Danger level 9
Type: Malware
Common infection symptoms:
  • Annoying Pop-up's
  • Block exe files from running
  • Blocks internet connection
  • Changes background
  • Connects to the internet without permission
  • Installs itself without permissions
  • Shows commercial adverts
  • System crashes

Interpol Departament of Cybercrime

With a whole variety of Ukash ransomware infections, here comes another one called Interpol Departament of Cybercrime, and it functions based on the same principle as FBI Moneypak, Cybercrime Investigation Department, Police Virus and other similar computer threats. Due to the fact that Interpol Departament of Cybercrime aims for the user's money, it could be likened to a rogue antispyware appication, but it works slightly differently.

Interpol Departament of Cybercrime does not allow the user to access his desktop by displaying a screen-sized security message:

Your PC is blocked due to at least one of the reasons specified below.

You have been violating (Video, Music, Software), and illegally using or distributing copyrighted content,

Article 128 of the Criminal Code provides for a fine of 2 to 5 hundred minimal wages or a deprivation of liberty for 2 to 8 years.

Basically Interpol Departament of Cybercrime is telling the user that his desktop is blocked because he has been downloading music, videos and software illegally. And now the user faces possible imprisonment UNLESS he pays the fine determined in the ransomware's message. Even though a significant number of users falls for this scam, there is one very obvious clue, proving that Interpol Departament of Cybercrime is a fake notification. There is a spelling mistake left in the infection's title - Interpol Departament of Cybercrime (intead of "Department).

Unlike other versions of this ransomware that were highly localized, Interpol Departament of Cybercrime targets a wider audience - the euros and pounds in its notification show that this infection considers European users from various countries its target. However, no user should be robbed off by Interpol Departament of Cybercrime. To avoid that, the user has to free his desktop of this ransomware.

It is possible in Safe Mode with Networking. Restart the system and press F8 to select Safe Mode with Networking from the system boot menu. It is possible to access the Internet in this mode, and the user cannot remove Interpol Departament of Cybercrime manually, he simply needs to download a computer security tool. After the installation, the computer security program will terminate Interpol Departament of Cybercrime automatically, and the user will be able to use his computer just like before.

Download Spyware Removal Tool to Remove* Interpol Departament of Cybercrime
  • Quick & tested solution for Interpol Departament of Cybercrime removal.
  • 100% Free Scan for Windows
disclaimer

How to manually remove Interpol Departament of Cybercrime

Files associated with Interpol Departament of Cybercrime infection:

wlsidten.dll
audipbrd.exe
csrsss.exe
setex.exe
Piranha.exe
p1.exe
crack.exe
WinSyncMetastore.exe
2084473.dll
wlsidten.exe
idiokbbrv.exe
50E1.exe
87b2cb3916261d5c807bf44262755cb0.exe
wahneaqa.exe
Q3d38543.exe
WINDED6.exe
NTServiceManager.exe
dyjdl.exe
svchost.exe
3511172082012Build.exe
brenasa.exe
msavfit.exe
UpdatePriv.exe
jsdhlexdqkllnbcxgai.bfg
%SystemDrive%\????????????
yaiiwockc.dll
Task Scheduler.exe
00b5d693.exe
{097444e7-2d87-ba3c-2efe-9f54812d824a}.exe
zqmkrehUkpoKfsafsaZg.exe
uenovfiu.exe
hwj3ba6j.dss
ex3b.dll
b34btbztdb0vavaw.exe
ACEIEAddOn.dll
魔法桌面第三方主题破解补丁V1.1.exe
%LOCALAPPDATA%\Temp
ieudator.dll
pmstcdjwz.exe
pYunY8m4VL3qLc.exe
OmaSG21e.exe
xlqbteeb.exe
%APPDATA%\updates
msdtmsrd.exe
%AppData%
%CommonProgramFiles%
%UserProfile%
oygqyunapnp.exe
acuvzomo.exe
skype.dat
%TEMP%
ubvhynpxh.exe
systemcpl.exe
obvwo.exe
questscan.dll
%APPDATA%\system
Firewallservice.exe
ssntvs.exe
xmlfilter.exe
Other.res
securitywindrv.exe
Updating.exe
bvhylsviw.exe
administration.exe
DA0B.exe
%APPDATA%\Task Scheduler
Nbt.exe
SyncHostps.exe
%WINDIR%\system32
msnmsgrr.exe
comeo.exe
najeoxtt.exe
wgsdgsdgdsgsd.exe
xaZYOVJW.exe
ifgxpers.exe
videotwisterSA.exe
iner.exe
%ALLUSERSPROFILE%
sqlncli.exe
ctfmon.exe
taskhost.exe.exe
rool0_pk.exe
msn.exe
m2PythonLoader.exe
install_0_msi.exe
UpgradeHelper.exe
wpbt0.dll
msshell.exe
TimeDateMUICallback.exe
wjthvwjb.dss
96dddda4.dll
xctqakcqbeo.dll
DLL321.dll
mplayer2.exe
rvcbcyks.exe
puozlkmyj.dll
aPr0hY9.exe
C87C.exe
secproc_isv.exe
%ALLUSERSPROFILE%\Application Data
gcrwcoak.exe
VaultSysUi.exe
cf6640a77ed4926a4c6be661ab93def9d13408753dd07e8d02836996a2f247b6.exe
dqnbdq7.dss
bf8h8d02hf.exe
%LOCALAPPDATA%\lollipop
MusicCollector.exe
n.
%WINDIR%\Temp
00qbipeq.exe
JfCqQ5JC.exe
bzsbkotiu.exe
dtkmujvo.exe
scvhost.exe

