is rubbish, after Spyhunter has done its scanning and found the Ukash virus it asks me to purchase a full version before it can remove the threat. You didnt mention we had to pay to have this removed!

  4. Mad John says:
    May 1st, 2013 at 9:39 am

    Spyhunter does not work in removing the virus.
    Your best move is to get in touch with your anti virus provider. it cost almost the same as a spyhunter purchase but they fixed it dead. No problems since.

  5. D88w says:
    January 10th, 2013 at 8:53 am

    Hi my computer has been locked by this software and i cant login to run the cd or usb as when i log in it takes me straight to the virus screen. So what do i do now? Can somebody please help me.

  6. rob says:
    January 16th, 2013 at 10:45 am

    listen people . its simple . restart pc tapping f8. choose safe mode with networking . then open internet explorer google combofix and download it for free . save to desktop wen prompted . wen downloaded run it takes 20 mins to sxan and fix .. once its finished . restart hey presto no more ransomware

  7. andy says:
    February 6th, 2013 at 6:07 pm

    ive removed it now but safe with networking doesnt work. im the dimmest computer person ever but i turned off my wifi started laptop, did system restore fast as possible that let me start internet then used online malware to remove any infected files. if that sounds like a right thicko way to do it then im sorry but it worked for me.

  8. Mad John says:
    May 1st, 2013 at 9:47 am

    I am always very suspicious of stuff that is free? In this world particularly the software world, why do people provide things free??!!

  9. Jon says:
    October 12th, 2013 at 5:48 pm

    Ia tried this i but my PC jus t went to start, did so and the problem was still there? Aaaagh, plsi help. Jon

  10. Laura says:
    January 20th, 2013 at 7:48 pm

    Would you suggest paying for the sky hunter to remove virus? – my computer wont let me access the Internet to download it for free??

  11. Mad John says:
    May 1st, 2013 at 9:43 am

    No, contact your anti virus provider and they will talk you through it and it will probably cost the same. I was not familiar with spyhunter or the firm that produce it but I was familiar with the anti virus provider. Which would you trust more?

  12. jay says:
    January 23rd, 2013 at 11:11 am

    Tried safe mode, but it just loggs me out then go to a white screen or the police thing. Anymore ideas please

  13. andy says:
    February 6th, 2013 at 6:08 pm

    ive removed it now but safe with networking doesnt work. im the dimmest computer person ever but i turned off my wifi started laptop, did system restore fast as possible that let me start internet then used online malware to remove any infected files. if that sounds like a right thicko way to do it then im sorry but it worked for me.

  14. Chris says:
    January 25th, 2013 at 5:48 am

    Maybe Spyhunter created this virus in order to sell their spyhunter software to the victims. I think they should be investigated!

  15. jc87 says:
    January 27th, 2013 at 11:45 am

    how do i put on to simple cd

  16. kevin says:
    February 5th, 2013 at 2:58 pm

    Just do what Rob above says and install Combofix in safe made. It worked a treat

  17. andy says:
    February 6th, 2013 at 6:11 pm

    no it definitely doesnt work a treat as screen goes white before you can do anything. eventually, i believe because i turned my internet off it failed to start and then i was able to carry out the necessary actions to remove it.

  18. Jason says:
    February 14th, 2013 at 9:23 am

    Well I dont even have the option of going into safe mode!!. All I can hope for is to use my friends pc, put the infected drive into their machine as slave and run a virus check on it.

  19. gg says:
    March 2nd, 2013 at 12:26 pm

    Absolute scum the ppl who make these, I have took my pc back to factory settings and its still there. I have now lost all my saved data including pics of my kids.
    Raging doesnt sum it up

  20. S says:
    March 22nd, 2013 at 2:16 pm

    Please do as rob instructed. Thank you!

  21. Mad John says:
    May 1st, 2013 at 9:50 am

    No dont. Bailey 82 sounds more reasonable and sensible.

  22. maris says:
    March 26th, 2013 at 9:20 pm

    I just restarted pc fev times and then at startup it asked for system restore, i did that and my pc is running again:-) i hope it will help someone

  23. Pattttttty says:
    April 4th, 2013 at 1:47 pm

    Im doing as rob said, but the second it logs in, my laptop automatically restarts into normal fd up mode 🙁 plz help?!!!

