Jul 25, 2013

New Zealand E-Crime Lab Virus Removal Guide

My computer was blocked by New Zealand E-Crime Lab virus, please help, I am really freaking out! Yesterday I clicked a link from an unknown email by accident, then a white page appeared saying it was from New Zealand E-Crime Lab and I had to pay NZD $100 for viewing child pornography. Also that criminal charges would be taken against me, something like that. I searched on the Internet and found that it was a scam even if it showed my IP address, my location and my username.  I swear that I haven’t done anything mentioned in this New Zealand virus warning message. Now the question is how to unlock PC from New Zealand E-Crime Lab virus?

Computer or Mac Locked by New Zealand E-Crime Lab Virus Scam – How to Remove?

New Zealand E-Crime Lab virus (also known as the Ministry of Public Safety New Zealand ransomware or Centre for Critical Infrastructure Protection (CCIP) Virus) is believed to be a newly released version of computer ransomware that will lock up your computer and accuse you of violating the laws of New Zealand. By performing such block page on your computer, this ransomware is trying to get as many PC users to pay the requested fine, which is NZD $100, as possible via Ukash vouchers. You may find this New Zealand E-Crime Lab message quite threatening and scary. But no matter how legit it looks, this deceitful message is associated with cyber criminals instead of the New Zealand government or police. Computer users from all over the world can be put into similar situations like this in these days. For instance, the New Zealand Police virus – a former version of ransomware that attacks PC users mostly from New Zealand; and the AFP Ukash virus which targets computer users from Australia.

Even though this kind of ransomware has become a very popular phenomenon and latest versions can be created every once in a while to attack innocent PC users like this New Zealand E-Crime Lab virus, there hasn’t been a perfect software for removing these viruses. Instead, such computer ransomware can often escape from the detection or prevention provided by antivirus applications. Hence, computer users from New Zealand will be attacked by this New Zealand E-Crime Lab Virus even though they have got antivirus protections on their PCs. The reasons for that mainly include: 1) PC users get online and accidentally log onto malicious web sites or visit porn sites with purposes; 2) PC users download attachments from unknown spam emails or install unfamiliar free programs that bundle with this ransomware. This New Zealand E-Crime Lab virus doesn’t need permission from PC users to be installed. It can sneak into your computers via certain online resources and launch its unwelcome warning screen on the targeted systems to get PC owners into all kinds of troubles.

Similar to other members from the cyber scam group, New Zealand E-Crime Lab virus can set itself as a system startup program so that it can be automatically launched whenever the targeted PCs start up. When your computer is under the attack of this nasty ransomware, you will be completely blocked out of your own PC by the pop up message claiming to be from the New Zealand E-Crime Lab Centre For Critical Infrastructure Protection (CCIP). It even has “Interpol” signs on the blocking page pretending that it’s proven by Interpol also. Other information including your personal details (IP, location, OS and User Name) will be listed on the top of the virus screen to make it look more legit. Then the legal reasons of you being blocked will go on for almost half the page of the locking screen. Mostly you are accused of viewing, storing or disseminating banned pornography (child pornography/zoophilia/rape etc) online which you may not have done any. But your computer is now locked up by the warning from New Zealand E-Crime Lab virus. In order to get your PC unlocked, according to this scam ransomware, you are requested to submit a fine of NZD $100 via Ukash vouchers within the next 48 hours and your computer will be automatically unlocked in the following 24 hours. If you cannot make the payment in time, you are told that your computer will be locked up again and a criminal case will be initiated against you with no option to pay fine this time. This is generally how these scam viruses look like when they lock up your computer accusing you for violating laws. No matter how legit the locking page appears, this New Zealand E-Crime Lab virus shouldn’t be trusted. It’s a scam virus that should be removed ASAP.

Manual removal is a better solution for remove New Zealand E-Crime Lab  virus scam. Contact YooCare Online Experts for help if you don’t have sufficient experience in dealing with such scam virus.

A Screen Shot of This Fake New Zealand E-Crime Lab Warning Message

New Zealand Police New Zealand E-crime Lab Centre For Critical Infrastructure Protection (CCIP) blocking message shows up on your computer and completely blocks you from accessing the system:


More to read from the New Zealand E-Crime Lab Virus:

The penalty set must be paid in course of 48 hours as of the breach. On expiration of the term, 48 hours that follow will be used for automatic collection of data on yourself and your misconduct, and criminal case will be opened against you.

