Today we look at a virus that gives the user the message "Your computer is blocked by the Ministry of the Interior." Let's try to figure out where this infection comes from, what it represents, how you can pick it up, and also learn how to remove it.
What are viruses
But before we get down to business, we need to understand what kind of computer virus is in front of us. Indeed, in this case, you can choose the right way of treatment. So first, let's see the entire classification of this infection.
The first species is worms. Non-dangerous programs and files that penetrate the computer and simply drown out its work. Honestly, now this virus is not accepted to be afraid.
The second type is more dangerous. This is nothing but spam. He is able to make the message "Your computer is blocked by the Ministry of the Interior." However, in fact, there will be no blockage. This will turn out to be a simple advertisement or “wiring” for money. Spam is removed quickly and easily.
In addition, you can also meet with trojans. This is the most dangerous type of virus for the operating system. It not only clutters the computer, but also damages system documents. It needs to be treated as soon as possible. He has a so-called subtype - an encryptor. "My computer is locked," the Ministry of the Interior "- the name of the virus that wound up in the operating system," - this is a request that is often left by users who have encountered our current virus. Let's see why this infection is dangerous.
Fears
Well, here we are acquainted with all kinds of dangers for our computer. Moreover, we managed to find out what we will deal with today. This is a cryptographic virus. But why is he so dangerous?
The fact is that if such a virus gets to you and your computer is locked (“Ministry of the Interior of the Russian Federation” - scammers are hiding under such a loud name), then personal data is at great risk. In particular, you can permanently lose them.
The problem is that cryptographers use special encryption of your data. You can’t do without help here. True, the Trojans begin to act, to destroy or destroy the operating system, sooner or later, because of which decryption is no longer possible. Thus, if you encounter the problem in question, it needs to be addressed as soon as possible. Let's try to figure out exactly how.
Where does it come from
But before that it is worth discussing two more small, but rather important points. They will help those who have not yet encountered such a problem. Now we’ll talk about why the window “Your computer is locked: Ministry of the Interior” may appear.
As a rule, a modern user cannot feel completely safe from computer infection anywhere. True, there are several places where cryptographers very much like to hide. Which ones? Let's get a look.
For starters, these are a variety of hacking programs. In order to run them, we need to disable the antivirus. It’s good if, after launching the application, the function you were aiming for seems to work. Otherwise, nothing will happen, but after the first reboot of the system, you will notice that the computer is locked. The "Ministry of the Interior of the Russian Federation" is an institution that must scare everyone. In particular, a novice user.
The second place where we can meet this infection is a variety of download managers. While downloading files, they really like to add viruses, trojans and worms to the operating system. It will be very difficult to calculate immediately. However, after rebooting, you will see that your computer is locked. The “Ministry of the Interior of the Russian Federation” (that’s what our virus is called) is what pretty much tried to frighten an ordinary user and tried to discourage him from any desire to deal with an encryptor.
The third place where you can stumble upon this problem is a variety of prohibited sites, usually of an intimate nature. This is more than enough there. However, if you suddenly saw that your computer is locked, the "Ministry of the Interior of the Russian Federation" should not scare you. We will fight with the ransomware. Now we will see how this can be done.
Manifestation
But first, let's try to figure out how you can understand that the operating system is infected. In fact, if the problem is detected in time, then it can be removed before it begins to hit the computer to the fullest.
The first sign indicating that you will have a "locked computer" is "Ministry of the Interior.exe". This is a kind of file that can be detected in computer processes at startup.
The second point - the operating system immediately begins to slow down and glitch very much. Even the most inattentive users are able to notice this.
Another development scenario is a huge amount of constantly pop-up ads in the browser, as well as changing the start page to the one you haven’t even heard of. In any case, you did not change anything - everything happened spontaneously. If you notice these signs, then you can start to sound the alarm. Now we’ll see what to do if the message “Computer is blocked. Ministry of the Interior” appears.
If in the browser
Let's start with the simplest that can only be. Sometimes (or rather, at the very beginning) a virus infects the browser of our computer. In this case, the situation can be quickly stopped. There are several moves. Now we will analyze them.
The fact is that if you see the message "The computer is blocked. Ministry of the Interior", "Kaspersky" will help to remove this infection. Just go to the antivirus website and run a web scan there. After several minutes of checks, you will need to clear the entire list of threats detected.
The second way is to completely remove the browser and then reinstall it. Honestly, it does not always work. Sometimes the ransomware does not allow us to reinstall applications. And then the problems begin. So if the virus appeared outside the browser, you will have to think about other ways to fight the infection.
Check
If you are faced with such an encryptor, then there is no choice but to proceed with more decisive measures. For example, try to calculate the infection in standard steps.
It is about checking the operating system for viruses and other malicious files. As a rule, this step helps when the infection has just entered the computer and has not yet gone beyond the browser. Just start a deep check, and then see what happened.
As soon as the antivirus gives you a list of malware, they need to be cured immediately. That which cannot be cured is removed. There is a special button for this. Just take your time to restart the computer. Otherwise, the message: "Your computer is blocked by the Ministry of the Interior" will slip out before the system boots at all. After scanning, proceed immediately to the next step.
Content Removal
We are moving on to another very important step. This is the removal of new content that is installed on the computer automatically. This phenomenon is far from uncommon. Sometimes the virus registers in installed applications, which prevents its complete removal from the system.
In this matter, the "Control Panel" will help us. Go to "Uninstall a program", and then wait until you have a list of all installed content. Here you will have to choose what appeared after the first message "Your computer is blocked by the Ministry of the Interior." Now click on the lines with the right mouse button, after which it is worth the removal. You will find this function in the list that opens. After this, you can proceed to the following measures.
Registry
If you notice the message "Your computer is blocked by the Ministry of the Interior", then you will have to work a little with the registry. First you need to get into it. This is done by calling the command line (Win + R) and then executing the "regedit" function.
As a result, after the actions taken, you will find yourself in the registry of the computer. Here you need to visit the "Edit" and look at the "Search". Now type "mvd" (without quotes) in the line that appears and start the scanning process. Wait a few minutes and then delete anything that has just been discovered. Are you done? Then move on.
Help programs
So, we almost got to the end of the fight. Now, after we have already cleared the registry, we will have to work a bit with additional content that complements the process just completed. For this task, we need a Ccleaner.
This application is in the public domain. You can find it literally at every step on the World Wide Web. Download and install it on your computer. After that, run and configure the scan. As a rule, ticks mark all sections of the hard drive + browsers. Click on the "Scan" button, and then - "Clear".
During this process, you will clear some malicious and hidden files. True, only with the help of Ccleaner you can not expel a computer virus from the operating system. So we almost got to the finals. Only a few simple steps remain.
Control cleaning
So, we almost figured out what to do if your computer is blocked by the Ministry of the Interior. In fact, now we are required to carry out a few simple steps, and then restart the PC.
To get started, go to the shortcut properties of all your browsers. There, look at the "Object" field. If after the executable you have something written in separate quotation marks, then this inscription should be deleted, and then save the changes.
Next, go to the task manager. To do this, press ctrl + alt + del. Now go to the processes and find "mvd.exe" there. Complete this process. That's all. Now you can restart your computer and see what happened.
Extreme method
True, not everything always turns out as we would like. Sometimes a virus cannot be removed . In this situation, users can only help one method - the complete removal of the operating system with its reinstallation.
For such an undertaking, you will need a special installation disk. It can be bought or downloaded. After you have the necessary item in your hands, simply insert the disc into the DVD-ROM, reboot the system and follow simple instructions. That's all.