How to remove Police Central e-crime Unit (Virus Removal)

As of June 2012 two separate variants of ransomware titled Police Central e-crime Unit ransomware 1. Win32/Weelsof and 2. Win32/Reveton have been infecting numerous computers disguised as police units such as the Specialist Crime Directorate or Metropolitan Police. The Police Central e-crime Unit ransomware locks computer systems, claims the operating system or internet browser is locked due to a violation of laws, which may include distributing and visiting illegal pornography, such as child pornography, and zoofila, among other false claims. The e-crime Unit virus then demands a fine of 100 Euro or $100 (or other) be paid by UKash, Paysafecard, or other currency services.

Police Central e-crime Unit ransomware symptoms

1. Win32/Weelsof

■ A fake alert from an online authority Metro Police  stating the infected computer has been violating the law which states “this computer was locked to stop your illegal activity.”

■ Fake violation claims include: Your IP address was used to visit websites containing pornography, child pornography, zoofila, and child abuse.

■ The infection claims “Your computer also contains video files with pornographic content, elements of violence, and child pornography. Spam-messages with terrorist motives were also sent from your computer.” (please be aware these are false claims)

■ A demand for a penalty fine is made by the infection in order for infected systems to become unlocked and accessible again. “To unlock the computer you must pay a fine of 100 E” by use of Ukash or Paysafecard services.

Metropolitan Police Police Central e-crime Unit Virus
The first variant belongs to the Win32/Weelsof malware family. Basically, it’s a Trojan that allows hackers to perform a number of actions on the infected computer. And they certain can launch such fake Police warnings as shown in the image below.

While Win32/Weelsof clearly targets the United Kingdom, the infection has spread to many other countries as well and is expected to progress, change, and adapt to other countries in the future.

2. Win32/Reveton

■ A fake alert from an online authority Specialist Crime Directorate stating the infected computer has been violating the law which states “Your computer is blocked due to at least one of the reasons specified below.”

■ You have been violating Copyright and Related Rights Law (Video, Music, Software) and illegally using or distributing copyrighted content, thus infringing Article 128 of the Criminal Code of Great Britain.

■ Article 128 of the Criminal Code provides for a fine of two to five hundred minimal wages or a deprivation of liberty for two to eight years.

■ You have been viewing or distributing prohibited Pornographic content (Child Porno/Zoofilia and etc). Thus violating article 202 of the Criminal Code of Great Britain.

■ Illegal access to computer data has been initiated from your PC, or you have been… (incomplete wording)

■ Article 208 of the Criminal Code provides for a fine up to E 100,000 and/or a deprivation of liberty for four to nine years.

■ Illegal access has been initiated from your PC without our knowledge or consent, your PC may be infected by malware, thus you are violating the law on Neglectful Use of Personal Computer. (No such law)

Specialist Crime Directorate Police Central e-crime Unit virus

The second variant of Police Central e-crime Unit (PCeU) ransomware belongs to the Win32/Reveton malware family. The fake waning is different than the Weelsof version and much more sophisticated, claiming to be from Specialist Crime Directorate rather than Metropolitan Police.

How to remove Police Central e-crime Unit (Removal Instructions)

1. We strongly recommend writing down the toll free number below in case you run into any issues or problems while following the instructions. Our techs will kindly assist you with any problems.

1-888-986-8411
if you need help give us a call

2. Download and install the free or full version of Malwarebytes Anti-Malware.

download buy now

3. Open Malwarebytes Anti-Malware.

malwarebytes

4. Click the large Scan Now button or visit the “Scan” tab to scan your computer for Police Central e-crime Unit malware and malicious files.

malwarebytes anti-malware

5. Once the scan is complete, click the Quarantine All button to remove the files and restart your computer.

If you are still having issues with malware it is recommended to download and install a second opinion scanner, such as HitmanPro by Surfright to eradicate existing malicious files.

