Son's Pc Attacked By Fbi Scam Virus.

[BigPapaDean]

I need help desperately can anybody help? I googled it and it sounds very complicated but he is pretty savvy with pc's. Would really appreciate any help at all!

 

[PingLo]

Get a Mac.

[Sonovabich]

I need help desperately can anybody help? I googled it and it sounds very complicated but he is pretty savvy with pc's. Would really appreciate any help at all!

Dean a similar thing got me here about 6 months ago, i had never heard anything about this at all, it said it was from the Metropolitan police and that my address had been found to have pirated movies music, and possible child porn, well i know before my son went back to work on a cruise ship in Australia he downloaded a shit load of movies and music, so i thought they had targetted that but when  "child porn" is mentioned you come out in a cold sweat. The only way out of it is to have a good Firewall running in the first instance ( i had mine switched off at the time) if it does get you, you need 2 computers  ( i will try to find my sons e-mail with the link on how you get rid of it) or the last option you have to go and pay them what they are asking and they will unlock your PC, i heard even the fix with 2 PC's is still very hard to get rid of it and rarely works.

[DEEJAYKEG]

Dean, I hope the information via the following link is useful in removing this Trojan.

I strongly disagree with SOB that paying the cyber-criminals is an option.  IT IS NOT!

You will just lose your money and still have the problem.

 

Info and removal options: http://botcrawl.com/how-to-remove-the-fbi-moneypak-ransomware-virus-fake-fbi-malware-removal/

 

Personally I rate Malwarebytes! http://www.malwarebytes.org/

[Sonovabich]

Dean, I hope the information via the following link is useful in removing this Trojan.

I strongly disagree with SOB that paying the cyber-criminals is an option.  IT IS NOT!

You will just lose your money and still have the problem.

 

Info and removal options: http://botcrawl.com/how-to-remove-the-fbi-moneypak-ransomware-virus-fake-fbi-malware-removal/

 

Personally I rate Malwarebytes! http://www.malwarebytes.org/

Sorry Deejay if you want your PC unlocked then paying is the only way for some, i have read links to this and see that people cannot fix this at all using 2 PC's the only way you can stop it is by having a Firewall on, if you pay the problem goes away, sorry but it is the truth we might not like to admit we fell for a scam but many of us do, i had no access to any other PC or any way to find out what was going on, i thought it was genuine, my PC  locked by the Police, like an idiot i went and got a voucher for £100 and entered the code into the link on my PC, my PC  was unlocked immediately, i have not had one problem since, but like i say i now have my Firewall switched on, i felt like an idiot when i got in touch with my son, but at least i had my PC  back working. i am not advocating that anyone else should pay, that is up to them but good luck trying to fix it. I can't find anything in your link that tells you how to get into a locked Computer, all them fixes are only if you still have access, how can i use a Malware program if i can't get my PC  to work?

Edited March 18, 2013 by Sonovabich

[Tball]

Format C:

[djMot]

 

Dean, I hope the information via the following link is useful in removing this Trojan.

I strongly disagree with SOB that paying the cyber-criminals is an option.  IT IS NOT!

You will just lose your money and still have the problem.

 

Info and removal options: http://botcrawl.com/how-to-remove-the-fbi-moneypak-ransomware-virus-fake-fbi-malware-removal/

 

Personally I rate Malwarebytes! http://www.malwarebytes.org/

Sorry Deejay if you want your PC unlocked then paying is the only way for some, i have read links to this and see that people cannot fix this at all using 2 PC's the only way you can stop it is by having a Firewall on, if you pay the problem goes away, sorry but it is the truth we might not like to admit we fell for a scam but many of us do, i had no access to any other PC or any way to find out what was going on, i thought it was genuine, my PC  locked by the Police, like an idiot i went and got a voucher for £100 and entered the code into the link on my PC, my PC  was unlocked immediately, i have not had one problem since, but like i say i now have my Firewall switched on, i felt like an idiot when i got in touch with my son, but at least i had my PC  back working. i am not advocating that anyone else should pay, that is up to them but good luck trying to fix it. I can't find anything in your link that tells you how to get into a locked Computer, all them fixes are only if you still have access, how can i use a Malware program if i can't get my PC  to work?

 

I do not negotiate with terrorists.

