Remove Ministry of Public Safety Canada Ransomware

Ministry of Public Safety Canada Ransomware is a virus, malware, trojan family that infect the computer to cheat the hard-earn money of computer user. Ministry of Public Safety Canada Ransomware mainly target computers in Canada. The Ministry of Public Safety Canada Ransomware installs itself to the computer through website which provide download pirated software and songs. The Ministry of Public Safety Canada ransomware displays a lock screen to the computer users to force them to pay NZD $100 before allowing to access the windows desktop. The lock screen pretends to be from the Canada E-Crime Lab, Canada Police, Centre for Infrastructure Protection (CCIP), and Interpol and was placed because the computer user has been involved in illegal cyber activity related to pornography and copyrighted content. This activity supposedly the computer users has distributed pornography, copyrighted files, or computer viruses to others through various way. The Ministry of Public Safety Canada ransomware continues to show that the computer user must pay a fine in the amount of NZD $100 within 48 hours or you will face legal prosecution. It is important to note that this is a computer virus and that you are not actually being targeted by these agencies, thus please do not be cheated and pay the ransom.

Ministry of Public Safety Canada ransomware show a word "ATTENTION". Your computer has been blocked up for safety reasons listed below. You are accused of viewing/storage and/or dissemination of banned pornography (child pornography/zoophillia/rape etc). You have violated World Declaration on non-proliferation of child pornography. You are accused of committing the crime envisaged by Article 161 of Canada criminal law. Article 161 of Canada criminal law provides for the punishment of deprivation of liberty for terms from 5 to 11 years.

Ministry of Public Safety Canada ransomware should be removed immediately!

Removal Guide
Kill Process
(How to kill a process effectively?)
[random].exe

Delete Registry
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon "shell" = "explorer.exe,%AppData%\cache.dat"

Remove Folders and Files
%AppData%\cache.dat

File Location Notes:
%AppData% refers to the current users Application Data folder. By default, this is C:\Documents and Settings\[Current User]\Application Data for Windows 2000/XP. For Windows Vista and Windows 7 it is C:\Users\[Current User]\AppData\Roaming.