Remove “Atentie! Browser Dvs este blocat” virus (Removal Guide)

If you are seeing a “Atentie! Browser Dvs este blocat” notification within Internet Explorer, Firefox or Chrome, then you have redirected to a web page that contains a malicious javascript code. The “Atentie! Browser Dvs este blocat” message is basically just a web page containing a malicious javascript that does not allow you to close the browser window or switch to a different web page.
[Image: Atentie! Browser Dvs este blocat virus]
The “Atentie! Browser Dvs este blocat” virus will display a bogus notification that pretends to be from Ministerul Afacerilor Interne and states that your computer has been blocked due to it being involved with the distribution of pornographic material, spam and copyrighted content.
It goes on to say that you need to pay a ransom of 300 RON in order to get access to your files and computer again. In order to pay this ransom you need purchase a Ukash or Paysafecard voucher and submit it in the web browser. The malware’s authors prefer these payment services because transactions made through them cannot be reversed and are hard to trace.

If your computer is infected with the “Atentie! Browser Dvs este blocat” browser hijacker, this infection will display a localized webpage that covers the entire web browser of the infected computer and demands payment for the supposed possession of illicit material. The message displayed by this ransomware infection can be localized depending on the user’s location, with text written in the appropriate language.
The text of the “Atentie! Browser Dvs este blocat” web page is:

ATENȚIE!
Browser Dvs este blocat din motivele de securitate specificate mai jos.
Toate activitățile de acest computer au fost înregistrate.
Toate fișierele sunt criptate.

Dvs sunteți acuzat(ă) de vizualizare/stocare și/sau distribuire a materialelor pornografice cu conținut interzis (Pornografie infantilă/Zoofilie/Violare, etc.). Dvs ați încălcat Declarația Mondială de combatere a distribuirii pornografiei infantile. Dvs sunteți acuzat(ă) de comiterea infracţiunii prevăzute de Articolul 161 din Codul Penal al României.

Articolul 161 din Codul Penal al României prevede pedeapsa sub formă de privaţiune de libertate pe un termen de la 5 până la 11 ani.

De asemenea, Dvs sunteți suspectat(ă) de încălcarea “Legii privind drepturile de autor și drepturile conexe” (descărcarea de muzică sau video piratate, software nelicenţiat) prin utilizarea și/sau distribuirea neautorizată a conținutului protejat de dreptul de autor, încălcând astfel Articolul 148 din Codul Penal al României.

Articolul 148 din Codul Penal al României prevede pedeapsa sub formă de privaţiune de libertate pe un termen de la 3 până la 7 ani sau de la 150 până la 550 puncte-amendă.
De pe calculatorul Dvs a fost inițiat accesul neautorizat la informaţiile confidenţiale și la informaţiile de importanţă naţională de pe Internet.

Accesul neautorizat ar putea să fie inițiat de către Dvs personal din motive de cupiditate sau fără știrea și fără consimțământul Dvs, calculatorul Dvs fiind infectat cu programe malware. Astfel, până la anchetare, Dvs sunteți suspectat(ă) de încălcarea nepremeditată a Articolului 215 din Codul Penal al României (“Legea privind utilizarea neglijentă și nepăsătoare a mijloacelor tehnice de calcul și a calculatorului personal”).
Articolul 215 din Codul Penal al României prevede pedeapsa sub formă de privaţiune de libertate pe un termen de la 5 până la 8 ani și/sau amendă până la RON 300.000 lei românești.

De asemenea, în cursul examinării informațiilor de pe calculatorul Dvs, a fost stabilit faptul că calculatorul Dvs este utilizat în mod regulat cu scopul distribuirii spam-ului, inițiate de către Dvs personal din motive de cupiditate sau fără știrea și fără consimțământul Dvs, calculatorul Dvs fiind infectat cu programe malware. Distribuirea spam-ului a fost efectuată cu scopul distribuirii software-ului dăunător sau a materialelor pornografice cu conținut interzis. Astfel, până la anchetare, Dvs sunteți suspectat(ă) de încălcarea nepremeditată a Articolului 301 din Codul Penal al României (“Distribuirea spam-ului și a programelor malware (virușilor)”).

Articolul 301 din Codul Penal al României prevede pedeapsa sub formă de privaţiune de libertate pe un termen de până la 5 ani și amendă până la RON 750.000 lei românești.

Vă informăm că identitatea Dvs este deja stabilită, amplasamentul Dvs este deja localizat, și, împotriva Dvs poate fi intentată o acţiune penală în decurs de 96 de ore din momentul săvârșirii infracţiunilor prevăzute de Articolele din Codul Penal susmenționate,iar materialele dosarului de urmărire penală pot fi deferite justiţiei.