[YellowSnow]

Dean,

 

I had this on my pc a month ago. I had to open by hitting f8. Once in I did a system restore back when I knew everything was running fine. After I restored I downloaded "Spy Hunter". Spy Hunter found virus and I deleted it. I payed the $40 for Spy Hunter and hit delete. You can also run it for free and manually deleted virus. I thought it was easier to just buy the program.

 

Yellow

[JohnnyQuest]

get all important pics if any and saveable items [make sure they aren't infected as well]....right click drive C......format........quick format...the only way to be sure.....good luck.

[PingLo]

get all important pics if any and saveable items [make sure they aren't infected as well]....right click drive C......format........quick format...the only way to be sure.....good luck.

Yep,

 

Buy a new HD, I think 2TB are going for $99, take the old one out and put it into a read only sled, Make a new OS install and copy only the non executable files off 

[Sonovabich]

 

 

Dean, I hope the information via the following link is useful in removing this Trojan.

I strongly disagree with SOB that paying the cyber-criminals is an option.  IT IS NOT!

You will just lose your money and still have the problem.

 

Info and removal options: http://botcrawl.com/how-to-remove-the-fbi-moneypak-ransomware-virus-fake-fbi-malware-removal/

 

Personally I rate Malwarebytes! http://www.malwarebytes.org/

Sorry Deejay if you want your PC unlocked then paying is the only way for some, i have read links to this and see that people cannot fix this at all using 2 PC's the only way you can stop it is by having a Firewall on, if you pay the problem goes away, sorry but it is the truth we might not like to admit we fell for a scam but many of us do, i had no access to any other PC or any way to find out what was going on, i thought it was genuine, my PC  locked by the Police, like an idiot i went and got a voucher for £100 and entered the code into the link on my PC, my PC  was unlocked immediately, i have not had one problem since, but like i say i now have my Firewall switched on, i felt like an idiot when i got in touch with my son, but at least i had my PC  back working. i am not advocating that anyone else should pay, that is up to them but good luck trying to fix it. I can't find anything in your link that tells you how to get into a locked Computer, all them fixes are only if you still have access, how can i use a Malware program if i can't get my PC  to work?

 

I do not negotiate with terrorists.

Well that's easy to say when you what it is, if you read my reply you will see i had no idea what was going on, and the timing just a couple of days after my son had left for Australia after he had downloaded movies and Music threw me completely.

[Sonovabich]

get all important pics if any and saveable items [make sure they aren't infected as well]....right click drive C......format........quick format...the only way to be sure.....good luck.

Don't know where you get all this just format the drive stuff?, i right click my C drive and only get this message "This drive contains volumes of Windows that you are using, formatting this volume could cause your PC  to stop working" so no option to format that drive at all, i also don't get any "quick format" options either, bottom line it will not let me format my "C"  drive, but again nobody read my post, my PC was completely locked up, had no way or no way i knew to unlock it, that's the whole point they lock your PC  up so you cannot get out and format this do that or whatever else.

Edited March 18, 2013 by Sonovabich

[KaptCrunch]

can he boot with win disk, (F8)  does bios see HDD ?

 

if nothing impartant to save  in dosbox/command prompt  type "help?" for i don't know what OS using ?     format or  diskmgmt

 

also 1 HDD or if more just have C connected 

[KaptCrunch]

 

get all important pics if any and saveable items [make sure they aren't infected as well]....right click drive C......format........quick format...the only way to be sure.....good luck.

Don't know where you get all this just format the drive stuff?, i right click my C drive and only get this message "This drive contains volumes of Windows that you are using, formatting this volume could cause your PC  to stop working" so no option to format that drive at all, i also don't get any "quick format" options either, bottom line it will not let me format my "C"  drive, but again nobody read my post, my PC was completely locked up, had no way or no way i knew to unlock it, that's the whole point they lock your PC  up so you cannot get out and format this do that or whatever else.

 

what did you see while booting up cold?   bios  then login screen ? with highjack message  was only action computer was doing

 

then get in bios and change boot to optical drive first, put in windows disk  then go to dos or install over top

[Cpt.TennealXI]

I've had this in the past as well...you have to re-boot in safe mode (F8 on most pc's)then do a system restore to a point before your trouble started.Once that is done and you restart you should have access to your drive.I ran malware bytes and spybot search and destroy(run them both as administrator),then you can back up and reformat if you wish.This crap is called ransomware and its made to take advantage of people's naivity of their computers,and scare you with the child porn and stuff so if you dont know any better you pay them for the "fix".