  24. Mad John says:
    May 1st, 2013 at 10:08 am

    My laptop become infected with this virus and it froze completely allowing me to do one thing only, turn the laptop off….
    I am not a specialist in computers or their software so my laptop is especially important to me in working and earning a living.
    I was able to view the internet on a second (uninfected) laptop I had and realised it was a virus and a scam and that the police were not going to be knocking on my door the next day. I tried to fix myself by purchasing spyhunter.
    It did not work and the laptop remained frozen and useless.
    I contacted my anti virus provider by phone and for a cost comparable to that of spyhunter they talked me through the repair.
    They also assisted in defining a Restore point in case anything further happened to my laptop.

  25. kyle says:
    April 5th, 2013 at 8:35 am

    the best thing is to do is when you are turning on your pc tap f8 and then press command pront and networking

  26. feejee says:
    April 8th, 2013 at 4:02 pm

    When your nearly out of options read here:

    Well, I was fixing a laptop for a friend, and to my horror I found no firewall, no AV, lack of WU, no back up, no sys restore point!

    To add to the pain, restarting in safe mode and safe mode with networking instantly rebooted the machine! Only thing I had was safe mode with cmd. I located the winlogon shell in the registry, but all looked fine. Starting to think a wipe was in order, I tried copying some of the AV s/w I trust onto a USB stick and installing on the infected laptop, most of which need a net connection, and the ones that didnt, no worky…. and then I got Superantispyware.

    SuperAntiSpyware from cnet actually caught the reg entry and removed it in trial mode (no need to get your purses out!). Im currently running all the AV and things no to make sure the infection is completely gone. Happy days.

  27. kurt says:
    April 14th, 2013 at 3:34 am

    I start my laptop in safe mode with networking but it just goes straight to the virus?? help please I just bought this thing!!!

  28. kurt again says:
    April 14th, 2013 at 10:20 am

    I have windows 7 and entered de bugging mode and it got rid of it so try repeatedly pressing f8 then enter de bugging mode and it should go.

  29. Rich says:
    April 17th, 2013 at 7:21 am

    None of this is working. Kurt – how did you enter de-bugging mode?

  30. D says:
    April 20th, 2013 at 12:35 am

    For those who are getting a white screen and then th ecrime virus webpage. Once you have booted the machine and pressed F8 are you selecting Networking or Command Line mode. Ive not fixed my issue yet (am trying various AV software and the ones on this thead are next) but boot machine up in command line mode., find another compter where you can download AV software onto a USB stick and once done insert into infected compter.

    You might have to go through the alphabet a bit to ind the right drive letter but once done you should be able to run your AV software. If and when Iget the isue resolved I wil post here what worked for me.

  31. D says:
    April 20th, 2013 at 8:33 am

    Ok, here is how I managed to get rid of the virus.

    First I managed to boot my computer up in debug mode. I think this is achieved by repeatedly pressing the F8 key as soon as you start the computer (I may be wrong on that but I believe that is what I did, Im sure Google will tell you exactly what to do)

    Once in debug mode, Im not sure if it deleted/removed/prevented the virus from running but either way I got my computer to start up. O then downloaded latest version of malwarer bytes onto a pen drive on another computer then trsansfered sacross to yher infected computer.

    I ran malware bytes (took about 4 hours) and it managed to delete the virus. Ive subsequently rerbooted computer normally and things appear to work.

  32. Bailey82 says:
    April 23rd, 2013 at 6:13 am

    To Remove E-Crime Unit Ransomware I Use F8 On Startup, Repair Computer, System Recovery, Restore To Earlier Point In Time, Select Restore Point Date Before E-Crime Message (Maybe The Last Critical Update), Then After System Restarts, Download Malwarebytes from FOR FREE, Scan With Anti-Virus & Malwarebytes – Simple!!

    This Has Worked for Many Of My Customers

    No Need For Any Fancy Messing Around In The Registry, Debugging Or Paying A Stupid Amount Of Money For An Average Piece of Software, Just Simple And Straight Forward – Cheers Hope This Helps!!

    To Prevent This Ramsomware Continuing to Cause Issues With Your System – Stay Off The Porn!! -LOL 🙂

  33. shaggy72 says:
    August 10th, 2013 at 6:46 pm

    Totally crapped myself. To the point of taking my laptop to Police until I used my phone to check internet.
    @Bailey82 – you saved my life

  34. idiot says:
    May 9th, 2013 at 8:43 am

    Got this , panicked and payed, no recompense I suppose.

