Windows Defender Has Detected Critically Corrupted File System! Scam

What is Windows Defender has detected Critically Corrupted File System!?

"Windows Defender has detected Critically Corrupted File System!" is a fake error message distributed using various adware-type applications.

This error locks the computer screen and claims that Windows Defender has detected corrupted files. Adware-type applications often infiltrate systems during installation of other programs. Furthermore, these apps continually gather various user/system information, cause unwanted browser redirects, and deliver intrusive online advertisements.

Here's a screenshot of another variant of this scam (users can use this key to unlock their computers - THTY4-89LK6-RTI23-XZTOP-05ERY):

Text presented in this scam ("Windows Defender prevented an unrecognized and malicious software..."):

Customer Support: 1-877-360-0485
Product Key Please Enter Product Key
Windows Defender prevented an unrecognised and malicious software on your computer. Please enter your Windows Product Key. The Product Key should be on a label or the card inside the box that Windows Disk came in or on the configuration email your received after buying it. If you have upgraded to Windows 10, you have a digital license instead of a key. A product key is a 25 character code used ti activate Windows. It look like this: -

"Windows Defender Has Detected Critically Corrupted File System!" claims that certain files are corrupted and that the computer has developed a problem. To solve it, users must supposedly contact "certified technicians" via a toll-free telephone number provided (1-844-563-0240). Victims then supposedly receive professional help.

Be aware, however, that these claims are false - there is nothing wrong with your system. Cyber criminals merely attempt to trick victims into calling and paying for services that are not needed. Therefore, ignore this error and never attempt to call the telephone number.

Furthermore, these adware-type apps deliver pop-up, banner, coupon, interstitial, full-page, and other similar advertisements. These ads conceal underlying content of visited websites and may also redirect to malicious websites. Therefore, clicking them is risky and can result in further computer infections.

In addition, adware might cause unwanted redirects to various rogue sites (for example, fake Internet search engines). By displaying content-concealing advertisements and causing unwanted redirects, adware significantly diminishes the Internet browsing experience. Another downside is information tracking.

Adware-type apps often record Internet Protocol (IP) addresses, Internet service providers (ISP), geo-locatons, URLs visited, queries entered into search engines, pages viewed, mouse and keyboard activity, and other similar information that might contain private details.

Developers of adware share the recorded data with third parties (potentially, cyber criminals) who misuse personal information to generate revenue. Thus, the presence of an information-tracking app on your system can lead to serious privacy issues or even identity theft. All adware should be uninstalled immediately.

There are many fake errors similar to "Windows Defender Has Detected Critically Corrupted File System!" including, for example, Your Windows Licence Has Expired, Cyber Security Warning, and Hacking Alert. All claim that the computer has encountered a problem. Be aware, however, that these fake errors are designed only to trick users into paying.

Adware-type applications are very similar. Most offer a number of 'useful features', however, these claims are attempts to give the impression of legitimacy. Adware-type applications are designed only to generate revenue for the developers and provide no significant value for regular users.

Adware displays intrusive online advertisements, collects private data, and often causes unwanted redirects.

How did adware install on my computer?

Some adware-type apps have official download websites, however, most are distributed using a deceptive software marketing method called "bundling" - stealth installation of third party software with regular (usually free) programs. Many users rush the download/installation processes and skip most steps.

Therefore, bundled programs are hidden within the "Custom" or "Advanced" settings. By skipping this section, users expose their systems to risk of various infections.

How to avoid installation of potentially unwanted applications?

There are two simple steps you should take to prevent system infiltration by potentially unwanted programs. Firstly, closely analyze the download/installation processes using the "Custom/Advanced" settings. Secondly, decline offers to download/install additional apps and opt-out of those already included.