User accounts

Ransomware usually infects 1 user account on Windows systems at a time. Here are some tips to remove ransomware by using different user accounts.

  1. Log into an account not affected by malware (with administrative rights) and perform a scan with reputable software to detect and remove malware.
  2. You can also delete the infected account.
  3. Other options include creating a new user account to remove malware if only 1 Window’s user account is present on the computer system.

Internet/network issues

Safe Mode With Networking can be used to access the Internet for updates, drivers, removal software, or other files if internet and network connectivity is compromised.

  • Anonymous

    My android tablet has this virus and i can’t access anything ….it just keeps showing the police screen…any ideas plz????

    • Anonymous

      im having the same problem it popped up an hour ago i

  • Anonymous

    I can’t download the anti malware software onto my tablet, any ideas?

  • Colin

    How can i clear of my android tablet this virus

  • Andrew

    I always turn off my computer when this obviously bogus message comes up, then reboot, no problem. But why can’t the perpetrators be tracked down and stopped?

  • Anonymous

    just uninstalled the browser and it worked

  • Anonymous

    Starting in Safemode, and then doing a system restore did the trick! Cheers mate 🙂

  • baiba

    how to remove metropolitan police virus from mac, please!!!!>>>?????

  • Anthony

    Thanks! This advice proved useful in getting rid of this problem. The virus had disabled safe mode but safe mode with command prompt worked.

  • Anonymous

    To reiterate everyone else – thank you so much, you’re a true gem.

  • Anonymous

    Thanks for the advice dude. It worked and saved me a lot of money.

  • Anonymous

    You are an amazing person, literally saves my life

    • Anonymous

      Saved*

  • Jim

    Don’t usually comment on things like this but thank you for your expert advice!

    Tip for anyone also having this issue: Try logging onto a different user (if you can) I logged onto another downloaded the free malware and that killed the virus from their account. I had 160 virus files in total!!

    Using the free malware software was very quick and easy so I would recommend that as a good first option!

    Thank you Sean! Hero!

  • Tony

    Thank you very much you save not just my computer but my kids homework.

  • Anonymous

    thank you sooo much

  • Louis

    Thanks I was scared shirtless when this thing came up cheers

  • Ben

    Thank you soo much you saved my f****** a**, shat myself when the thing came up.

  • Anonymous

    wow i was jus abouts to commit so many vegences n im not a bad guy she lookt older than 20

  • Anonymous

    So far so good, a real thank you to you…. Helped a huge amount

  • Greg

    Seriously dude I fucking love you so much you properly saved my skin on this one 😀

  • john

    This one had me stumped for a good while. And a heads up to anyone else trying to download don’t mess with the zohan don’t do it

  • anon

    thanks for that, I think my computer is ok… and I have learned a lesson, and that’s to wake the wife up, if you know what I mean.

  • Andrew

    Your advice was priceless. Was expecting to at least have to take it to a local computer repairer but after following your simple instructions the virus was removed first time. It’s good to see that some websites can be trusted to give you helpful advice. Thank you.

  • Ellis

    I just want to thank you so much Sean! I was scared I was going to have police round knocking for me

  • Alan

    Police Central e-crime Unit ransomware virus

    If It Helps You, These Are The Names Of The Virus.

    139d2e78.dll & 139d2e78.exe

    They Were Found In ‘C’ Drive / My Documents In A Folder With Photo’s

    Naming Themselves As FM Radio As Where The Photos.
    When Clicked On Their Properties They Were Named As,

    Adobe Collaboration Synchroniser 10.0

    As It Uses Adobe Flash Player To Pop Up The Screen On Your Computer.

  • John

    Thanks Sean, very much indeed – that did the trick. Nasty little fella that one.

  • Anonymous

    Thank you so very much. I was close to paying £100 and scared of police knocking on my door.

  • Luke

    Thank you is too little to say

  • Anonymous

    hi

  • Anonymous

    Thankssss!!!!!!