Interpol Departament of Cybercrime DLL's to remove:

puozlkmyj.dll
ex3b.dll
ACEIEAddOn.dll
ieudator.dll
96dddda4.dll
yaiiwockc.dll
xctqakcqbeo.dll
wlsidten.dll
2084473.dll
questscan.dll
DLL321.dll
wpbt0.dll

Interpol Departament of Cybercrime processes to kill:

JfCqQ5JC.exe
Updating.exe
videotwisterSA.exe
cf6640a77ed4926a4c6be661ab93def9d13408753dd07e8d02836996a2f247b6.exe
audipbrd.exe
msn.exe
87b2cb3916261d5c807bf44262755cb0.exe
taskhost.exe.exe
xaZYOVJW.exe
bzsbkotiu.exe
Q3d38543.exe
Firewallservice.exe
secproc_isv.exe
install_0_msi.exe
ctfmon.exe
rool0_pk.exe
pYunY8m4VL3qLc.exe
msnmsgrr.exe
uenovfiu.exe
najeoxtt.exe
m2PythonLoader.exe
gcrwcoak.exe
Task Scheduler.exe
Piranha.exe
comeo.exe
obvwo.exe
魔法桌面第三方主题破解补丁V1.1.exe
aPr0hY9.exe
iner.exe
{097444e7-2d87-ba3c-2efe-9f54812d824a}.exe
UpgradeHelper.exe
svchost.exe
pmstcdjwz.exe
3511172082012Build.exe
SyncHostps.exe
b34btbztdb0vavaw.exe
administration.exe
msdtmsrd.exe
ssntvs.exe
ifgxpers.exe
csrsss.exe
acuvzomo.exe
mplayer2.exe
Nbt.exe
WINDED6.exe
MusicCollector.exe
securitywindrv.exe
msavfit.exe
bf8h8d02hf.exe
systemcpl.exe
sqlncli.exe
ubvhynpxh.exe
brenasa.exe
C87C.exe
TimeDateMUICallback.exe
dyjdl.exe
OmaSG21e.exe
crack.exe
p1.exe
xmlfilter.exe
DA0B.exe
00qbipeq.exe
NTServiceManager.exe
rvcbcyks.exe
50E1.exe
wgsdgsdgdsgsd.exe
wlsidten.exe
xlqbteeb.exe
oygqyunapnp.exe
wahneaqa.exe
VaultSysUi.exe
msshell.exe
zqmkrehUkpoKfsafsaZg.exe
idiokbbrv.exe
dtkmujvo.exe
00b5d693.exe
UpdatePriv.exe
bvhylsviw.exe
WinSyncMetastore.exe
scvhost.exe
setex.exe
Disclaimer

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.