Cybercrime Investigation Department Virus Description

[+] Click Image to Enlarge

• 

The Police Cybercrime Investigation Department is a legitimate branch of the Canadian police force. However, ESG malware analysts have observed a ransomware infection that impersonates the Police Cybercrime Investigation Department in order to threaten computer users. Like most ransomware Winlockers, the Police Cybercrime Investigation Department ransomware infection takes over the infected computer and blocks access to a computer user’s files and applications. Then, this malware infection displays a message claiming to come from the Police Cybercrime Investigation Department threatening to imprison the victim unless a fine is paid. This malware threat’s message will claim that the victim’s computer was involved in various illegal activities, which while obviously silly to most computer users, can endanger inexperienced computer users. Fortunately, you can remove the Police Cybercrime Investigation Department ransomware with a few simple steps and the help of a strong anti-malware application.

Taking a Look at the Police Cybercrime Investigation Department Message

The Police Cybercrime Investigation Department message will claim that the infected computer was used to traffic child pornography and to distribute pirated software. This message is highly threatening, claiming that the victim is liable for a hefty fine and may be subjected to up to eight years of jail. However, these are all lies. There are countless variations of the Police Cybercrime Investigation Department ransomware and this scam is, in fact, the third most common online scam after rogue security programs and browser hijackers leading to fake search engines. Most of the time, malware like the Police Cybercrime Investigation Department ransomware is highly localized, limited to a single country, using that country’s language and police force insignias. The Police Cybercrime Investigation Department ransomware attacks Canadian users and will demand the payment of a one hundred dollar fine via a money transfer service. Ukash is the money transfer service most commonly used by the criminals behind this threat, leading to variants of the Police Cybercrime Investigation Department ransomware infection to receive the name of ‘Ukash Virus‘ or ‘Ukash ransomware’.

Actually removing the Police Cybercrime Investigation Department malware infection is not difficult and can be handled by most reliable anti-malware programs. However, the difficulty is in bypassing the Police Cybercrime Investigation Department message and gaining access to your security software. To do this, ESG security researchers advise starting up your machine in Safe Mode and using the Command Prompt to load the Windows Explorer and your anti-malware software of choice.

Type: Viruses

How Can You Detect Cybercrime Investigation Department Virus?

Cybercrime Investigation Department Virus Technical Report

As new Cybercrime Investigation Department Virus details are reported by our customers and findings from our Threat Research Center, we will update this section.

Fake message for Cybercrime Investigation Department Virus:

The following fake error message(s) appears for Cybercrime Investigation Department Virus:

Police Cybercrime Investigation Department

Attention! Your PC is blocked due to at least one of the reasons specified below.

You have been violating Copyright and Related Rights Law (Video, Music, Software) and illegally using or distributing copyrighted content, thus infringing Article 128 of the Criminal Code of Canada.

Article 128 of the Criminal Code provides for a fine of two to five hundred minimal wages or a deprivation of liberty for two to eight years.

You have been viewing or distributing prohibited Pornographic content (Child Porn/Zoofilia and etc.) Thus violating article 202 of the Criminal Code provides for a deprivation of liberty for four to twelve years.

Cybercrime Investigation Department Virus Removal Details

Cybercrime Investigation Department Virus creates the following files in the system:

• %TEMP%/[random]
• %AppData%/[random]

Important Article Disclaimer