Good luck....it seems scary but there are much worse things out there.

[DEEJAYKEG]

I've had this in the past as well...you have to re-boot in safe mode (F8 on most pc's)then do a system restore to a point before your trouble started.Once that is done and you restart you should have access to your drive.I ran malware bytes and spybot search and destroy(run them both as administrator),then you can back up and reformat if you wish.This crap is called ransomware and its made to take advantage of people's naivity of their computers,and scare you with the child porn and stuff so if you dont know any better you pay them for the "fix".

Good luck....it seems scary but there are much worse things out there.

 

Yes, safe mode is the route to salvation.

 

I agree entirely that there are worse critters at large - those that encrypt ones hard drive contents and demand payment are the worst.

 

Now, friends, you realise my zeal in my anti-Java crusade!  Get rid of it permanently and radically reduce the risk of something like this

happening to you!

[FLDMARSHAL]

hi how u doing come on team speak about tea time uk time and i will talk u through saving everything dont panic its all good and u will save ur work and ur hard drive this virus is in the news m8 as it getting every one what ever u do do not try anything until u speak to me so turn it of for now and use a different one and i will promise i will sort it for u ok i mean what Cpt.TennealXI said is the best way but like i said if u dont no what to do come on ts and i will help u

Edited March 18, 2013 by FLELDMARSHALL

[DEEJAYKEG]

 

Dean, I hope the information via the following link is useful in removing this Trojan.

I strongly disagree with SOB that paying the cyber-criminals is an option.  IT IS NOT!

You will just lose your money and still have the problem.

 

Info and removal options: http://botcrawl.com/how-to-remove-the-fbi-moneypak-ransomware-virus-fake-fbi-malware-removal/

 

Personally I rate Malwarebytes! http://www.malwarebytes.org/

Sorry Deejay if you want your PC unlocked then paying is the only way for some, i have read links to this and see that people cannot fix this at all using 2 PC's the only way you can stop it is by having a Firewall on, if you pay the problem goes away, sorry but it is the truth we might not like to admit we fell for a scam but many of us do, i had no access to any other PC or any way to find out what was going on, i thought it was genuine, my PC  locked by the Police, like an idiot i went and got a voucher for £100 and entered the code into the link on my PC, my PC  was unlocked immediately, i have not had one problem since, but like i say i now have my Firewall switched on, i felt like an idiot when i got in touch with my son, but at least i had my PC  back working. i am not advocating that anyone else should pay, that is up to them but good luck trying to fix it. I can't find anything in your link that tells you how to get into a locked Computer, all them fixes are only if you still have access, how can i use a Malware program if i can't get my PC  to work?

 

I trust you didn't leave it at that as you can be sure that other Trojans will have been downloaded whilst your machine was compromised.

Full scans for malware and rootkits recommended and...GET RID OF JAVA!

[CobraBites]

i suggest using free avast anti virus....its an awesome and full proof anti virus program out and its totally free..it has live online access scanner...so if u go to a website or w.e it will let u know that the page u on has trojan virus; attached to it and it automatically  aborts the connection and contains the virus b4 it has time to affect ur pc..trust me..this avast does work and works well i been using it for nearly 6yrs now i have never had a virus on my pc EVER!!!...then i also use spybot search and destroy for all the spyware and malware..

 

only other safe option would be to just do a clean install of windows and when it ask u if u want to partition the drive select delete partition first this will delete all files including all infected files no matter what ...sometimes when u use anti virus programs or other program to delete or find virus' even those dont find the root of the virus' so just couple my ideas...just remember i am A+ certified pc tech...

 

just make sure if u do the reinstall idea make sure that u back up any major files and doc and pics that u want to keep and put it on another hdd or some type of storage device...as delete partition option will delete everything saved on pc..like i said tho even infected files and virus'

 

P.S,.... tell him to stop goin to Porn Sites!!!! lmao..

Edited March 18, 2013 by CobraBites

[CobraBites]

 

get all important pics if any and saveable items [make sure they aren't infected as well]....right click drive C......format........quick format...the only way to be sure.....good luck.

