Severity scale:  
  (99/100)

Your computer has been blocked. How to remove? (Uninstall guide)

removal by Jake Doevan - -   Also known as Ukash virus, Tech support scam | Type: Malware
12

“Your Computer Has Been Blocked” scam used by ransomware developers and tech support scammers to swindle money from people

Your Computer Has Been Blocked virus is a name of a malicious program that prevents access to user’s computer either by locking the screen or displaying numerous pop-ups via web browsers. Typically, such programs aim to force the victim to call tech support scammers[1] or pay immediately to regain access to the computer. Such viruses often display fake error codes (such as Error #268D3, Error # FXX07, and similar), or even mention a particular operating system (Windows (Microsoft) Computer has been blocked virus and APPLE COMPUTER HAS BEEN LOCKED virus). Each of these viruses will provide you with fake information regarding your computer’s security, stating that someone violated your privacy by hacking your computer and now you have to get in touch with “certified technicians[2]” to solve the problem. However, similar messages are used by ransomware developers, and these viruses typically blame the victim for doing something illegal. Of course, these viruses cannot actually detect any illegal activities on the computer, but their purpose is to convince the victim that they are capable of doing it. Accordingly, such viruses seek to convince the victim to pay a smaller fine within several days to “drop the charges.”

One of the most widespread variants of this malware belongs to ransomware[3] category. Once installed, it displays a full-screen fake notification which is expected to scare people into thinking that they have violated several laws of the United States of America and now have to pay the fine for that. Typically, it blocks the system with a huge alert which seems to be sent by an official government representative (The Federal Department of Justice in this particular case). Besides, it speaks to the victim in the same language where he/she is located. The sad news is that there are actually Internet criminals behind the bogus notification. They seek to make you pay the supposed fine of $300 by purchasing the Moneypak voucher and sending the code to them. You should NOT do that! You can unblock your computer and remove Your Computer Has Been Blocked ransomware from the system by following special steps that are listed below or scanning your system with trustworthy anti-malware tools.

In fact, this virus is rather old, security experts report about a new wave of similar viruses used by tech support scammers[4]. In this case, YOUR COMPUTER HAS BEEN BLOCKED malware declares that user’s computer system is full of errors that can be fixed only by contacting Microsoft Tech support agents. The virus usually infects main web browsers and sets them to trigger redirects to specifically designed web pages controlled by online fraudsters. These web pages often resemble Microsoft’s Support Page. Phishing web pages then trigger a pop-up which usually has a title “This site says…” or “From [webpage URL]:”, which is then followed by a a scary message saying that the system has been infected, compromised, hacked, or affected by mysterious errors or viruses such as Zeus virus. The bogus messages always contain a tech support phone number, which is typically presented as “toll-free.” Of course, you should never dial these numbers given in fake ads of such malware because people who are going to pick it up are scammers[5]. Their aim is to make you believe that the system is heavily infected by super advanced hackers and that the only way to rescue your PC is to follow commands from “certified technicians.” Typically, such scammers ask the victim to do a list of useless tasks just to confuse him/her, and such commands usually are followed by a request to provide remote access to the so-called technician in order to fix the computer faster. You should never provide remote access to cyber criminals because they might download and install ransomware or another virus on your computer; scammers who don’t get access to the computer frequently seek to sell certain “security packages” to the victim, which usually contain one or two legitimate programs plus several free ones such as Adblocker browser extension. Of course, scammers sell these packages for an enormous price. Such malicious programs belong to Tech support scam virus group. An example of deceptive pop-ups urging to call tech support scammers is displayed below.

You can temporarily disable this malicious warning message by closing your web browser. However, a full Your Computer Has Been Blocked removal requires running a full system scan with reliable computer protection software, such as anti-spyware or anti-malware (you can find some suggestions in Software section, although we usually recommend using Reimage or Plumbytes Anti-MalwareWebroot SecureAnywhere AntiVirus programs). You should not waste your time with that because malware which is related to this Tech Support Scam can also collect personal and non-personal information about the user. So, although this virus will not lock your files like the ransomware we described earlier, having it installed on your computer can result in a number of privacy violations or even identity theft.

Ways to get infected with similar malware

We can easily put this ransomware virus to the same group as FBI virus and FBI virus Black Screen which have been attacking PC users lately. Just like its predecessors, this virus comes in a form of email attachments, which are usually distributed via massive spam campaigns. Besides, some users have also reported that this dangerous ransomware may be spread by fake media codecs and flash updates. Once it gets inside the PC, it blocks the system down and replaces the desktop picture with “Your Computer Has Been Blocked” warning. This warning is all covered in black and shows a fake web cam for a victim. Besides, it uses the same white letters in the top left corner of its alert just like FBI Online Agent virus, which is the latest from the group of FBI virus. Be aware that you have to ignore this alert, which says:

Your computer has been blocked!
The work of your computer has been suspended on the grounds of the violation of the law of the United States of America.
(…)

Speaking of tech support scam viruses, they can reach the system along with freeware or shareware, pirated software and also via email. To avoid these malicious programs, we highly recommend you to act responsibly when installing free programs downloaded from the world wide web. Remember, many free programs recommend installing extra programs alongside them, and you have to refuse to do it if you do not want to end up installing adware, browser hijackers, or tech support scam malware. To decompose software packages, we recommend choosing Custom or Advanced settings for their installation and deselecting every optional item added to your desired piece of software.

