Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.

Windows 7: Ransomware

21 Oct 2015   #1

Windows 7 Ultimate x64

I too would like to know how to completely remove Bitlocker.

<Attempting to provide relevant data only>

I upgraded to Windows 10 a few weeks ago, and today I woke up and SURPRISE; All my hard drives now read as encrypted with Bitlocker (except for my primary OS drive (SSD))

I went through the usual CMD steps playing with manage-bde and such. All signs point to some how some time during the night, all three separate physical hard drives were encrypted.

I just logged into the local administrator account (since my profiles are all on the now encrypted drive) and noticed a text document on the desktop.

Now, I have encountered variants of this from other clients - but I never thought it could happen to me.
The document reads as follows:

"Hello there.
I would like to tell you first I'm sorry about that. Your documents, files, databased most are in original places or some moved to your local data. If you want to regain access to your local disk, all your files, documents, etc please send 1 BTC (Bitcoin) to this address: 1PFkYtDbxQRTv8Xse77u7wYG5bht8QB6e2 as fast as you can and email me at If you dont know what bitcoin is, please ask me for bitcoin website that you can buy it fast or search on google for a local Bitcoin shop or ATM and transfer 1 BTC to this address: 1PFkYtDbxQRTv8Xse77u7wYG5bht8QB6e2
It's not my fault if you are try to format disk and lose all. Here are only one way to get all back and regain access to your local hard disk drive and this way is to send 1 Bitcoin to this address: 1PFkYtDbxQRTv8Xse77u7wYG5bht8QB6e2
It's just business not trying to get your money and then to not give to you the bitlocker password. Waiting for your reply to my email address ( ) if you wanna get the bitlocker password. Thanks for your time!"

So there you have it.
I would really like to know how this happened and how to prevent it from happening again.

My System SpecsSystem Spec
21 Oct 2015   #2
Layback Bear

Windows 10 Pro. 64/ version 1709 Windows 7 Pro/64

Some how you have got infected with one of the several ransomeware infections.

I would suggest going to our Security section on this forum and start a thread with your problem.

I would also report this to your police department and see if they would like this information.
My System SpecsSystem Spec
22 Oct 2015   #3

Windows 7 Ultimate x64

Thanks for your response,
But again - i too would like to know how to completely remove Bitlocker.
My System SpecsSystem Spec

22 Oct 2015   #4

Windows 7 Professional 64-bit

CryptoMonitor, CryptoPrevent[or is it Protect?], WinRansom Beta [this is new! wait for stable release]. Can use both Cryptos on same computer. Haven't tried WinRansom yet. I don't know if any of those, or how any of those, work on a business network.
My System SpecsSystem Spec


Thread Tools

Similar help and support threads
Thread Forum
CryptoWall Ransomware
Hi guys! Yesterday I got the CryptoWall Ransomware Virus and I re-installed my Windows. Today I realized that I had a DVDinside the DVD-RW when I got the virus. My question is if my DVD is fine or he's virused as well...
System Security
Hi All, A friend of mine recently had an online experience where he was browsing and a screen popped-up telling him he had been downloading blahblahblah, demanding $300 , locking his computer, he thinks. He is a bit of a novice on-line and I first thought he had some ransom malware or virus. He...
System Security
FBI Ransomware
I had the Fbi ransomware a couple of days ago but I did a system restore and ran malwarebytes and it found 1 file so I thought it fixed the problem but today It came back so I did the same thing but I believe its still on my pc somewhere, please help me kill it.
System Security

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 10:19.
Twitter Facebook Google+