  • Anonymous

    i literally cannot thank you enough

  • ALAN

    i think i love you Sean Doyle

  • kyle

    thankyou so much

  • shankar

    thanks a lotttttt………………

  • Anonymous

    Thanks a million to Sean Doyle. Your knowledge and help is a great influence. Once again, thank you very very much.

  • Anonymous

    Got caught out with this one !!!!
    Started in safe with networking
    Then used system restore
    Seems to be ok now !!!
    Cost me £100
    Must search the net next time !!!!
    Thanks for the help

  • Anonymous

    CAn I just use Mcafee anti virus in safe mode

  • Anonymous

    Many Many thanks. At last nearly paid the £100 !!!

  • Anonymous

    Big Thanks Sean, I was so scared when the block poped up. I was in fact watching porn but not child porn, and thought that this accusation might have been accessed through other pop up windows. I did indeed buy UKash voucher of £100 entered it and the block went off after 25-30 minutes bringing my laptop back to normal, but never had I thought that it would be a virus as it looked so convincing and demanding

  • Anonymous

    Thank you so much, great help

  • Anonymous

    Awesome.fantastic thank you very much

  • cookie

    this virus infected my laptop yesterday on my account,i simply then logged into my girlfriends account which wasnt blocked with the virus and deketed my account and set up a new one,my laptop is working fine but is this virus still on it???

    • Anonymous

      Your laptop should be virus free. I saw they wrote that as a solution for another virus like this one but I cant find it

  • Anonymous

    Thanks great easy to follow steps, much appeciated.

  • Anonymous

    thanks alot

  • Anonymous

    thank you so much, fixed my computer!!!

  • Anonymous

    thanks a million for the fantastic step by step help

  • Anonymous

    Thanks!!! that was great! i called a tech center and they wanted me to pay £200 to solve the problem. Thought that was excessive so googled the virus an found this page. Everything is sorted now for free!!!

  • Anonymous

    you r a life safer, thank you

  • Annonymous

    thanks a lot, u just saved my £100, i almost paid! i actually just used the “safe mode” and after running the scan, evrythng was cleaned. cheers!!!! continue the good work!

  • Anonymous

    brilliant; followed onscreen instructions with my other computer and fixed in minutes.

  • Anonymous

    Thank you, had to system restore to rid it! Excellent instructions!!

  • Anonymous

    Thank you so so much!!!!!!!!!!! Life saver!!!!

  • batal

    thank u

  • Anonymous

    Thank youuuu.. It is a scary experience…

  • Anonymous

    I was nearly in tears when this came on the family laptop! Thankyou sooo much!!

  • Anonymous

    I got one today I could’nt believe it cheeky sods thanks for the advice

  • Anonymous

    thanks very much

  • Anonymous

    Very very grateful! Legend

  • Anonymous

    Hi,
    I was unfortunate to get this virus and had my system blocked.
    I tried to get to the Task manager but could’t do it so I tried to swich the user and logged on to my guest’s account.
    From there it was easy to start Norton Security which found and cleaned 46 threats then I restored the computer settings to a previous date using the system restore.

  • Anonymous

    Thank you so much fella. You are a life saver 🙂 x

  • Anonymous

    legend

  • Anonymous

    Thank you thank you for this information!

  • Anonymous

    Sean Doyle you are my hero, thanks

  • Daniel

    Thanks, so so helpful!

  • Pingback: Ransomware and compromised hotmail duh-ness | No Dots()

  • Anonymous

    U saved my life buddy I was worried couldnt sleep all night. cheers

  • Pingback: Police Central e-crime Unit - Computer Forums()

  • Anonymous

    Thanks so much

  • Anonymous

    thank you thank you thank you

  • Anonymous

    cant believe I actually got this ransome virus, So grateful to person who put this online, well done. saved me a fortune

  • Anonymous

    Thank you so much. very clear instructions that anyone could follow easily. God bless

  • Anonymous

    Horrible experience but with iPad on the side giving me your instructions got through it. Cannot thank you enough. These virus guys should be dealt with.

