Cybercrime Investigation Department Virus - How To Remove?

Type: Ransomware

Cybercrime Investigation Department virus is a scam designed by computer hackers who want to steal money from random computer users. It is a tricky ransomware that can target any computer system. Once inside, it locks computer completely and does not allow to do anything there. Basically, all you see is one message that looks like it’s coming from Canadian Cybercrime Investigation Department. The messages states that you have violated law by using or distributing some copyrighted content. According to the law you can be provided a fine of even deprivation of liberty for two to eight years. Here’s how the message looks like:

Police Cybercrime Investigation Department

Attention! Your PC is blocked due to at least one of the reasons specified below.

You have been violating Copyright and Related Rights Law (Video, Music, Software) and illegally using or distributing copyrighted content, thus infringing Article 128 of the Criminal Code of Canada.

Article 128 of the Criminal Code provides for a fine of two to five hundred minimal wages or a deprivation of liberty for two to eight years.

You have been viewing or distributing prohibited Pornographic content (Child Porn/Zoofilia and etc.) Thus violating article 202 of the Criminal Code provides for a deprivation of liberty for four to twelve years.

Despite the fact that the message looks like a legitimate one, you must know that it has nothing in common with real Cybercrime Investigation Department. This is a clear scam that only tries to get access to your credit card and rip you off.

On the right part of the message you will see a Ukash payment system window where you will be able to pay a fine that is supposedly imposed for you. Stay away from doing so. First of all, you should know that no governmental institutions would be imposing you fines this way over Internet and they would never ask you pay any fine using your prepaid credit card. CCybercrime Investigation Department virus wants only to swindle your money away.

One of the most annoying things about this virus that once downloaded you will not be able to access any of your files and not even Task Manager which makes it very difficult to remove this virus. However, you can try to remove Cybercrime Investigation Department virus using these removal instructions:

  1. Reboot your computer and press F8 by the time it’s booting
  2. Choose Safe Mode with Networking
  3. Launch MSConfig
  4. Disable startup items rundll32 launching something from Application Data
  5. Reboot once again. Cybercrime Investigation Department virus should not load anymore.
  6. Download

If this doesn’t work, you can ask for remote assitance. Simply call +1-888-334-2444 or use some alternate OS Scanners.

Automatic Cybercrime Investigation Department Virus removal tools

Note: Reimage trial provides detection of parasites and assists in their removal for free. You can remove detected files, processes and registry entries yourself or purchase a full version.  We might be affiliated with some of these programs. Full information is available in disclosure

Manual removal


Important Note: Although it is possible to manually remove Cybercrime Investigation Department Virus, such activity can permanently damage your system if any mistakes are made in the process, as advanced spyware parasites are able to automatically repair themselves if not completely removed. Thus, manual spyware removal is recommended for experienced users only, such as IT specialists or highly qualified system administrators. For other users, we recommend using Reimage or other tools found on


Cybercrime Investigation Department Virus screenshots


About the author

 - Main Editor

I have started in 2007 after wanting to be more or less independent from single security program maker. Since then, we kept working on this site to make internet better and safer place to use.

August 17, 2012 12:20, June 3, 2013 14:02

12 thoughts on “Cybercrime Investigation Department Virus

  1. Thank you so much for your kind information, I was about to lose money to those scums,you guys saved me…god bless you

  2. Can I launch a complaint about this? This is a scam and canadian police should do something about this. Even one of my laptops is infected with this virus so bad that I can’t even launch MSCONFIG. Can someone please redirect me on this?

    I want to see these people behind the bars.

  3. @Bharat Ahuja
    There is no point to use MSCONFIG it Will notwork to disable the virus but the virus is in Russian characters and you can disable it but it will return on the next boot up. Your best option is to format because the only way to get around the virus is to disable your Internet browser so take a pick
    Option 1: set backup and restore before the event happened
    Option 2: save your files to a backup drive or flash drive
    Option 3: format computer and option 2
    Option 4: or run your computer with no Internet

    Best thing to do is have your computer set up on 2 drives or a partition if you have for example windows on one drive or a partition the virus will be located on the OS and your file will be safe on another partition or drive and you can format and reinstall OS without loosing any data that’s what I have done and it works great for all viruses and other problems that can occur and I haven’t had any problems in 5 years and i have no virus protection or spyware removal tools either but my friend just got this virus and I did this setup for him and no problems since

  4. Blitz33123:
    For Reveton trojans Disabling with MSCOnfig is enough. They will return ONLY if you let your PC get reinfected.
    There are versions that are more complex to remove, thats true. The fact is that “Cybercrime Investigation Departament” is a set of parasites where some of them work completely different.


    I knew something was very suspicious because it said i had opened porn or was distributing it and showed a few pics that i had never even seen before! No one else uses my computer. I’m definately not falling for this. Am going to take my computer to Future Shop and let a technician remove it and install stronger antivirus program.

  6. For complete reinstall one would need a CD or USB (or using separate partition that is on ones laptop). Another option might be System restore might reset virus enough to be able to boot normally, but it will not clean all the trojans in all cases. I recommend scanning with anti-malware programs after system restore anyways.

Leave a Reply

Your email address will not be published. Required fields are marked *