Cu toate acestea, conform modificărilor ale Codului Penal al României din data de 07 octombrie 2013, și în conformitate cu Declarația Drepturilor Omului, această încălcare a legii (dacă este comisă pentru prima dată) poate fi considerată ca fiind nepremeditată și Dvs nu veți fi tras(ă) la răspundere penală. Această condiție poate fi întrunită, în cazul în care Dvs veți plăti o amendă în beneficiul Statului (pentru sprijinul poiectelor de securizare a ciberspațiului).

Amenda urmează să fie achitată în decurs de cel mult 48 de ore din momentul săvârșirii infracţiunilor. De îndată ce expiră 48 de ore, expiră și posibilitatea de plată a amenzii, și în următoarele 48 de ore, va începe colectarea automată a informaţiilor cu privire la infracţiunile săvârșite de către Dvs, și, împotriva Dvs va fi intentată o acţiune penală.
Valoarea amenzii este de RON 300 lei românești. Dvs puteți să achitați această amendă cu ajutorul voucherului bănesc PaySafeCard sau Ukash. După achitarea amenzii, browser Dvs va fi deblocat și toate informațiile vor fi decriptate în decurs de 24 de ore din momentul trecerii banilor în contul Statului.

Cyber criminals often updated the design of this lock screen, however you should always keep in mind that no law enforcement agency (eg: FBI, Department of Justice, Royal Canadian Mounted Police or Police Central e-crime Unit) will never lock down your computer or web browser.

The “Atentie! Browser Dvs este blocat” browser blocker is a scam, and you should ignore any alerts that this malicious software might generate.
Under no circumstance should you send a MoneyPak, Ukash or Paysafecard voucher to these cyber criminals, and if you have, you can should request a refund, stating that you are the victim of a computer virus and scam.

How to remove the “Atentie! Browser Dvs este blocat” virus (Removal Guide)

This page is a comprehensive guide, which will remove the “Atentie! Browser Dvs este blocat” infection from a Windows computer and an Apple Mac OS X machine. Please perform all the steps in the correct order. If you have any questions or doubt at any point, STOP and ask for our assistance.

How to Remove “Atentie! Browser Dvs este blocat” virus from a Windows PC

STEP 1: Remove “Atentie! Browser Dvs este blocat” browser hijacker from Internet Explorer, Firefox and Chrome
STEP 2: Remove “Atentie! Browser Dvs este blocat” virus with Malwarebytes Anti-Malware Free
STEP 3: Double-check for the “Atentie! Browser Dvs este blocat” infection with HitmanPro

STEP 1: Remove “Atentie! Browser Dvs este blocat” browser hijacker from Internet Explorer, Firefox and Chrome

  1. Open Task Manager by right-clicking the taskbar, and then clicking Start Task Manager. Alternatively to start the Windows Task Mager, you can press Ctrl+Alt+Del and click on Task Manager or simply press on Ctrl+Shift+Esc.
    [Image: Start Windows Task Manager]
  2. Click the Processes tab to see a list of all the processes that are currently running under your user account and a description of each process.
    [Image: Select the Process tab]
    To view all of the processes currently running on the computer, click Show processes from all users.
  3. Scroll through the list till you see your web browser’s process and left-click on it once so it becomes highlighted. Once you have selected the browser’s process, click on the End Process button as show in the picture below.
    If you are using this browser: End this process:
    Internet Explorer iexplore.exe
    Chrome chrome.exe
    Safari Safari.exe
    SeaMonkey seamonkey.exe
    Opera opera.exe
    Firefox firefox.exe

    [Image: Search for iexplorer.exe, firefox.exe or chrome.exe]

  4. When you click on the End Process button, Task Manager will ask you to confirm if you are sure you want to terminate it as shown in the image below.
    [Image: Kill the malicious process in Windows PC]
    At this point you should press the Yes button in order to kill the process.
  5. Your browser window should now be closed. The next time you open your browser, do not allow the browser to open the last opened page.

STEP 2: Remove “Atentie! Browser Dvs este blocat” virus with Malwarebytes Anti-Malware Free

Malwarebytes Anti-Malware Free utilizes Malwarebytes powerful technology to detect and remove all traces of malware including worms, trojans, rootkits, rogues, dialers, spyware and more.