  • Anonymous

    Many thanks for your help. Virus successfully removed .

  • Anonymous

    Appreciated, thank you

  • Anonymous

    thnks a lot buddy

  • Anon

    Thank you 🙂 you just saved me from stupidly paying £100 for nothing! Thank you so much 🙂

  • Anonymous

    thanks!!

  • Anonymous

    Thank you, Sean. Very grateful to you !

  • Anonymous

    Thank you so much

  • Anonymous

    Thanks Sean, I was unable to access windows except using the command prompt technique. I was unable to restore my computer though as apparently system protection was not turned on?? I did manage to download malware bytes on a different computer and managed to install and run it through the safe mode cmd promt screen. This picked them up and cleared the problem. Many thanks!

  • Anonymous

    That was great. but I had this virus last night (30/01/2013) on my wife’s laptop and neither avast (free version) nor superantispyware professional version could detect the virus! probably its a new version. but the good thing is that restoring the system is still resolve the problem.

  • Anonymous

    Thank you mate, your a legend. Unfortunately I was so scared that I bought a UKASH voucher for £100 and entered it as said on the screen but still could not acess the computer. So I lost £100 but than I managed to get online using the different user account on the same computer and restored it to previous date and it is working fine. Hope there will be no more problems. once again thank you mate and keep up the good work.

  • Enrique

    Thank you mate. At the beginning I was scared but then thanks to your instruction I get rid of the virus!!

  • Anonymous

    Thank you. Even I managed to follow the instructions and get rid of the annoying virus.

  • Andrew

    Sean, You seriously ROCK, thanks to your very detailed post, I was able to restore my pc in less than 45 minutes.
    Many thanks @ RESPECT!!

  • Anonymous

    Thanks Sean your a top a bloke!

  • Eddsworldfan

    Oh thank you, YOU ARE A GOD!

  • Anonymous

    wow only just seen this just did a whole os reinstall ……..

  • Anonymous

    thank you for being so kind as to share this with us

  • Anonymous

    Thank you for your help. Was really scared when first saw it appear – then guessed it was a horrible virus so googled it and found this. Thanks a bunch man. I did a system restore and all seems ok now.

  • Anonymous

    Thankyou very much, thank god there is someone trying to resolve these problems instead of creating them for no apparent reason. Much appreciated.

  • Peter O’Kelly

    Thanks Sean, I successfully removed that virus – Peter

  • Anonymous

    thank you so much worked great

  • Anonymous

    Thanks very much for the help. It can be quite panicking when you’re told you’ve committed a crime, especially when you know you didn’t do so, so it’s great to know there are sites like this to help clear it up. Keep up the great work.

  • ethan brynt

    God bless Sean Doyle . Beautiful. Followed instructions and got rid of the virus in less than 5 minutes. Thanks Sean for sharing your knowledge and expertise.

  • Lucy

    Thank you so much for your help. You’re amazing.

  • Couillon

    Thank you. I have been able to get my system back after using the safe mode with command prompt. The virus had blocked anything else.
    I have windows 7 and didn’t get the rstrui.exe window but a help menu from where I could access the restore to an anterior date.
    Again thank you very much

  • Anonymous

    Great help. Thank you. I have Vista Ultimate and virus was removed. I run (as per your instructions) C:\windows\system32\rstrui.exe and press Enter and then followed all steps to restore my computer system to an earlier time and date, before infection. Spiros from Athens Greece.

  • Anonymous

    fantastic worked a treat

  • Anonymous

    Well, I’ve just fallen victim to this fake email so will be trying these steps in the morning to get my lappy back on track, cheers

  • Ray

    Thank you Sean, your help is much appreciated.

  • Anonymous

    Thanks u re legend thanks

  • Sean

    Thank you so much for this!!!!! Fantastic advice – worked a treat. My PC was also auto-logging off when going into safe mode. Safe mode with command prompt was the only way to salvage the PC using the software via the command prompt.
    really can’t thank you enough

  • holly

    Hi thanks for your advice, helped me a great deal.