Text presented in "Windows Defender has detected Critically Corrupted File System!" error message:

Windows Defender has detected Critically Corrupted File System!
Your PC/Device ran into a problem and needs to be repaired.
The digital Signature for this File couldn’t be verified.
File: \windows\system32\boot\winload.exe
Error code: 0xc0000428
The problem seems to be caused by the following file: atikmdag.sys
You’ll need to use recovery tools. Contact your PC administrator or PC/Device manufacturer on these numbers.
Some charges may be applied by local operators for toll-free numbers in certain countries or regions.
Toll free: 1-844-563-0240
Error code: 31058

Instant automatic malware removal: Manual threat removal might be a lengthy and complicated process that requires advanced IT skills. Combo Cleaner is a professional automatic malware removal tool that is recommended to get rid of malware. Download it by clicking the button below:
▼ DOWNLOAD Combo Cleaner By downloading any software listed on this website you agree to our Privacy Policy and Terms of Use. To use full-featured product, you have to purchase a license for Combo Cleaner. 7 days free trial available. Combo Cleaner is owned and operated by Rcs Lt, the parent company of PCRisk.com read more.

Quick menu:

• What is Windows Defender has detected Critically Corrupted File System!?
• STEP 1. "Windows Defender has detected Critically Corrupted File System!" virus removal using safe mode with networking.
• STEP 2. "Windows Defender has detected Critically Corrupted File System!" virus removal using System Restore.

"Windows Defender has detected Critically Corrupted File System!" virus removal:

Step 1

Windows XP and Windows 7 users: Start your computer in Safe Mode. Click Start, click Shut Down, click Restart, click OK. During your computer starting process press the F8 key on your keyboard multiple times until you see the Windows Advanced Option menu, then select Safe Mode with Networking from the list.

Video showing how to start Windows 7 in "Safe Mode with Networking":

Windows 8 users: Go to the Windows 8 Start Screen, type Advanced, in the search results select Settings. Click on Advanced Startup options, in the opened "General PC Settings" window select Advanced Startup. Click on the "Restart now" button. Your computer will now restart into "Advanced Startup options menu".

Click on the "Troubleshoot" button, then click on "Advanced options" button. In the advanced option screen click on "Startup settings". Click on the "Restart" button. Your PC will restart into the Startup Settings screen. Press "5" to boot in Safe Mode with Networking Prompt.

Video showing how to start Windows 8 in "Safe Mode with Networking":

Step 2

Log in to the account infected with the Windows Defender has detected Critically Corrupted File System! "Your computer has been blocked" virus. Start your Internet browser and download a legitimate anti-spyware program. Update the anti-spyware software and start a full system scan. Remove all entries detected.

If you cannot start your computer in Safe Mode with Networking, try performing a System Restore.

Video showing how to remove ransomware virus using "Safe Mode with Command Prompt" and "System Restore":

1. During your computer starting process, press the F8 key on your keyboard multiple times until the Windows Advanced Options menu appears, and then select Safe Mode with Command Prompt from the list and press ENTER.

2. When Command Prompt Mode loads, enter the following line: cd restore and press ENTER.

3. Next, type this line: rstrui.exe and press ENTER.

4. In the opened window, click "Next".

5. Select one of the available Restore Points and click "Next" (this will restore your computer system to an earlier time and date, prior to the Windows Defender scam infiltrating your PC).

6. In the opened window, click "Yes".

7. After restoring your computer to a previous date, download and scan your PC with recommended malware removal software to eliminate any remnants of the Windows Defender has detected Critically Corrupted File System! "Your computer has been blocked up for safety reasons" virus.

If you cannot start your computer in Safe Mode with Networking (or with Command Prompt), boot your computer using a rescue disk.

Some ransomware variants disable Safe Mode, making its removal complicated. For this step, you require access to another computer. After removing the "Your computer has been blocked up for safety reasons" virus from your PC, restart your computer and scan it with legitimate antispyware software to remove any possible remnants of this security infection.

Other tools known to remove the Windows Defender scam:

• Malwarebytes Anti-Malware

▼ Show Discussion