Threat Database Ransomware Windows Blocked ransomware

Windows Blocked ransomware

By ZulaZuza in Ransomware

Threat Scorecard

Threat Level: 80 % (High)
Infected Computers: 4
First Seen: September 15, 2011
Last Seen: October 26, 2020
OS(es) Affected: Windows

The 'Windows Blocked!' ransomware infection is a threatening message that attempts to scam computer users into paying a certain amount. Like most ransomware, the 'Windows Blocked!' ransomware infection takes your computer hostage and refuses to give back control of the computer, until the user acquiesces and sends the criminals behind 'Windows Blocked!' ransomware two-hundred Hryvnia, the Ukrainian national currency. The 'Windows Blocked!' ransomware infection is quite similar to other messages from the fake German or Spanish police. If your computer has been taken over by the 'Windows Blocked!' ransomware, ESG malware analysts recommend starting up in Safe Mode and searching for the Trojan that is behind this insidious malware threat.
 

What Exactly is in the 'Windows Blocked!' ransomware Message?

This is the main text of the 'Windows Blocked!' ransomware message:
 
Windows is blocked!

Microsoft Security found violations of the use of the Internet.
Reason: Image unlicensed gay and child porn.

Unfortunately, those people that do not speak Russian or read Cyrillic script will often be confused with the appearance of this strange message on their computer. This message typically uses white lettering on a blue background, with some gray, numbered buttons on the bottom. Like most ransomware infections, the 'Windows Blocked!' ransomware claims that your computer has been downloading illegal pornography and that if you do not pay two-hundred Hryvnia through an online money-transfer company, your case will be turned over to the authorities and that the entire contents of your hard drive will be deleted.
 

Do Not Become a Victim of the 'Windows Blocked!' ransomware Infection

You should not fall for this scam. Despite 'Windows Blocked!' ransomware threatening claims, the 'Windows Blocked!' ransomware infection has absolutely no way of deleting your files or contacting the authorities. This message also does not come from an official source. The most likely origin of your 'Windows Blocked!' ransomware infection is an infected advertisement of video codec on pornographic websites. ESG malware analysts recommend ignoring all claims made by the 'Windows Blocked!' ransomware message. This message is mainly composed of a Trojan that blocks you from accessing your Desktop or Task Manager and the threatening message. There is also absolutely no reason to pay the ransom that the 'Windows Blocked!' ransomware infection demands. Instead, use a strong, up-to-date anti-malware application to remove this threat from your computer.

File System Details

Windows Blocked ransomware may create the following file(s):
# File Name Detections
1. [SET OF RANDOM CHARACTERS].exe

Registry Details

Windows Blocked ransomware may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\ "Shell" = "[SET OF RANDOM CHARACTERS].exe"

Related Posts

Trending

Most Viewed

Loading...