  • Anonymous

    f****** legend you are sean

  • anon

    thank you so much when I saw the screen I ,was like I’m dead my heart stopped,
    I do not have words god guided me here to this page. The system restore in safe mode worked. God bless you.

  • Gav

    If you find that you have paid cash to paypoint or paysafe and the read its a scam then phone up to block the payment and get a refund back to an account before the virus organizers take the money from paysafe paypoint. it worked for me i got my money back from paysafe

  • Anonymous

    Thanks for your help

  • Anonymous

    Ah man you’re a life saver!!! i thought it had done the whole network and I live in a shared house!!

  • Anonymous

    Thanks mate, i assumed it was a virus but you calmed me down quickly haha! system restore worked fine.

  • Thank you so much, i had read online that i should purchase mcafee and install in safe mode to get rid of the epcu virus. i tried for 2 days only to be told by the second technician that it wont work as virus will block install (why the first technician didn’t tell me this is beyond me). I was really angry as they had already taken my money and wanted another $80 to remove the virus!!!!!. I read your blog and downloaded the free malware in safe mode and it removed the virus. After 2 days i am so happy – thanks you soooooooooooooooooooo much :o) I am back on my computer and running the scan and theres nothing woohoo! :o) you’re a genuis ;o)

  • John

    Thanks for your help on this. I was reading your advice off my phone and your clear directions definately helped to reduce panic and solve the problem quickly. Thanks. Hope you get paid a ton.

  • james

    could of died when i saw it. thank you so so much

  • Anonymous

    I cannot thank you enough

  • Anonymous

    Thanks I was so scared that I started crying me and my dad found your site and now we have done it you are a lifesaver

  • Anonymous

    Thank you sir! Don’t know what people would do without you. That was YouTube as well quite worrying.

  • Anonymous

    Excellent advice – I couldn’t access te Internet at all so used safe mode with command prompt to get to system restore which did the trick. I had Malware bytes installed on my computer but had not updated it (it needs manual updating). Mille Grazie

  • Anonymous

    How rediculous is this. I was literally on my way out to buy a voucher for £100 when I thought I would just check it out. Thank god I did. Thanks for the help

  • Kay

    Thank you so very much!!! I swear I never panicked so much! I was thinking shit I dont have 100 quid! Called my internet provider -weird point explaining to them that the people says I might be guilty of all sorts, the bit of child abuse was AWKWARD (especially claiming my innocence! well they couldnt hell. Thank GOD for google and good samaritan like you.

  • Ryan

    Thank-You Sean! You’re a lifesaver! I was only watching YouTube when this came up and I thought ‘What’s illegal about YouTube?!’. They asked for £100!! Holding innocent people to ransom, the bastards! Without this blog I woukdn’t have had a clue! Thank-you so much!!

  • Anonymous

    Thank you so much!You are an absolute altruist legend!

  • peter

    thank god for people like you. Just restored my daughters laptop to get rid of this shite.she panicked and covered the webcam up with tape and then just turned off the laptop.i found your site before we turned it back on. top man!! thanks !!

  • Charl

    How do you manually remove the virus once it’s detected?

  • Melanie

    This just literally popped up on my screen after downloading a song. I was panicking!!! I have followed the steps and I’m currently waiting to see if my computer is fine and if my files are still saved, (let’s hope so)!!

  • Chris Jones

    Thank you. Thjis has helped me so much after getting a huge scare when I saw this. Thanks so much Sean. Good to see someone is looking out for people.

  • Anonymous

    Luckily I had heard of this happening this week so had a feeling it was a virus… Just annoying that it completely blocks your whole laptop you can’t even ctrl alt dlt… Safe mode and system restore is in process as we speak… Will be downloading malware cleaner once I’m on xx thankyou xx

  • Anonymous

    harmlessly browsing the web and this comes up. Cant acc believe theyre viruses out there like this. Despite my innocence i was scared to death! thank god this page exists. thankss!

