‘New Zealand E-Crime Lab’ Ransomware

Posted: July 23, 2013

Threat Metric

The Threat Meter is a malware assessment that SpywareRemove.com's research team is able to give every identifiable malware threat. Our Threat Meter includes several criteria based off of specific malware threats to value their severity, reach and volume. The Threat Meter is able to give you a numerical breakdown of each threat's initial Threat Level, Detection Count, Volume Count, Trend Path and Percentage Impact. The overall ranking of each threat in the Threat Meter is a basic breakdown of how all threats are ranked within our own extensive malware database. The scoring for each specific malware threat can be easily compared to other emerging threats to draw a contrast in its particular severity. The Threat Meter is a useful tool in the endeavor of seeking a solution to remove a threat or pursue additional analytical research for all types of computer users.

The following fields listed on the Threat Meter containing a specific value, are explained in detail below:

Threat Level: The threat level scale goes from 1 to 10 where 10 is the highest level of severity and 1 is the lowest level of severity. Each specific level is relative to the threat's consistent assessed behaviors collected from SpyHunter's risk assessment model.

Detection Count: The collective number of confirmed and suspected cases of a particular malware threat. The detection count is calculated from infected PCs retrieved from diagnostic and scan log reports generated by SpyHunter.

Volume Count: Similar to the detection count, the Volume Count is specifically based on the number of confirmed and suspected threats infecting systems on a daily basis. High volume counts usually represent a popular threat but may or may not have infected a large number of systems. High detection count threats could lay dormant and have a low volume count. Criteria for Volume Count is relative to a daily detection count.

Trend Path: The Trend Path, utilizing an up arrow, down arrow or equal symbol, represents the level of recent movement of a particular threat. Up arrows represent an increase, down arrows represent a decline and the equal symbol represent no change to a threat's recent movement.

% Impact (Last 7 Days): This demonstrates a 7-day period change in the frequency of a malware threat infecting PCs. The percentage impact correlates directly to the current Trend Path to determine a rise or decline in the percentage.

Ranking:	5,393
Threat Level:	2/10
Infected PCs:	24,339

First Seen:	July 23, 2013
Last Seen:	October 13, 2023
OS(es) Affected:	Windows

The 'New Zealand E-crime Lab' Ransomware is a Police Ransomware Trojan targets at New Zealanders, with all of the standard fake police alerts, system lockdowns and insistence that you pay a ransom to get your computer working again. Although its pop-up warning does everything to convince you differently, the 'New Zealand E-crime Lab' Ransomware's attack isn't the result of an actual police action against your PC, and anti-malware programs can safely be employed to remove the 'New Zealand E-crime Lab' Ransomware freely and without any harm to your PC.

The 'New Zealand E-crime Lab' Ransomware: a Crime Lab with Test Results More than Slightly Askew

The 'New Zealand E-crime Lab' Ransomware is a fake Police Trojan that's built off of the same family as many similar PC threats that have targeted other nations in the last two years. For examples of the potential variability of nationalities involved in these attacks, SpywareRemove.com malware researchers could point to examples like the 'Grupo de Delitos Telemáticos' Ransomware, the 'Mandiant U.S.A Cyber Security' Ransomware, the 'Polizja Biuro Służby Kryminalnej' Ransomware of Poland, the Rikspolisstyrelsen Ransomware of Norway, the 'Ministry of Public Safety Canada Ransomware and the 'BundesKriminalamt 'Ihrem Persönlichen Computer Wurde Gesperrt' Virus of Germany – all of which are related to the New Zealand E-crime Lab Ransomware.

Their pop-up alerts are the distinguishing characters of fake Police Trojans from the 'New Zealand E-crime Lab' Ransomware's family, with languages and government references qualified to be relevant to the country of the victim. The 'New Zealand E-crime Lab' Ransomware's pop-up alert, for example, refers to the CCIP and displays the New Zealand coat-of-arms, but SpywareRemove.com malware experts stress that all of its criminal accusations and related legalese texts are copied from previous Police Ransomware Trojans.

With a pop-up that accuses your computer of being used for several common Internet crimes like infringing on copyright, the 'New Zealand E-crime Lab' Ransomware attempts to force its victims to pay a fake legal fee. However, paying the 'New Zealand E-crime Lab' Ransomware will not help your PC, and is explicitly discouraged, since the 'New Zealand E-crime Lab' Ransomware isn't authorized by the actual government of New Zealand. Accordingly, all of the 'New Zealand E-crime Lab' Ransomware's accusations should be considered baseless, and its recommendations for removing its pop-up should be ignored.