  1. You can download Malwarebytes Anti-Malware Free from the below link, then double-click on the icon named mbam-setup.exe to install this program.
    MALWAREBYTES ANTI-MALWARE DOWNLOAD LINK(This link will open a download page in a new window from where you can download Malwarebytes Anti-Malware Free)
  2. When the installation begins, keep following the prompts in order to continue with the setup process, then at the last screen click on the Finish button.
    [Image: Malwarebytes Anti-Malware final installation screen]
  3. On the Scanner tab, select Perform quick scan, and then click on the Scan button to start searching for “Atentie! Browser Dvs este blocat” malicious files.
    [Image: Malwarebytes Anti-Malware Quick Scan]
  4. Malwarebytes’ Anti-Malware will now start scanning your computer for “Atentie! Browser Dvs este blocat” virus as shown below.
    [Image: Malwarebytes Anti-Malware scanning for Atentie! Browser Dvs este blocat ransomware
  5. When the Malwarebytes Anti-Malware scan has finished, click on the Show Results button.
    [Image: Malwarebytes Anti-Malware scan results]
  6. You will now be presented with a screen showing you the computer infections that Malwarebytes Anti-Malware has detected. Make sure that everything is Checked (ticked), then click on the Remove Selected button.
    [Image: Malwarebytes Anti-Malwar removing Atentie! Browser Dvs este blocat virus]

STEP 3: Double-check for the “Atentie! Browser Dvs este blocat” infection with HitmanPro

HitmanPro is a second opinion scanner, designed to rescue your computer from malware (viruses, trojans, rootkits, etc.) that have infected your computer despite all the security measures you have taken (such as anti virus software, firewalls, etc.).

  1. You can download HitmanPro from the below link:
    HITMANPRO DOWNLOAD LINK (This link will open a web page from where you can download HitmanPro)
  2. Double-click on the file named HitmanPro.exe (for 32-bit versions of Windows) or HitmanPro_x64.exe (for 64-bit versions of Windows). When the program starts you will be presented with the start screen as shown below.
    HitmanPro scanner Click on the Next button, to install HitmanPro on your computer.
    HitmanPro installation
  3. HitmanPro will now begin to scan your computer for “Atentie! Browser Dvs este blocat” malicious files.
    HitmanPro detecting for Atentie! Browser Dvs este blocat
  4. When it has finished it will display a list of all the malware that the program found as shown in the image below. Click on the Next button, to remove the “Atentie! Browser Dvs este blocat” virus.
    HitmanPro scan results
  5. Click on the Activate free license button to begin the free 30 days trial, and remove all the malicious files from your computer.
    [Image: HitmanPro 30 days activation button]

Your computer should now be free of “Atentie! Browser Dvs este blocat” infection. If your current anti-virus solution let this infection through, you may want to consider purchasing the PRO version of Malwarebytes Anti-Malware to protect against these types of threats in the future, and perform regular computer scans with HitmanPro.


How to Remove “Atentie! Browser Dvs este blocat” virus from an Apple Mac OS X

For years, Windows users have been plagued by ransomware demanding several hundred dollars to unlock their computers.
The bad guys know there is a growing market of Apple consumers who, for the most part, feel pretty safe about browsing the Internet on a Mac without the need for any security product.
Cyber-criminals, well known for not re-inventing the wheel, have ‘ported’ the latest ransomware to OS X, not by using some complicated exploit but rather leveraging the browser and its ‘restore from crash’ feature. The “Atentie! Browser Dvs este blocat” ransomware page is being pushed onto unsuspecting users browsing regular sites but in particular when searching for popular keywords.
To remove “Atentie! Browser Dvs este blocat” from your Apple MAC OS X browser you can follow any of below options.

OPTION 1: Remove “Atentie! Browser Dvs este blocat” malicious web page from Apple Mac OS X by resetting Safari to its default settings
OPTION 2: Remove “Atentie! Browser Dvs este blocat” browser hijacker Apple Mac OS X virus using Force Quit for your browser

OPTION 1: Remove “Atentie! Browser Dvs este blocat” malicious web page from Apple Mac OS X by resetting Safari to its default settings

To remove the “Atentie! Browser Dvs este blocat” browser hijacker from Safari, we will need to reset your browser to its default settings.

  1. Click on the Safari menu and then choose Reset Safari
    [Image: Select Reset Safari from the menu]
  2. In the new windows, make sure all items are marked and click on the Reset button.
    [Image: Reset Safari to default settings]

You can also watch this video on how to reset Safari to its default settings:


OPTION 2: Remove “Atentie! Browser Dvs este blocat” browser hijacker Apple Mac OS X virus using Force Quit for your browser

  1. Press Command + Option + Escape simultaneously. This will open the open the Force Quit Applications window.
    [Image: Press Command + Option + Escape to start Force Quit menu]
  2. Select Safari, Chrome, Firefox or any other browser in which your are seeing the “Atentie! Browser Dvs este blocat” ransomware notification.
    [Image: Select Firefox, Chrome or Safari from Force Quit menu]
  3. Click the button that says “Force Quit“. This will forcefully end your browser program, thus removing the “Atentie! Browser Dvs este blocat” browser hijacker.
    [Image: Click on the Force Quit button to remove Atentie! Browser Dvs este blocat virus]
    If you cannot switch from the unresponsive app, press Command + Option + Shift + Esc for three seconds to force it to quit. This key combination tells OS X to force quit the frontmost app.