Your Computer Has Been Blocked removal methods

Many users do not know how to remove Your Computer Has Been Blocked virus, although all it takes to wipe it off the system is running a professional malware removal software. However, when trying to remove this or other ransomware from FBI virus group, the biggest problem is unlocking the system. First of all, you should restart your computer using instructions provided below to run it in a Safe Mode with Networking. Once the computer boots, download an anti-malware software or update the one you already have; after that, perform a full system scan with it. You can also try to unlock your screen my opening your Task manager -> Processes tab and ending black.exe process. When you complete this task, you should scan your system with anti-malware immediately. Your Computer Has Been Blocked removal is a long and sometimes difficult process, therefore, to avoid similar attacks in the future, it is advisable to regularly backup of your data and keep it stored somewhere safe.

 

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use. By Downloading any provided Anti-spyware software to remove Your computer has been blocked you agree to our privacy policy and agreement of use.
do it now!
Download
Reimage (remover) Happiness
Guarantee
Download
Reimage (remover) Happiness
Guarantee
Compatible with Microsoft Windows Compatible with OS X
What to do if failed?
If you failed to remove infection using Reimage, submit a question to our support team and provide as much details as possible.
Reimage is recommended to uninstall Your computer has been blocked. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

Note: Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manual removal instructions below.

More information about this program can be found in Reimage review.

More information about this program can be found in Reimage review.
Alternate Software
Plumbytes Anti-Malware
We have tested Plumbytes Anti-Malware's efficiency in removing Your computer has been blocked (2017-04-27)
Malwarebytes Anti Malware
We have tested Malwarebytes Anti Malware's efficiency in removing Your computer has been blocked (2017-04-27)
Hitman Pro
We have tested Hitman Pro's efficiency in removing Your computer has been blocked (2017-04-27)
Webroot SecureAnywhere AntiVirus
We have tested Webroot SecureAnywhere AntiVirus's efficiency in removing Your computer has been blocked (2017-04-27)

Your computer has been blocked manual removal:

Kill processes:
[random].exe

Delete files:
[random].exe

Manual Your computer has been blocked Removal Guide:

Remove Your computer has been blocked using Safe Mode with Networking

Reimage is a tool to detect malware.
You need to purchase Full version to remove infections.
More information about Reimage.

To remove a virus that displays the aforementioned warning to you, you should restart your PC according to these guidelines and let an anti-malware software check your computer’s status.

  • Step 1: Reboot your computer to Safe Mode with Networking

    Windows 7 / Vista / XP
    1. Click Start Shutdown Restart OK.
    2. When your computer becomes active, start pressing F8 multiple times until you see the Advanced Boot Options window.
    3. Select Safe Mode with Networking from the list Select 'Safe Mode with Networking'

    Windows 10 / Windows 8
    1. Press the Power button at the Windows login screen. Now press and hold Shift, which is on your keyboard, and click Restart..
    2. Now select Troubleshoot Advanced options Startup Settings and finally press Restart.
    3. Once your computer becomes active, select Enable Safe Mode with Networking in Startup Settings window. Select 'Enable Safe Mode with Networking'
  • Step 2: Remove Your computer has been blocked

    Log in to your infected account and start the browser. Download Reimage or other legitimate anti-spyware program. Update it before a full system scan and remove malicious files that belong to your ransomware and complete Your computer has been blocked removal.

If your ransomware is blocking Safe Mode with Networking, try further method.

Remove Your computer has been blocked using System Restore

Reimage is a tool to detect malware.
You need to purchase Full version to remove infections.
More information about Reimage.

  • Step 1: Reboot your computer to Safe Mode with Command Prompt

    Windows 7 / Vista / XP
    1. Click Start Shutdown Restart OK.
    2. When your computer becomes active, start pressing F8 multiple times until you see the Advanced Boot Options window.
    3. Select Command Prompt from the list Select 'Safe Mode with Command Prompt'

    Windows 10 / Windows 8
    1. Press the Power button at the Windows login screen. Now press and hold Shift, which is on your keyboard, and click Restart..
    2. Now select Troubleshoot Advanced options Startup Settings and finally press Restart.
    3. Once your computer becomes active, select Enable Safe Mode with Command Prompt in Startup Settings window. Select 'Enable Safe Mode with Command Prompt'
  • Step 2: Restore your system files and settings
    1. Once the Command Prompt window shows up, enter cd restore and click Enter. Enter 'cd restore' without quotes and press 'Enter'
    2. Now type rstrui.exe and press Enter again.. Enter 'rstrui.exe' without quotes and press 'Enter'
    3. When a new window shows up, click Next and select your restore point that is prior the infiltration of Your computer has been blocked. After doing that, click Next. When 'System Restore' window shows up, select 'Next' Select your restore point and click 'Next'
    4. Now click Yes to start system restore. Click 'Yes' and start system restore
    Once you restore your system to a previous date, download and scan your computer with Reimage and make sure that Your computer has been blocked removal is performed successfully.

Finally, you should always think about the protection of crypto-ransomwares. In order to protect your computer from Your computer has been blocked and other ransomwares, use a reputable anti-spyware, such as Reimage, Plumbytes Anti-MalwareWebroot SecureAnywhere AntiVirus or Malwarebytes Anti Malware

Jake Doevan
Jake Doevan - Computer technology expert

If this free removal guide helped you and you are satisfied with our service, please consider making a donation to keep this service alive. Even a smallest amount will be appreciated.

References

Removal guides in other languages