Fighting E-Crime on Your Own Terms Against a 'New Zealand E-crime Lab' Ransomware's Invasion

A standard infection related to the 'New Zealand E-crime Lab' Ransomware will include attacks for shutting down your ability to access and use some other programs. Security-related programs such as anti-malware scanners and Windows tools like Task Manager are most likely to be affected, but other applications also may be locked by the 'New Zealand E-crime Lab' Ransomware or related PC threats. To deal with this lockdown efficiently, SpywareRemove.com malware researchers suggest booting your PC through a safe USB drive, which will let you launch any appropriate software and disable the 'New Zealand E-crime Lab' Ransomware's startup exploit.

Deleting the 'New Zealand E-crime Lab' Ransomware, even when the 'New Zealand E-crime Lab' Ransomware is disabled, always should be left to a good anti-malware product, if any such software is accessible. The 'New Zealand E-crime Lab' Ransomware may be installed along with other Trojans and usually will include some system changes that can harm your PC if they're removed improperly. SpywareRemove.com malware experts also recommend updating any anti-malware programs prior to using them to counter the fact that the 'New Zealand E-crime Lab' Ransomware is a member of a family of fake Police Trojans that receive regular updates of their own.

Technical Details

Additional Information

The following URL's were detected:

joaglouwulin.com

The following messages's were detected:

#	Message
1	New Zealand E-Crime Lab New Zealand Police Centre for Infrastructure Protection (CCIP) Interpol Attention! Your computer has been blocked for safety reasons listed below. You are accused of viewing/storage and/or dissemination of banned pornography (child pornography/zoophilia/rape etc). You have violated World Declaration on non-proliferation of child pornography. You are accused of committing the crime envisaged by Article 161 of New Zealand criminal law. Article 161 of New Zealand criminal law provides for the punishment of deprivation of liberty for terms from 5 to 11 years. Also, you are suspected of violation of "Copyright and Related rights Law" (downloading of pirated music, video, warez) and of use use and/or dissemination of copyrighted content. Thus, you are suspected of violation of Article 148 of New Zealand Criminal Law. Article 148 of New Zealand criminal law provides for the punishment of deprivation of liberty for terms from 3 to 7 years or 150 to 550 basic amounts fine. It was from your computer, that unauthorized access had been stolen to information of State importance and to data closed for public Internet access. . <more fake legal threats> . The penalty set must be paid in course of 48 hours as of the breach. On expiration of the term, 48 hours that follow will be used for automatic collection of data on yourself and your misconduct, and criminal case will be opened against you. Amount of fine is NZD $100. You can pay a fine Ukash vouchers. As soon as the money arrives to the Treasury account, your computer will be unblocked in course of 24 hours. Then in 7 day term you should remedy the breaches associated with your computer. Otherwise your computer will be blocked up again and criminal case will be opened against yourself (with no option to pay fine).

Message

New Zealand E-Crime Lab
New Zealand Police
Centre for Infrastructure Protection (CCIP)
Interpol
Attention!
Your computer has been blocked for safety reasons listed below.
You are accused of viewing/storage and/or dissemination of banned pornography (child pornography/zoophilia/rape etc). You have violated World Declaration on non-proliferation of child pornography. You are accused of committing the crime envisaged by Article 161 of New Zealand criminal law.
Article 161 of New Zealand criminal law provides for the punishment of deprivation of liberty for terms from 5 to 11 years.
Also, you are suspected of violation of "Copyright and Related rights Law" (downloading of pirated music, video, warez) and of use use and/or dissemination of copyrighted content. Thus, you are suspected of violation of Article 148 of New Zealand Criminal Law.
Article 148 of New Zealand criminal law provides for the punishment of deprivation of liberty for terms from 3 to 7 years or 150 to 550 basic amounts fine.
It was from your computer, that unauthorized access had been stolen to information of State importance and to data closed for public Internet access.
.
<more fake legal threats>
.
The penalty set must be paid in course of 48 hours as of the breach. On expiration of the term, 48 hours that follow will be used for automatic collection of data on yourself and your misconduct, and criminal case will be opened against you.
Amount of fine is NZD $100. You can pay a fine Ukash vouchers.
As soon as the money arrives to the Treasury account, your computer will be unblocked in course of 24 hours.
Then in 7 day term you should remedy the breaches associated with your computer. Otherwise your computer will be blocked up again and criminal case will be opened against yourself (with no option to pay fine).