How to Remove Interpol Virus?

Posted on by

How to Remove Interpol Virus? (Ransomware Removal Guide)

What Is Interpol Virus?

Interpol virus, also referred to as Interpol Department of Cybercrime virus, is a ransomware that displays a lock screen notification pretending to be from Interpol Department of Cybercrime whenever you try to log on into Windows operating system or Safe Mode with Networking. In the fake notification, it claims that your PC is blocked because illegal activities have been detected on your computer, so you have to pay a non-existent fine of 100 euros via Ukash or Paysafecard vouchers to unlock your computer, otherwise you will be accused.

Step 1 Boot your computer to Safe Mode with Command Prompt

1. Turn off your computer and then back on.
2. During the start, tap F8 key repeatedly till you are brought to the Windows Advanced Options Menu.
3. Use the arrow keys to highlight Safe Mode with Command Prompt and then press Enter.

Step 2 Restore your computer to a restore point

1. Once the Command Prompt window comes out, quickly type “explorer” and hit Enter.

If you fail to do so in a few seconds, the ransomware will not allow you to type any more. You should restart the computer to the Safe Mode with Command Prompt and repeat the process.
2. When you are able to log in system, show the hidden files of Interpol virus:
a. Open Folder Options: clicking the Start button> Control Panel> Appearance and Personalization, and then clicking Folder Options. After that, click the View tab.
b. Under Advanced settings, click Show hidden files and folders, uncheck Hide protected operating system files (Recommended) and then click OK.
3. Once Malwarebytes is installed, run the program. If you are using the free version of Malwarebytes you will be prompted to update the database, make sure to do so.

Note: because the virus blocked all the access, even the safe mode can’t stop it shownn. In safe mode, wifi is not working. Therefore the second user account was created as Admin, then logged into the 2nd user, download the anti-spam software, do the full-scan, killed the virus