France Ministere de l’Interieur Ransomware Virus

Posted: October 23, 2012

Threat Metric

The Threat Meter is a malware assessment that SpywareRemove.com's research team is able to give every identifiable malware threat. Our Threat Meter includes several criteria based off of specific malware threats to value their severity, reach and volume. The Threat Meter is able to give you a numerical breakdown of each threat's initial Threat Level, Detection Count, Volume Count, Trend Path and Percentage Impact. The overall ranking of each threat in the Threat Meter is a basic breakdown of how all threats are ranked within our own extensive malware database. The scoring for each specific malware threat can be easily compared to other emerging threats to draw a contrast in its particular severity. The Threat Meter is a useful tool in the endeavor of seeking a solution to remove a threat or pursue additional analytical research for all types of computer users.

The following fields listed on the Threat Meter containing a specific value, are explained in detail below:

Threat Level: The threat level scale goes from 1 to 10 where 10 is the highest level of severity and 1 is the lowest level of severity. Each specific level is relative to the threat's consistent assessed behaviors collected from SpyHunter's risk assessment model.

Detection Count: The collective number of confirmed and suspected cases of a particular malware threat. The detection count is calculated from infected PCs retrieved from diagnostic and scan log reports generated by SpyHunter.

Volume Count: Similar to the detection count, the Volume Count is specifically based on the number of confirmed and suspected threats infecting systems on a daily basis. High volume counts usually represent a popular threat but may or may not have infected a large number of systems. High detection count threats could lay dormant and have a low volume count. Criteria for Volume Count is relative to a daily detection count.

Trend Path: The Trend Path, utilizing an up arrow, down arrow or equal symbol, represents the level of recent movement of a particular threat. Up arrows represent an increase, down arrows represent a decline and the equal symbol represent no change to a threat's recent movement.

% Impact (Last 7 Days): This demonstrates a 7-day period change in the frequency of a malware threat infecting PCs. The percentage impact correlates directly to the current Trend Path to determine a rise or decline in the percentage.

Ranking:	7,289
Threat Level:	2/10
Infected PCs:	178,089

First Seen:	October 23, 2012
Last Seen:	October 10, 2023
OS(es) Affected:	Windows

The France Ministère de l'Intérieur Virus is a pop-up alert that's created by a variant of the Reveton Trojan or (as it's referred to casually) the Ukash Virus. Like the similar but less visually sophisticated Votre ordinateur est bloqué Gendarmerie Ransomware, the France Ministère de l'Intérieur Virus displays a fake pop-up that claims that your computer has been locked by the government of France due to your illegal activities. The truth is that the France Ministère de l'Intérieur Virus isn't related to any type of police or government and doesn't have any goal except to extort money through Ukash or Paysafecard. While the France Ministère de l'Intérieur Virus cites various legal sources to make victims give away their money in a blind panic, SpywareRemove.com malware researchers recommend that you ignore the France Ministère de l'Intérieur Virus's warnings and use anti-malware programs to delete the France Ministère de l'Intérieur Virus, just like any other variant of a Reveton Trojan.

France Ministère de l'Intérieur Virus: the Unsubtle Eye in the Cyber-Sky

France Ministère de l'Intérieur Virus is immediately noticeable due to displaying a fraudulent warning message as soon as your PC is restarted (which, in most cases, is done after the France Ministère de l'Intérieur Virus's installation). The France Ministère de l'Intérieur Virus also is one of several new variants of ransomware Trojans that capture the infected PC's Webcam footage and insert it into small windows in their pop-up alerts. This gives the appearance that the France Ministère de l'Intérieur Virus is monitoring everything that you do with government permission – although SpywareRemove.com malware researchers can confirm that this isn't the case.

France Ministère de l'Intérieur Virus's warning message, like similar Reveton-based Trojans, claims that your computer has been locked because of Internet-based crimes that it was used to commit. The France Ministère de l'Intérieur Virus also insists on Ukash or Paysafecard-based payment as the remedy to this situation, even though the France Ministère de l'Intérieur Virus isn't capable of unlocking your computer regardless of whether or not you pay this fake fine.

Other evidence of the evolving sophistication of pop-ups from France Ministère de l'Intérieur Virus and similar ransomware Trojans include warnings about payment being required within two days, numerical buttons that supposedly can be used to input an unlock code and the inclusion of various colorful icons demonstrating the (fake) payment and unlocking process. Ultimately, SpywareRemove.com malware researchers look at France Ministère de l'Intérieur Virus as an indication of the advancing nature of ransomware Trojans in Europe as including more and more social engineering tactics to grab wallets and hand them over to criminals.

Destroying the France Ministère de l'Intérieur Virus's Credibility Along with Its Hold on Your Hard Drive

The France Ministère de l'Intérieur Virus is recognizable as one of the newest members of the Reveton family of ransomware Trojans due to its inclusion of many traits that have been seen, although often not simultaneously, in other Trojans of that family. Even though the France Ministère de l'Intérieur Virus is specific to France (and detects your IP address to confirm your computer's country of origin), variants of France Ministère de l'Intérieur Virus have been seen in many other countries. Wealthy countries in Europe are most at risk, but almost all of Europe, as well as the US and Canada, have been victimized by similar attacks.

Since it will be impossible to access your security programs while France Ministère de l'Intérieur Virus is open, SpywareRemove.com malware analysts suggest disabling the France Ministère de l'Intérieur Virus as the first step towards removing the France Ministère de l'Intérieur Virus entirely. Booting your computer from a removable USB drive or booting into Safe Mode should be sufficient to prevent the France Ministère de l'Intérieur Virus and its pop-up from appearing. Any good anti-malware program should be up to the job of deleting France Ministère de l'Intérieur Virus safely once these precautions have been taken.

Technical Details

Additional Information

The following URL's were detected:

luckywinner-web1.com

The following messages's were detected:

#	Message
1	Votre ordinateur a ete bloque! Toute activite dans cet ordinateur est enregistree. En cas de l’utilisation du camera Web, tour video et photo sont gardes pour l’indeficiation. Pour debloquer votre ordinateur et eviter l’action penale, vous devez faire un paiement d’un montant de 100 Euro.

One Comment

giner says:

May 13, 2014 at 6:39 am

bjr je crois que je viens de me faire pirater mon ordinateur par un virus ministere de l interiueur comment etre sur que cela et bien un virus ou que c bien reel