Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Ransomware on Samsung Galaxy 10.1 note


  • Please log in to reply
45 replies to this topic

#1 suthrnstar

suthrnstar

  • Members
  • 24 posts
  • OFFLINE
  •  

Posted 21 August 2014 - 07:48 PM

I have ransomware on my Samsung Galaxy Note 10.1 Android tablet. Can't log on anything. I turn the tablet in and it immediately goes to the virus. What do I do?
 
 
Moved to the Am I Infected forum from Intros ~~ boopme

Edited by boopme, 21 August 2014 - 07:57 PM.


BC AdBot (Login to Remove)

 


#2 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:02:33 AM

Posted 21 August 2014 - 08:42 PM

Hello and welcome

 

New to me personally, but first do you know the actual name of the ransomware ??

We may be able to get some help for you .....

 

Thanks -



#3 suthrnstar

suthrnstar
  • Topic Starter

  • Members
  • 24 posts
  • OFFLINE
  •  

Posted 21 August 2014 - 08:51 PM

Hello and welcome
 
New to me personally, but first do you know the actual name of the ransomware ??
We may be able to get some help for you .....
 
Thanks -


Not at the moment, would Need guidance in finding the name

#4 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:02:33 AM

Posted 21 August 2014 - 09:01 PM

OK

 

You posted >> I turn the tablet in and it immediately goes to the virus << so it was logical to ask if it displayed anything ........

I will try and ask around, unless you get another answer soon, or have more information.

 

Do you know what Browser were you using at the time ?? Chrome / Firefox / Internet Explorer / or one of the many others ??

 

Thanks -



#5 suthrnstar

suthrnstar
  • Topic Starter

  • Members
  • 24 posts
  • OFFLINE
  •  

Posted 21 August 2014 - 09:05 PM

Ah thought you might have wanted some numbers from the virus. It states FBI investigation and of course wants $300 to unlock the device. Is that you meant?
Was either bing or Google

Edited by suthrnstar, 21 August 2014 - 09:06 PM.


#6 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:02:33 AM

Posted 21 August 2014 - 09:09 PM

Hi -

 

No ....... that was all that I wanted unless you do know the browser, but someone may work from there.

 

Most of these are infected while Chrome is the browser I have found ..

 

Thanks, I will ask -



#7 suthrnstar

suthrnstar
  • Topic Starter

  • Members
  • 24 posts
  • OFFLINE
  •  

Posted 21 August 2014 - 09:12 PM

Thank you for grabbing the topic. I appreciate it

#8 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:02:33 AM

Posted 21 August 2014 - 10:01 PM

I have found 3 versions of the FBI Ransomware. Do you recognise any ??
First One now  Second One and Third one

 All of these are basically the same with minor variations. Are you able to follow This Guide (Scroll Down) to unlock your unit ??

If not, we will need to get you some personal help, but you may need to wait a bit longer.

A day or ?? when there is a Malware Removal Expert available .........

 

Thank You -



#9 suthrnstar

suthrnstar
  • Topic Starter

  • Members
  • 24 posts
  • OFFLINE
  •  

Posted 21 August 2014 - 10:10 PM

I'm having to use my Android phone to view your posts as my Galaxy is my PC. When clicking on the links you've posted it comes up blank on all three. I'm willing to wait for an expert and I may be able to access a computer elsewhere to ID one of the links. I'm grateful for your efforts in that I use my tablet at work.

#10 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:02:33 AM

Posted 21 August 2014 - 10:27 PM

OK -

You may need another (even laptop) with an operating system like you had.

 

We need to find someone who is deeper into these -

 

Regards -



#11 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:02:33 AM

Posted 21 August 2014 - 11:52 PM

I have requested that your topic be moved to Malware and Virus removal area for attention by an Expert Only.

You need to do nothing, and you will be notified when an Expert Malware Removal Team Member attends to it.

Just keep Following it -

Regards -



#12 suthrnstar

suthrnstar
  • Topic Starter

  • Members
  • 24 posts
  • OFFLINE
  •  

Posted 22 August 2014 - 12:03 AM

I have requested that your topic be moved to Malware and Virus removal area for attention by an Expert Only.
You need to do nothing, and you will be notified when an Expert Malware Removal Team Member attends to it.
Just keep Following it -
Regards -


Your help is greatly appreciated. And Thank you

#13 myrti

myrti

    Sillyberry


  • Malware Study Hall Admin
  • 33,784 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:At home
  • Local time:06:33 PM

Posted 22 August 2014 - 06:37 AM

Hi suthrnstar,

if you could post a picture of the ransomscreen that would help us identify the infection at hand.

Please read this article and see if the joined explanation on how to boot into safe mode will allow you to remove the infection:
http://nakedsecurity.sophos.com/2014/05/19/android-police-warning-ransomware-how-to-avoid-it-and-what-to-do-if-you-get-caught/

regards
myrti

is that a bird?  a plane? nooo it's the flying blueberry!

If I have been helping you and haven't replied in 2 days, feel free to shoot me a PM! Please don't send help request via PM, unless I am already helping you. Use the forums!

animinionsmalltext.gif

Follow BleepingComputer on: Facebook | Twitter | Google+


#14 suthrnstar

suthrnstar
  • Topic Starter

  • Members
  • 24 posts
  • OFFLINE
  •  

Posted 22 August 2014 - 09:10 PM

Hi, tried all options with the link you provided. I do have two photos of the ransomware site but there doesn't appear to be a way to post them here via my Android phone. Maybe I could send the photos to an e-mail?
No luck with the methods offered on the link

#15 myrti

myrti

    Sillyberry


  • Malware Study Hall Admin
  • 33,784 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:At home
  • Local time:06:33 PM

Posted 23 August 2014 - 02:54 AM

Can you upload them here: http://www.bleepingcomputer.com/submit-malware.php?channel=100

 

regards

myrti


is that a bird?  a plane? nooo it's the flying blueberry!

If I have been helping you and haven't replied in 2 days, feel free to shoot me a PM! Please don't send help request via PM, unless I am already helping you. Use the forums!

animinionsmalltext.gif

Follow BleepingComputer on: Facebook | Twitter | Google+





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users