Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: FBI Locked computer scam virus


23 Feb 2013   #1

windows 7
 
 
FBI Locked computer scam virus

My daughter's hp dv5 laptop, running vista, has been infected by this ramsomware. I logged on in safe mode w/networking and dowloaded malwarebytes and it located 14 issues and upon restart the lockscreen was still there. I tried norton which was already on the computer and it found 9 minor issues and it's still there. I posted on the vista forum and it was recommended going to a restore point before the infection, which I'm going to try as soon as malwarebytes finishes another scan. Anyone here any successful experience with this virus?
Thanks

Malwarebytes found nothing, doing restore.

My System SpecsSystem Spec
.

23 Feb 2013   #2

Microsoft Windows 7 Home Premium 64-bit 7600
 
 

My System SpecsSystem Spec
23 Feb 2013   #3

windows 7
 
 

Restore worked
My System SpecsSystem Spec
.


23 Feb 2013   #4

Microsoft Windows 7 Home Premium 64-bit 7600
 
 

ok good, bookmark kickstart for next time. kids huh!
My System SpecsSystem Spec
23 Feb 2013   #5

windows 7
 
 

Thanks will do. I don't know what she's going to when she's in college in a few months 5 hours away.
My System SpecsSystem Spec
23 Feb 2013   #6

Windows 7 Pro. 64/SP-1
 
 

If all you did is use a restore point to solve your problem the infection is probably still in your computer.
My System SpecsSystem Spec
23 Feb 2013   #7

Windows 7 Professional SP1 64-bit
 
 

What layback is saying is, go ahead and do the scans anyways to be safe. I know its what I would do in your situation, especially since it is your daughter's computer.
My System SpecsSystem Spec
23 Feb 2013   #8

Windows 7 Pro. 64/SP-1
 
 

Petey7 you are correct. I should of been more to the point.
Thanks.
My System SpecsSystem Spec
23 Feb 2013   #9

Windows 7 Home Premium
 
 

revmike,

What Bear is saying is correct. A Restore Point may still contain the infection.

On Post #2 boohbah suggested the use of HitmanPro.KickStart
That is a good choice since the program targets this particular ransomware. It removes the infection and allows you to access your computer to scan it for malware.

You need to know if the infected computer is running a 32-bit or 64-bit ststem. See Note at the bottom of these instructions.

Download HitmanPro.Kickstart:
HitmanPro.Kickstart - Anti ransomware, politievirus, bundestrojaner, Reveton, BKA, GVU - SurfRight

Next, you need to load a USB flash drive with HitmanPro Kickstart as follows...

Use a clean (non-infected) computer, and download HitmanPro from the link above.

When HitmanPro opens, click the Kick icon at the bottom of the screen.

Plug the USB flash drive into the clean computer and follow the instructions from the first video on the website.

Next, plug in the USB drive just created into the infected machine. The machine needs to be in a shutdown state at this point.

>> Start the infected computer.

When the computer is starting, press the key (on some machines its F10 or F2) that brings up the Boot Menu. From there, select to boot from the USB drive.
Info: How to Remove Ransomware - Select Real Security
Save the changes, and press on.

Next, perform a system scan with HitmanPro Kickstart as seen in the second video.

After HitmanPro Kickstart is done, boot into Windows.


~~~~
To remove the malicious files of the ransomware...

Download RogueKiller:
Tlcharger RogueKiller (Site Officiel)

When you get to the website, go to where it says:
(Download link) Lien de téléchargement:

Select the version that applies to your system. (See Note)
Click the dark-blue button to download.
Save to the Desktop.

Close all windows and browsers.
Right-click and select: Run as Administrator

At the program console, wait for the prescan to finish. (Under Status, it says: Prescan finished.)
press: SCAN

When done, a report opens on the Desktop: RKreport.txt
Please provide the RKreport.txt (Mode: Scan) in your reply.


Note:
To find out if the system is 32 or 64 bit:
Click: Start
Type System in the Start Search box
Click System in the Programs list.

The operating system is displayed as follows:
For a 64-bit version operating system, under System > System type, it shows:
64-bit Operating System

For a 32-bit version operating system, under System > System type, it shows:
32-bit Operating System
My System SpecsSystem Spec
24 Feb 2013   #10

Microsoft Windows 7 Home Premium 64-bit 7600
 
 

Quote   Quote: Originally Posted by revmike View Post
Thanks will do. I don't know what she's going to when she's in college in a few months 5 hours away.
sounds like you are counting the days and minutes until she goes . i fully emphathise i have a 19 yr old daughter who goes to university in 7 months, five days and three hours.
My System SpecsSystem Spec
Reply

 FBI Locked computer scam virus




Thread Tools



Similar help and support threads for2: FBI Locked computer scam virus
Thread Forum
locked out of my computer General Discussion
Postal Service "Package Waiting" Scam.... Trojan Dropper Virus. System Security
Regarding computer is locked System Security
computer locked up General Discussion
Been locked out of computer can't log in General Discussion
locked up computer Network & Sharing
Locked out of computer General Discussion

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 05:27 AM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33