You can also watch this video on how to Force Quit a program on an Apple Mac OS X:

If you are still experiencing problems while trying to remove “Atentie! Browser Dvs este blocat” virus from your Windows or Apple MAC OS X machine, please start a new thread in our Malware Removal Assistance forum.

10 Rules to Avoid Online Scams

Here are 10 practical safety rules to help you avoid malware, online shopping scams, crypto scams, and other online fraud. Each tip includes a quick “if you already got hit” action.

  1. Stop and verify before you click, log in, download, or pay.

    warning sign

    Most scams win by creating urgency. Verify using a trusted method: type the website address yourself, use the official app, or call a known number (not the one in the message).

    If you already clicked: close the page, do not enter passwords, and run a malware scan.

  2. Keep your operating system, browser, and apps updated.

    updates guide

    Updates patch security holes used by malware and malicious ads. Turn on automatic updates where possible.

    If you saw a scary “update now” pop-up: close it and update only through your device settings or the official app store.

  3. Use layered protection: antivirus plus an ad blocker.

    shield guide

    Antivirus helps block malware. An ad blocker reduces scam redirects, phishing pages, and malvertising.

    If your browser is acting weird: remove unknown extensions, reset the browser, then run a full scan.

  4. Install apps, software, and extensions only from official sources.

    install guide

    Avoid cracked software, “keygens,” and random downloads. During installs, choose Custom/Advanced and decline bundled offers you do not recognize.

    If you already installed something suspicious: uninstall it, restart, and scan again.

  5. Treat links and attachments as untrusted by default.

    cursor sign

    Phishing often impersonates delivery services, banks, and popular brands. If it is unexpected, do not open attachments or log in through the message.

    If you entered credentials: change the password immediately and enable 2FA.

  6. Shop safely: research the store, then pay with protection.

    trojan horse

    Be cautious with brand-new stores, “closing sale” stories, and prices that make no sense. Prefer credit cards or PayPal for dispute options. Avoid wire transfers, gift cards, and crypto payments.

    If you already paid: contact your card issuer or PayPal quickly to dispute the transaction.

  7. Crypto rule: never pay a “fee” to withdraw or recover money.

    lock sign

    Common patterns include fake profits, then “tax,” “gas,” or “verification” fees. Another is a “recovery agent” who demands upfront crypto.

    If you already sent crypto: stop paying, save evidence (wallet addresses, TXIDs, chats), and report the scam to the platform used.

  8. Secure your accounts with unique passwords and 2FA (start with email).

    lock sign

    Use a password manager and unique passwords for every account. Enable 2FA using an authenticator app when possible.

    If you suspect an account takeover: change passwords, sign out of all devices, and review recent logins and recovery settings.

  9. Back up important files and keep one backup offline.

    backup sign

    Backups protect you from ransomware and device failure. Keep at least one backup on an external drive that is not always connected.

    If you suspect infection: do not connect backup drives until the system is clean.

  10. If you think you are a victim: stop losses, document evidence, and escalate fast.

    warning sign

    Move quickly. Speed matters for disputes, account recovery, and limiting damage.

    • Stop payments and contact: do not send more money or respond to the scammer.
    • Call your bank or card issuer: block transactions, replace the card if needed, and start a dispute or chargeback.
    • Secure your email first: change the email password, enable 2FA, and remove unfamiliar recovery options.
    • Secure other accounts: change passwords, enable 2FA, and log out of all sessions.
    • Scan your device: remove suspicious apps or extensions, then run a full malware scan.
    • Save evidence: screenshots, emails, order pages, tracking pages, wallet addresses, TXIDs, and chat logs.
    • Report it: to the payment provider, marketplace, social platform, exchange, or wallet service involved.

These rules are intentionally simple. Most online losses happen when decisions are rushed. Slow down, verify independently, and use payment methods and account controls that give you recourse.

Previous

Remove “Attention! Votre browser est bloqué” virus (Removal Guide)

Next

Remove Shuang11temai.com pop-up ads (Virus Removal Guide)