  35. GIGZ says:
    May 12th, 2013 at 12:50 am

    I HAVE TRYED EVERY THING F8 THEN SAFE MODE AND F8 RESTORE FROM LAST UP Date and the all end up back to Police Central e-crime Unit Ransom please help im a compleate idiot on computers need help thanks in advance

  36. J says:
    May 26th, 2013 at 10:35 pm

    Thank u so much bailey ..! It really worked for me

  37. headache says:
    May 30th, 2013 at 7:56 am

    Latest variant now not allowing to boot into safe mode of any type. Only option is to remove drive from pc and attach it as slave to another and run av program on it.

  38. stevenparker says:
    June 10th, 2013 at 2:32 pm

    safe mode, system restore did it for me, but you still have to be quite quick in clicking the appropriate choices; i made it on the second attempt but i couldnt get close to getting in by any other route, that damn policeman was staring at me after the slightest stumble or hesitation..thanks all anyway for all your help..i think the answer seems to be: dont give up, and try different options till you find “the one” :¬)
    and stay patient, formating the harddrive is definately an option worth postponing …really..dont!

  39. vlad says:
    July 10th, 2013 at 7:36 am

    hello after i boot my computer in safe mode with network it goes straight to the virus screen what do i do? thanks

  40. Ian says:
    July 11th, 2013 at 11:07 am

    I found that you can get to your desk top by pressing ctrl-alt-del then click restart then if you have any background programs running such as Skype or spodify or steam windows will wait for them to close at this time if you press cancel you will be returned to the desktop (if you shutdown or restart your computer the virus will lock your computer again) this may help if you dont have a seprate computer to download spyhunter

  41. Arrow says:
    November 9th, 2013 at 5:59 pm

    hahahahaha after a epic 3 hours battle I finally removed the police central e-crime malware hahahaha. I wanna thank the F8 button,Safe Mode with Command Prompt and the rstrui.exe . F… you black hats!!!!!

  42. Arrow says:
    November 9th, 2013 at 6:04 pm

    its really easy, press f8 rapidly before the windows logo ,open safe mode command prompt, write rstrui.exe and choose the last working date, I was really pissed ,but found info at the web. after restored the sys download Malwarebytes Anti-Malware, it helped me…

  43. Tony says:
    November 13th, 2013 at 3:16 am

    Hello Guys, the latest virus does not allow to boot in Safe Mode, or any modes. Computer restarts immediately if we do so. So, I also tried to unlock the Administrator account via Offline NT Password and Registry Editor” , I activated other accounts and still the same. I also tried to get Command Prompt from Windows Installation Disc, tried regedit and loading hives from NTUser.dat , WindowsSystem32Config, etc. The problem is I dont see any registry values on registry keys like Run, RunOnce, Explorer, WinlogonShell, etc, no weird entries found there too. I dont understand how this virus run at startup.Only solution seems to be remove the HDD and scan it on another computer with MalwareBytes. Any help would be appreciated.

  44. roof says:
    December 22nd, 2013 at 12:40 am

    my pc has bolced due to PCeU virus. the desktop of my pc is fully covered by that file and nothing is visible apart that. when i reboot my pc just after my desktop comes on then that virus page appears. what i do how i recover my pc can i remove it by applying new windows xp installation.. help

  45. J says:
    December 28th, 2014 at 4:32 pm

    Your all lucky then I have this blasted thing on my mobile foetunately I learned everything about my Sony Ericsson Xperia T and put it into safe mode as soon as id been in contact with the police

  46. Harry says:
    March 1st, 2015 at 3:20 pm

    Tia virus has downloaded on my Samsung tab. Thought I was in really big trouble. Im only 12!!
    Can anyone help me get Rid of this virus from a tablet???

  47. dean says:
    March 12th, 2015 at 8:50 pm

    how do u remove it from mobile phone

  48. kieran says:
    March 26th, 2015 at 9:06 pm

    Same here i got this yesterday (25th march) need help ASAP. On HTC one s

  49. alan says:
    May 29th, 2015 at 7:16 pm

    how do you remove this virus from a Samsung tablet

  50. Joy says:
    January 4th, 2016 at 10:14 am

    How to remove from samsung tablet please, please, please?

  51. pauline says:
    January 25th, 2016 at 3:40 am

    hi guys please help my galazy tablet got the pcec virius dont know what to do can some one help

  52. says:
    February 19th, 2016 at 2:23 pm

    I have purchased a pay safe card as suggested, but cannot clear blockage from UK police central e crime unit.
    I have entered the pin number but this does not appear sufficient. Do I have to enter the pay phone receipt number? if so where.

Your opinion regarding Police Central e-crime Unit virus