Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: FBI Locked computer scam virus

23 Feb 2013   #1
revmike

windows 7
 
 
FBI Locked computer scam virus

My daughter's hp dv5 laptop, running vista, has been infected by this ramsomware. I logged on in safe mode w/networking and dowloaded malwarebytes and it located 14 issues and upon restart the lockscreen was still there. I tried norton which was already on the computer and it found 9 minor issues and it's still there. I posted on the vista forum and it was recommended going to a restore point before the infection, which I'm going to try as soon as malwarebytes finishes another scan. Anyone here any successful experience with this virus?
Thanks

Malwarebytes found nothing, doing restore.


My System SpecsSystem Spec
.
23 Feb 2013   #2
boohbah

Microsoft Windows 7 Home Premium 64-bit 7600
 
 

My System SpecsSystem Spec
23 Feb 2013   #3
revmike

windows 7
 
 

Restore worked
My System SpecsSystem Spec
.

23 Feb 2013   #4
boohbah

Microsoft Windows 7 Home Premium 64-bit 7600
 
 

ok good, bookmark kickstart for next time. kids huh!
My System SpecsSystem Spec
23 Feb 2013   #5
revmike

windows 7
 
 

Thanks will do. I don't know what she's going to when she's in college in a few months 5 hours away.
My System SpecsSystem Spec
23 Feb 2013   #6
Layback Bear

Windows 10 Pro. 64/ version 1709 Windows 7 Pro/64
 
 

If all you did is use a restore point to solve your problem the infection is probably still in your computer.
My System SpecsSystem Spec
23 Feb 2013   #7
Petey7

Windows 7 Professional SP1 64-bit
 
 

What layback is saying is, go ahead and do the scans anyways to be safe. I know its what I would do in your situation, especially since it is your daughter's computer.
My System SpecsSystem Spec
23 Feb 2013   #8
Layback Bear

Windows 10 Pro. 64/ version 1709 Windows 7 Pro/64
 
 

Petey7 you are correct. I should of been more to the point.
Thanks.
My System SpecsSystem Spec
23 Feb 2013   #9
cottonball

Windows 7 Home Premium
 
 

revmike,

What Bear is saying is correct. A Restore Point may still contain the infection.

On Post #2 boohbah suggested the use of HitmanPro.KickStart
That is a good choice since the program targets this particular ransomware. It removes the infection and allows you to access your computer to scan it for malware.

You need to know if the infected computer is running a 32-bit or 64-bit ststem. See Note at the bottom of these instructions.

Download HitmanPro.Kickstart:
HitmanPro.Kickstart - Anti ransomware, politievirus, bundestrojaner, Reveton, BKA, GVU - SurfRight

Next, you need to load a USB flash drive with HitmanPro Kickstart as follows...

Use a clean (non-infected) computer, and download HitmanPro from the link above.

When HitmanPro opens, click the Kick icon at the bottom of the screen.

Plug the USB flash drive into the clean computer and follow the instructions from the first video on the website.

Next, plug in the USB drive just created into the infected machine. The machine needs to be in a shutdown state at this point.

>> Start the infected computer.

When the computer is starting, press the key (on some machines its F10 or F2) that brings up the Boot Menu. From there, select to boot from the USB drive.
Info: How to Remove Ransomware - Select Real Security
Save the changes, and press on.

Next, perform a system scan with HitmanPro Kickstart as seen in the second video.

After HitmanPro Kickstart is done, boot into Windows.


~~~~
To remove the malicious files of the ransomware...

Download RogueKiller:
Tlcharger RogueKiller (Site Officiel)

When you get to the website, go to where it says:
(Download link) Lien de téléchargement:

Select the version that applies to your system. (See Note)
Click the dark-blue button to download.
Save to the Desktop.

Close all windows and browsers.
Right-click and select: Run as Administrator

At the program console, wait for the prescan to finish. (Under Status, it says: Prescan finished.)
press: SCAN

When done, a report opens on the Desktop: RKreport.txt
Please provide the RKreport.txt (Mode: Scan) in your reply.


Note:
To find out if the system is 32 or 64 bit:
Click: Start
Type System in the Start Search box
Click System in the Programs list.

The operating system is displayed as follows:
For a 64-bit version operating system, under System > System type, it shows:
64-bit Operating System

For a 32-bit version operating system, under System > System type, it shows:
32-bit Operating System
My System SpecsSystem Spec
24 Feb 2013   #10
boohbah

Microsoft Windows 7 Home Premium 64-bit 7600
 
 

Quote   Quote: Originally Posted by revmike View Post
Thanks will do. I don't know what she's going to when she's in college in a few months 5 hours away.
sounds like you are counting the days and minutes until she goes . i fully emphathise i have a 19 yr old daughter who goes to university in 7 months, five days and three hours.
My System SpecsSystem Spec
Reply

 FBI Locked computer scam virus




Thread Tools




Similar help and support threads
Thread Forum
Scam calls saying computer is infected
I have been getting calls from someone claiming they are from Dell and sometimes they say "Windows Tech Support" The most recent was today less than an hour ago. The idiot told me he could prove he was from Dell. I told him to prove it he said he could tell me my service tag. I told him That...
System Security
Pop up computer virus scam
Ok so I was surfing and I got that pop scam. the white window had a bunch of mumbo jumbo about security alert with a phone number to call to ensure your security then make sure you check you bank accts and so on. Underneath that window you could see the bright blue screen that if you click to...
System Security
Computer locked up with a virus!!
I think I have a big time virus. I'm on an hp laptop running Windows 7. Soon as I go online I get a pop up : "WARNING! Your computer may be highly infected! " it goes on to tell me to call a 1-800 number ruIght away. I know it's a scam. But I can't get rid of this thing! I tried running panda and...
System Security
Son duped! How do I know if computer is infected by infosis.net scam?
Hi-- I am in need of technical expertise to assess for whether my computer has been attacked! My 13 yr old son was duped by someone calling claiming to be a Microsoft technician with knowledge that our computer was hacked. I was not home... He did much of what they asked, typing windows + R,...
System Security
Postal Service "Package Waiting" Scam.... Trojan Dropper Virus.
My Dad told me that he click on an e mail that was supposedly from the USPS and indicated that he had a package waiting for him that was delayed due to an address confirmation issue. The e mail indicated that he download a address label bring it to the USPS for confirmation. Well luckily my Dad...
System Security


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 04:56.
Twitter Facebook Google+