Don't know where you get all this just format the drive stuff?, i right click my C drive and only get this message "This drive contains volumes of Windows that you are using, formatting this volume could cause your PC  to stop working" so no option to format that drive at all, i also don't get any "quick format" options either, bottom line it will not let me format my "C"  drive, but again nobody read my post, my PC was completely locked up, had no way or no way i knew to unlock it, that's the whole point they lock your PC  up so you cannot get out and format this do that or whatever else.

if u go to control panel .....then go to administrative tools then disk partition u can do it there and yes if u format the hard drive that way it will delete ur windows files and ur pc wont work then u have to reinstall windows ....i really wouldnt suggest that its best to do what i say in above post

[Sonovabich]

 

 

get all important pics if any and saveable items [make sure they aren't infected as well]....right click drive C......format........quick format...the only way to be sure.....good luck.

Don't know where you get all this just format the drive stuff?, i right click my C drive and only get this message "This drive contains volumes of Windows that you are using, formatting this volume could cause your PC  to stop working" so no option to format that drive at all, i also don't get any "quick format" options either, bottom line it will not let me format my "C"  drive, but again nobody read my post, my PC was completely locked up, had no way or no way i knew to unlock it, that's the whole point they lock your PC  up so you cannot get out and format this do that or whatever else.

if u go to control panel .....then go to administrative tools then disk partition u can do it there and yes if u format the hard drive that way it will delete ur windows files and ur pc wont work then u have to reinstall windows ....i really wouldnt suggest that its best to do what i say in above post

I don't have any options to delete partitions in "control panel administrative tools" Cobra, i have something that i paid for and was pre-loaded on my PC called "Acronis True Image"  that can be accessed when the PC  is booting, basically it's the same thing, you can change or delete partitions etc, that is what i did, i restored my PC  back to it's original factory settings and started from scratch.

[ROCKAPE]

carry out a restore before this happened ,you may have to do it in safe mode then install the free malwarebytes and run a full scan you then just follow the malwarebytes prompts after the scan to remove this.

 

http://www.filehippo.com/download_malwarebytes_anti_malware/

 

i have fixed more pcs than i care to remember with the type of attack SOB had  and never would anyone need to part with money to do this.

 

 

sob call me first before you par wiv cash we have so many great guys on her who would give a solution.

[TecHnOBoY]

You can not format the partition where windows is installed if you use THIS Windows.

 

There are several ways to rescue all the data which is important to you:

 

1. the easiest: try to run Windows in protected mode, connect an external HDD and copy all pics, music, documents etc to this HDD - reinstall windows

 

2. not too easy: buy a new internal HDD and install a fresh Windows on it. After that you have to choose the correct Windows installation on startup. Copy all your data to the new HDD, format the old Windows partition and use this drive as a storage for your games, music etc.

 

3. hardcore: Download a Linux distribution, run it from CD, connect an external HDD, copy your data and remove all data from your Windows partition. Reinstall Windows

 

 

Personal note:

 

If you have still access to this system (not completely locked, only a popup with the blabla pay or die blabla) : don't use it to access any protected account like mail, Facebook, online banking etc.

 

If any anti virus is able to remove this crap: never trust this system. Save your files and reinstall Windows.

 

Firewalls are useless for such fu*king crap. In most cases Ransomware comes as drive-by download while you are watching websites. Firewalls like ZoneAlarm or the Windows firewall would not detect this shit. You are surfing and all FWs will see it as legit. (Not saying firewalls are useless at all)

 

Protect your System with an Antivirus. But be aware that this is not a 100% protection. No antivir detects all the crap out there.

 

Work with limited access and do not use an administrative account for your daily work. This minimizes the damage to your system in most cases. The Windows UAC (User Access Control, the window which pops up when you try to install programs "Blabla install blabla. Click Yes or No") is helpful but not the best protection.

 

Now call me a smart alack

Such things are may daily work. If someone is interested, I'll open a post with a little more info about me (more than I did in my intro post) in the members area, as there are some things I don't want to post visible to the whole World. And Google.

(Not google but Google, I like google but I hate Google

Edited March 18, 2013 by TecHnOBoY

[PingLo]

These things used to happen for me daily, well, for my clients.  Not so much any more.  Older folks should use iPads and Consoles (appliances) and younger folks should be more careful and backup regularly.  Business folks should use common sense, what costs more having to worry about this stuff or not?

[ChknFngr]

maybe u can also just put windows installer on a usb key and run the installer after u changed boot order in the bios. that way, no need to buy a 2nd hard disc