Amount of fine is NZD $100. You can pay a fine Ukash vouchers.

As soon as the money arrives to the Treasury account, your computer will be unblocked in course of 24 hours.

Then in 7 day term you should remedy the breaches associated with your computer. Otherwise your computer will be blocked up again and criminal case will be opened against yourself (with no option to pay fine).

Remove Fake New Zealand E-Crime Lab Block Manually

When PC is completely blocked by this New Zealand E-Crime Lab virus, you won’t be able to access any program on the computer to run security checks or change settings. Windows Task Manger can also be disabled by the virus screen. In order to successfully unlock computer from this ransomware, manual removal is suggested here as a guarantee way. By dealing with program files and registry entries manually, a permanent unlock is easier to achieve. Expertise will be required during the manual removal process. Any mistaken step can lead to unpredictable consequences causing blue screen or PC crash down in the end:

Step A: Safe mode is a mode for Windows OS where only necessary files and programs are loaded to run the system. There are 3 safe modes including Safe Mode, Safe Mode with Networking and Safe Mode with Command Prompt. The first step to unlock computer from this New Zealand E-Crime Lab virus is to put the infected computer into Safe Mode with Networking. Here’s the guide: Restart the infected computer then keep hitting F8 key on the keyboard when it’s turning up to get safe mode screen as below. Use the arrow keys to highlight “Safe Mode with Networking” and press E/Enter. System will need a couple minutes to load files.

Step B: Open Control Panel from Start button. Search for Folder Options. Under View tab, select Show hidden files and folders and non-select Hide protected operating system files (Recommended) then click OK.

Step C: Press Ctrl+Alt+Del keys together to open Windows Task Manager then go to Processes tab on the top to end related processes to this [New Zealand E-Crime Lab virus].

Step D: Press Windows+R keys to open the Run box and type in regedit to open Registry Editor.

Step E: Find out and delete all these associating files and registry entries as below:

Go to %userprofile%\appdata\local\temp

The virus can have names other than “random.exe” but it should look like it doesn’t belong and should have a create date/time the same as a .class file if you sort by file mod/create time you’ll find it.

%AllUsersProfile%\Application Data\.dll
%AllUsersProfile%\Application Data\.exe(rnd)
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “[rnd].exe”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “net
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “[rnd].exe”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\”Shell” = “[rnd].exe”

Video Guide to Remove New Zealand Scam Virus


New Zealand E-Crime Lab virus is believed to be a newly released ransomware the New Zealand version which attacks computer users from New Zealand mostly. This ransomware has nothing to do with the government actually. It’s just taking advantages of the authorities and trying to scare as many PC users as possible to pay the requested fine. This amount of fine – NZD $100 requesting by this New Zealand E-Crime Lab ransomware will help cyber criminals benefit instead of getting your PC unlocked. Hence, it’s not a wise choice to pay in order to unlock your PC. When computer is being blocked by this fake New Zealand ransomware, you won’t be able to access the computer because the virus screen will pop up right away when PC’s turned on. You will be accused of violating laws because of some activities you have done online which you may not aware of. Specific regulations will be described one after another on the blocking page trying to convince you that this New Zealand E-Crime Lab virus is legal. Then a fine will be involved in order to get your PC unlocked and get yourself out of troubles in the future. Victims of this ransomware often find it very intimidating. Lots of payments have been made and yet PCs remain on the same block. There are a few circumstances that computers will be unlocked after the fine is submitted. However, this New Zealand E-Crime Lab ransomware is still in the system waiting for its second chance to pop up and scam you again. Therefore, to achieve a complete and permanent unlock, a ransomware removal is required.

Note: Have tried everything but failed to unlock PC? Please contact YooCare Online Experts now for further removal assistance if your computer is still being locked by this unwanted New Zealand E-Crime Lab virus pop up.

Published by & last updated on January 4, 2014 5:41 am

Leave a Reply

Problems with your PC, Mac or mobile device?

Live Chat Now

Thanks for using YooCare Services!

Here're some of the support team members who are passionate about their works and support our customers 24/7.

As Seen On