What is Ministry of Public Safety Canada Virus?
Ministry of Public Safety Canada virus is another destructive
variant of Ukash virus designed by cyber criminals, which blocks the compromised
computer and tries to scam money from innocent computer user. This is a scam
that accuses you of breaking the law that pretends to use the name of Canadian
Police. Once this virus installed, it changes your Windows registry and adds
its malicious files to run at start-up in order to lock your computer screen,
even you boot your PC to safe mode, the virus page still has the capacity of
blocking you to log in the system. What the virus want to scare the unsuspecting
users to pay for the nonexistent fine with the deceptive webpage showing the
police picture and bogus message that tells victims to pay $100 CAD through
Ukash or moneypakcards to unlock their computer. There is no police will
collect the fines by blocking users’ computers, except hackers! You just need
to remove the virus as soon as possible, after
that your
PC will run well again. If you have any problem or question during the whole
removal process, please contact Tee Support agents 24/7 online for more detailed
instructions.
Bogus
Message from The Virus Webpage：
Canadian
Association of Chiefs of Police
Ministry of Public Safety Canada
Interpol
Attention!
Your computer has been blocked for safety reasons listed below.
You are accused of viewing/storage and/or dissemination of banned pornography (child pornography/zoophilic/rape etc.). You have violated World Declaration on non-proliferation of child pornography. You are accused of committing the crime envisaged by Article 161 of Canada criminal law.
Article 161 of Canada criminal law provides for the punishment of deprivation of liberty for terms from 5 to 11 years.
Also, you are suspected of violation of “Copyright and Related rights Law” (downloading of pirated music, video, wares) and of use and/or dissemination of copyrighted content. Thus, you are suspected of violation of Article 148 of Canada Criminal Law.
Article 148 of Canada criminal law provides for the punishment of deprivation of liberty for terms from 3 to 7 years or 150 to 550 basic amounts fine.
It was from your computer, that unauthorized access had been stolen to information of State importance and to data closed for public Internet access.
The penalty set must be paid in course of 48 hours as of the breach. On expiration of the term, 48 hours that follow will be used for automatic collection of data on yourself and your misconduct, and criminal case will be opened against you.
Amount of fine is CAD $100. You can pay a fine Ukash vouchers.
As soon as the money arrives to the Treasury account, your computer will be unblocked in course of 24 hours.
Then in 7 day term you should remedy the breaches associated with your computer. Otherwise your computer will be blocked up again and criminal case will be opened against yourself (with no option to pay fine).
Ministry of Public Safety Canada
Interpol
Attention!
Your computer has been blocked for safety reasons listed below.
You are accused of viewing/storage and/or dissemination of banned pornography (child pornography/zoophilic/rape etc.). You have violated World Declaration on non-proliferation of child pornography. You are accused of committing the crime envisaged by Article 161 of Canada criminal law.
Article 161 of Canada criminal law provides for the punishment of deprivation of liberty for terms from 5 to 11 years.
Also, you are suspected of violation of “Copyright and Related rights Law” (downloading of pirated music, video, wares) and of use and/or dissemination of copyrighted content. Thus, you are suspected of violation of Article 148 of Canada Criminal Law.
Article 148 of Canada criminal law provides for the punishment of deprivation of liberty for terms from 3 to 7 years or 150 to 550 basic amounts fine.
It was from your computer, that unauthorized access had been stolen to information of State importance and to data closed for public Internet access.
The penalty set must be paid in course of 48 hours as of the breach. On expiration of the term, 48 hours that follow will be used for automatic collection of data on yourself and your misconduct, and criminal case will be opened against you.
Amount of fine is CAD $100. You can pay a fine Ukash vouchers.
As soon as the money arrives to the Treasury account, your computer will be unblocked in course of 24 hours.
Then in 7 day term you should remedy the breaches associated with your computer. Otherwise your computer will be blocked up again and criminal case will be opened against yourself (with no option to pay fine).
Manual
Remove for Ministry of Public Safety Canada Virus
Step1:
Get into Safe Mode with Networking
For Windows XP and Windows 7
Restart your computer. -> As your computer restarts but before Windows launches, tap "F8" key constantly. -> Use the arrow keys to highlight the "Safe Mode with Networking" option, -> and then press ENTER
For Windows8
http://blog.teesupport.com/how-to-boot-into-safe-mode-on-windows-8-blocked-by-ukash-or-moneypak-ransomware/
For Windows XP and Windows 7
Restart your computer. -> As your computer restarts but before Windows launches, tap "F8" key constantly. -> Use the arrow keys to highlight the "Safe Mode with Networking" option, -> and then press ENTER
For Windows8
http://blog.teesupport.com/how-to-boot-into-safe-mode-on-windows-8-blocked-by-ukash-or-moneypak-ransomware/
Step2: Disable all start-up items
1. Open the Start menu and type msconfig into the Search box.
2. Click the msconfig search result. The utility will open in a new window.
3. Click the Startup tab. You'll see a list of programs that start when your computer starts.
4. To stop a program from automatically launching when you boot the PC, uncheck the box next to its entry.
5. When you are finished deselecting startup items, click OK. If you made any changes, you'll be prompted to restart the computer. You don't have to restart it immediately, but the changes won't take effect until you do.
When you restart the computer, MSConfig will alert you to the changes.
Step3: Go to Task Manager with Alt+Ctrl+Delete and
stop its process.
random.exe
service.dat
random.exe
service.dat
Step4: Navigate to remove the registry entries
associated as below in Registry Editor:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\divx.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mostat.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\platin.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\tapinstall.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\zapsetup3001.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\divx.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mostat.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\platin.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\tapinstall.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\zapsetup3001.exe
Ministry of Public Safety Canada Virus Video Removal Guide
Tips: If you haven’t sufficient expertise in handling virus program files, processes, dll files and registry entries, you will take the risk of messing up your computer and making it crash down finally. If you need online professional tech support, click here to get: 24/7 Online Virus Removal Support.
No comments:
Post a Comment