Click on screenshot to zoom
Danger level 9
Type: Malware
Common infection symptoms:
  • Installs itself without permissions
  • Changes background
  • Connects to the internet without permission

Ministerul Afacerilor Interne virus

Should you see a notification from Ministerul Afacerilor Interne virus on your screen, then it is very likely that your computer was not protected well enough from dangerous infections. Do you have a reliable antimalware program installed? Do you perform regular system scans? If not, then it is of no surprise that Ministerul Afacerilor Interne virus managed to slither into your PC. This ransomware infection comes with Urausy Trojan and it locks your desktop by displaying a fake security notification all over your screen. You need to remove Ministerul Afacerilor Interne virus immediately if you want to restore your computer access.

Ministerul Afacerilor Interne virus is an infection that holds your computer hostage and it is not the first computer malware that does so. There is an entire group of computer malware called Ukash Virus group that denies desktop access and then demands that users pay a fine for crimes they have not committed. As far as Ministerul Afacerilor Interne virus is concerned, this infection is localized for the users in Romania, and it is a new version of such Ukash infections as Politia Romana Virus or Calculatorul Dvs Este Blocat Virus. However, there is nothing new we can expect from Ministerul Afacerilor Interne virus, because it employs the same infection methods as its predecessors.

Once your computer is blocked by a screen-sized notification, Ministerul Afacerilor Interne virus goes on to try and convince you that you have done something terribly wrong:

ATENŢIE!

Calculatorul Dvs este blocat din motivele de securitate specificate mai jos.

Dvs sunteţi acuzat(ă) de vizualizare/stocare şi/sau distribuire a materialelor pornografice cu conţinut interzis (Pornografie infantilă/Zoofilie/Violare, etc.). Dvs aţi ȋncălcat Declaraţia Mondială de combatere a distribuirii pornografiei infantile. Dvs sunteţi acuzat(ă) de comiterea infracţiunii prevăzute de Articolul 161 din Codul Penal al României.

The infection claims that you have been involved in distributing child pornography material along with other prohibited content, and thus you have violated international conventions and the national laws of Romania. Supposedly, the message you see on the screen has been sent by the Romanian law enforcement authorities and if you want to avoid criminal prosecution, you need to pay a fine of RON 300 via PaySafeCard or Ukash.

You should never spend a single dime on Ministerul Afacerilor Interne virus, because the infection would not unlock your PC even if you paid the ransom fee. This infection has been created to swindle you out of your money, and the cyber criminals will only reach their goal if you transfer the money. Therefore, check out the instructions below to unlock your computer and then invest in a legitimate security product that will help you remove Ministerul Afacerilor Interne virus and other Trojans from your computer automatically.

How to restore desktop access

Windows 8

  1. Press Windows key and metro GUI will open.
  2. Click Internet Explorer tile and enter http://www.pcthreat.com/download-sph into the address bar. Press Enter.
  3. Click Run on the download dialog box at the bottom of the screen.
  4. Install SpyHunter and run a full system scan.

Windows Vista & Windows 7

  1. Reboot the PC and tap F8 repeatedly until Advanced Boot Options menu appears.
  2. Use arrow keys to navigate and select Safe Mode with Networking. Press Enter.
  3. Access our site and download SpyHunter.
  4. Install the program and scan your PC.

Windows XP

  1. Follow the steps 1 and 2 above.
  2. Click Yes on the confirmation dialog box.
  3. Download SpyHunter.
  4. Open Start menu and click Run.
  5. Type “msconfig” into the Open box and press OK.
  6. Select Startup tab on System Configuration Utility.
  7. Click Disable all and click OK.
  8. Reboot the PC in Normal Mode.
  9. Install SpyHunter and scan your computer.

The most important thing is not to wait until it is too late to do anything about the infection. If you want to ask anything about Ministerul Afacerilor Interne virus or how to remove it, contact us by leaving a comment in the box below.

Download Spyware Removal Tool to Remove* Ministerul Afacerilor Interne virus
  • Quick & tested solution for Ministerul Afacerilor Interne virus removal.
  • 100% Free Scan for Windows
disclaimer

How to manually remove Ministerul Afacerilor Interne virus

Files associated with Ministerul Afacerilor Interne virus infection:

{097444e7-2d87-ba3c-2efe-9f54812d824a}.exe
%WINDIR%\system32
rvcbcyks.exe
%TEMP%
Updating.exe
pYunY8m4VL3qLc.exe
96dddda4.dll
ACEIEAddOn.dll
%SystemDrive%\????????????
oygqyunapnp.exe
yaiiwockc.dll
comeo.exe
%ALLUSERSPROFILE%\Application Data
JfCqQ5JC.exe
wlsidten.exe
%APPDATA%\Task Scheduler
skype.dat
msnmsgrr.exe
%CommonProgramFiles%
bf8h8d02hf.exe
ieudator.dll
videotwisterSA.exe
xmlfilter.exe
scvhost.exe
wlsidten.dll
gcrwcoak.exe
Piranha.exe
secproc_isv.exe
install_0_msi.exe
UpdatePriv.exe
%UserProfile%
msavfit.exe
%LOCALAPPDATA%\Temp
n.
cf6640a77ed4926a4c6be661ab93def9d13408753dd07e8d02836996a2f247b6.exe
questscan.dll
wpbt0.dll
audipbrd.exe
mplayer2.exe
acuvzomo.exe
ex3b.dll
wahneaqa.exe
msshell.exe
%LOCALAPPDATA%\lollipop
SyncHostps.exe
systemcpl.exe
zqmkrehUkpoKfsafsaZg.exe
Firewallservice.exe
dtkmujvo.exe
hwj3ba6j.dss
jsdhlexdqkllnbcxgai.bfg
puozlkmyj.dll
wjthvwjb.dss
securitywindrv.exe
pmstcdjwz.exe
%WINDIR%\Temp
ifgxpers.exe
taskhost.exe.exe
ctfmon.exe
DLL321.dll
aPr0hY9.exe
VaultSysUi.exe
%APPDATA%\updates
3511172082012Build.exe
wgsdgsdgdsgsd.exe
setex.exe
00b5d693.exe
50E1.exe
WinSyncMetastore.exe
dqnbdq7.dss
brenasa.exe
ubvhynpxh.exe
C87C.exe
%ALLUSERSPROFILE%
sqlncli.exe
csrsss.exe
NTServiceManager.exe
bvhylsviw.exe
iner.exe
87b2cb3916261d5c807bf44262755cb0.exe
魔法桌面第三方主题破解补丁V1.1.exe
ssntvs.exe
xaZYOVJW.exe
Q3d38543.exe
administration.exe
%AppData%
rool0_pk.exe
svchost.exe
Other.res
p1.exe
msdtmsrd.exe
MusicCollector.exe
bzsbkotiu.exe
idiokbbrv.exe
TimeDateMUICallback.exe
b34btbztdb0vavaw.exe
uenovfiu.exe
WINDED6.exe
xlqbteeb.exe
crack.exe
UpgradeHelper.exe
m2PythonLoader.exe
obvwo.exe
dyjdl.exe
%APPDATA%\system
OmaSG21e.exe
najeoxtt.exe
Task Scheduler.exe
2084473.dll
DA0B.exe
00qbipeq.exe
Nbt.exe
msn.exe
xctqakcqbeo.dll

Ministerul Afacerilor Interne virus DLL's to remove:

wpbt0.dll
ACEIEAddOn.dll
questscan.dll
yaiiwockc.dll
xctqakcqbeo.dll
96dddda4.dll
ieudator.dll
DLL321.dll
puozlkmyj.dll
2084473.dll
wlsidten.dll
ex3b.dll

Ministerul Afacerilor Interne virus processes to kill:

rool0_pk.exe
msdtmsrd.exe
VaultSysUi.exe
NTServiceManager.exe
iner.exe
msshell.exe
svchost.exe
cf6640a77ed4926a4c6be661ab93def9d13408753dd07e8d02836996a2f247b6.exe
3511172082012Build.exe
wgsdgsdgdsgsd.exe
administration.exe
gcrwcoak.exe
xaZYOVJW.exe
msnmsgrr.exe
b34btbztdb0vavaw.exe
m2PythonLoader.exe
87b2cb3916261d5c807bf44262755cb0.exe
bf8h8d02hf.exe
zqmkrehUkpoKfsafsaZg.exe
Firewallservice.exe
najeoxtt.exe
videotwisterSA.exe
securitywindrv.exe
oygqyunapnp.exe
UpgradeHelper.exe
xmlfilter.exe
install_0_msi.exe
魔法桌面第三方主题破解补丁V1.1.exe
crack.exe
00b5d693.exe
WINDED6.exe
csrsss.exe
msn.exe
dtkmujvo.exe
50E1.exe
00qbipeq.exe
dyjdl.exe
bzsbkotiu.exe
comeo.exe
JfCqQ5JC.exe
WinSyncMetastore.exe
acuvzomo.exe
ssntvs.exe
setex.exe
ifgxpers.exe
msavfit.exe
secproc_isv.exe
audipbrd.exe
idiokbbrv.exe
uenovfiu.exe
wlsidten.exe
p1.exe
Task Scheduler.exe
wahneaqa.exe
taskhost.exe.exe
C87C.exe
obvwo.exe
systemcpl.exe
pmstcdjwz.exe
mplayer2.exe
aPr0hY9.exe
Nbt.exe
ubvhynpxh.exe
scvhost.exe
xlqbteeb.exe
bvhylsviw.exe
DA0B.exe
Updating.exe
pYunY8m4VL3qLc.exe
UpdatePriv.exe
Q3d38543.exe
TimeDateMUICallback.exe
MusicCollector.exe
OmaSG21e.exe
rvcbcyks.exe
brenasa.exe
SyncHostps.exe
sqlncli.exe
Piranha.exe
{097444e7-2d87-ba3c-2efe-9f54812d824a}.exe
ctfmon.exe
Disclaimer

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.