The Ministry of Public Safety Canada is one of the most lethal ransomware program that has infected thousands of computers in and out of the Canada. This malicious virus enters in the windows based computers without the permission of the user, and soon after it settles down, you will see a fake notification which shows that your PC is blocked because you are involved in the illegal activities such as child pornography or copyright violation. You are also asked to pay CAD $100 in order to unblock the system, and avoid the prosecution within 48 hours, but keep in mind that this is a bogus application that is designed, developed, and distributed with the motive to trap the users. This malicious application is used by the notorious hackers as an effective tool to take your money along with the confidential financial information that is being used in the online frauds and other cyber crimes.

The Manual Removal of Ministry of Public Safety Canada

After confirming the presence of the Ministry of Public Safety Canada in your computer, you have to leave everything behind and remove this virus at the earliest. There are some reliable automatic removal tools available to delete this malicious ransomware, besides that, you can also use the manual removal instructions that are described below:-

Change the Mode of Operation from Normal to Safe Mode

Before starting removing this ransomware, it is compulsory that you start your system in the safe mode. Restart the machine, and press the F8 key repeatedly to access the boot options menu. Select the Safe Mode before pressing the Enter key to start operating the machine in the safe mode.

End the Malicious Processes

Once the system is booted in the safe mode successfully, you have to delete the following malicious processes from the windows task manager that are associated with this dangerous infection. In this regard, you have to access the task manager with the help of Ctrl+Alt+Delete keys, and remove these processes from there:-

  • %AppData%\[RANDOM CHARACTERS]\[RANDOM CHARACTERS].exe

Remove the Associated Data

After completing the above mentioned steps, you have to delete the associated data of this threat. In this regard, you are required to delete the following files from the system files folder:-

  • %Desktopdir%\Ministry of Public Safety Canada Ransomware.lnk
  • %Programs%\Ministry of Public Safety Canada Ransomware\Ministry of Public Safety Canada Ransomware.lnk

Reverse the Modification in the Windows Registry

You have to start the registry editor by running the “RegEdit” command through the start menu. Once the registry editor is started, you are required to delete the following malicious entries associated with the Ministry of Public Safety Canada ransomware:-

  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Ministry of Public Safety Canada Ransomware\DisplayIcon %AppData%\[RANDOM CHARACTERS]\[RANDOM CHARACTERS].exe,0
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Ministry of Public Safety Canada Ransomware
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Ministry of Public Safety Canada Ransomware\UninstallString “%AppData%[RANDOM CHARACTERS][RANDOM CHARACTERS].exe” -u
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\[RANDOM CHARACTERS] %AppData%\[RANDOM CHARACTERS]\[RANDOM CHARACTERS].exe
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Ministry of Public Safety Canada Ransomware\ShortcutPath “%AppData%\[RANDOM CHARACTERS]\[RANDOM CHARACTERS].exe” -u
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Ministry of Public Safety Canada Ransomware\DisplayName Ministry of Public Safety Canada Ransomware

Run a complete system scan through your antivirus program after restarting the computer in the normal mode.

How to Remove Ministry of Public Safety Canada?

Leave a Reply

Your email address will not be published. Required fields are marked *

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>