  • Anonymous

    Thank you 🙂 nice job

  • Anonymous

    Thank you so much. Just saved my laptop, my files, my life. You have my utmost respect.

  • Anonymous

    was like wtf when this popped..

  • ross

    I would like to thank you for you help you have saved me and my university coursework

  • Anonymous

    Absolute hero. Cheers squire!

  • sophia

    This litterally just popped up on my computer! I’m quite scared as I only went on facebook to check notification and it was telling me my comp was blocked, and now it won’t let me use my computer at all :/

  • Anonymous

    cheers m8

  • Anonymous

    Thank you so much! You’re a blessing! I had no idea what to do, and this worked! Thankyouthankyou!

  • Anonymous

    THANKYOU!!!!!!!!!!

  • Anonymous

    Thankyou so much. Was literally shitting myself, Very relieved, Cheers 🙂

  • Anonymous

    I have just shat my pants, thinking i have really got to start using iTunes insted phewwwwwwww, system recovery worked for me your a top lad !!

  • Anonymous

    Thank you very much. I nearly piss myself. Im too young to go to the prison for doing nothing wrong….

  • G.Marsh

    Thank you sooooo much

  • Anonymous

    Cheers lad system restore helped there! Thought it was going to pack in just when uni has started up as well. Appreciated.

  • Anonymous

    I was planning to run away to France, I couldn’t eat my dinner last night. I was going to call the police and say my laptop had been stolen. Thanks to you, I’m now more vigilante then most people think.

  • Rob

    I was going to take my PC to the police station and say f*****g check it! Im not guilty of anything other than music downloads! It makes VERY serious allegations! against you! B******’s Im fuming!

  • Rob

    Just got hit by it after downloading something I S**T myself and nearly paid it!!!! Utter B******’s! Thanks buddy much appreciated! just knowing it was a virus in the first place was a big help! Cant be doing with s**t like that.

  • Anonymous

    Thank you soooooo much we just got hit by it and we were really scared managed to do a system restore and download malware etc thank you so much

  • Anonymous

    what a bunch of cunts ay!! i shit myself lol thanks to a restore its sorted…nice one son:)

  • Anonymous

    I got this virus can you tell me if the video recording is actually recording you? as this worries me!

  • Anonymous

    Thank you Thank you Thank you,
    I got hit with a e crime ransonware virus
    Without your help i would have gone and brought a new laptop
    Will have to be carefull where my 16 year old son goes on here in future
    But my thanks go to you

    • Anonymous

      Conciderd suicide i’v been unwell for day worrying

      • Glad you got rid of it. Don’t do that!

        • Anonymous

          Computer on startup repaire to go back to an earlier time its taking a while is that normal. Got such a fright as it was filming me

          • Anonymous

            Go onto computer by same mode with networking now running full scan with malware totes anti mail ware will this remove the virus?

            • Anonymous

              Safemode start and then start menu to system restor worked a treat; thank you for putting this guide on the web.

              • Anonymous

                thanks for the safe mode advice so i could download new antivirus.knew it was a virus as why would police ask you for money to unlock computer surely if monitoring you they would contact you direct.plus one the reasons on itm entioned computer could have virus passing onto other users.but altho knew virus i admit my stomach sank at first as i was downloading a music track at the time.

                • imd

                  sean…3 words for you mate…youre a legend, keep it up.

                  • Cheers!

                    • Sweety

                      thanks u so much my husband have the same thing he almost carry hes pc to the technician for why such reason hes pc was locked i thank god may way on you sean this blog solve our pain..makes us worry a lot why he will have this virus watching movie online together with me ….

                    • Joshua

                      I obviously wasn’t gonna pay but that s**t looks believable.
                      Can’t believe someone put that much effort into a virus