Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

homeland security virus locked up my computer


  • This topic is locked This topic is locked
8 replies to this topic

#1 bobdull

bobdull

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:05:54 PM

Posted 11 September 2014 - 12:50 PM

hello,
i was referred to your site from friends you have helped.  I appreciate in advance for your assistance.  My computer is locked by a page that looks very official  "Homeland Security" with several other federal agency seals. It states I must wire $300 to a non descript site to unlock my computer. I would then enter a code given when I wired the money and my troubless would end.  It accuses me of copywrite violations, theft and child pornography which I have not done.  I fear it is trying to scare me into paying.  When I spoke with an IT person they told me it sounds like an FBI virus.  Help!  Should I just take it to my IT department?  I am embarassed to be honest.
 
P.S. I was looking at utube videos.

Edit: Moved topic from Windows 7 to the more appropriate forum.~ Animal

BC AdBot (Login to Remove)

 


#2 LiquidTension

LiquidTension

  • Malware Response Team
  • 1,278 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:09:54 PM

Posted 11 September 2014 - 01:02 PM

Hello, 
 
This is a form of malware known as ransomware, and has been around for sometime.
 

Should I just take it to my IT department?

If this is a business machine, then yes, that would be the best course of action. 

 

If not, and this is a personal machine, please tell me the Operating System. 


Posted Image

#3 bobdull

bobdull
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:05:54 PM

Posted 11 September 2014 - 01:20 PM

Thank you for responding.  It is my personal, I was going to take it to my IT department and ask them to help me out. 

It is a Windows 7 Operating System



#4 LiquidTension

LiquidTension

  • Malware Response Team
  • 1,278 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:09:54 PM

Posted 11 September 2014 - 01:26 PM

Hello, 
 
How you proceed is up to you. 
If you wish to continue here, please do the following, and let me know how you get on. 
 
YARWD1t.png.pagespeed.ce.nvhmVeYDe3.png Kaspersky Rescue Disk (CD)
 
Note: You require access to a clean PC and blank CD. If this is not possible, please STOP and I will issue alternative instructions. 
Note: Please print off these instructions, or ensure you have access to them using a different device.

  • Please download Kaspersky Rescue Disk (iso) using your clean PC. 
  • Please download FreeISOBurner and burn the Kaspersky ISO to your blank CD using your clean PC.
  • Upon completion, configure your infected PC to boot from CD/DVD. Instructions on how to do this can be found here.
     
  • Having completed the above steps, boot your infected PC from CD/DVD. 
  • Press any key to enter the menu.
  • Select your language. 
  • Click to accept the End User License Agreement (EULA).
  • Select Kaspersky Rescue Disk Graphic Mode.
  • Click the Start button located in the left bottom corner of the screen.
  • Run Kaspersky Windows Unlocker.
  • Note: If you cannot find Kaspersky Windows Unlocker:
    • After clicking the Start button, click Terminal, type: windowsunlocker, choose 1 - Unlock Windows, press Enter.
  • Once run, click the Start button to start Kaspersky Windows Unlocker. 
  • Click on the My Update Center tab, followed by Start to download the latest update.
  • Click the Object Scan tab.
  • Put a check next to C:\ and any other local drives.
  • Click Start Objects Scan.
  • Quarantine malware that is found.
  • Upon completion, click the Start button located in the left bottom corner and click Shut down the computer.
  • Remove the Kaspersky disc and switch on your PC. Reverse the changes made to your PC boot order. 
  • Does the PC boot normally

Posted Image

#5 bobdull

bobdull
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:05:54 PM

Posted 11 September 2014 - 01:32 PM

Thank you, unfortunately I am not able to burn a CD at this time. I do have access to clean PC and flashdrive


Edited by bobdull, 11 September 2014 - 01:33 PM.


#6 LiquidTension

LiquidTension

  • Malware Response Team
  • 1,278 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:09:54 PM

Posted 11 September 2014 - 01:37 PM

Hello, 

 

Thank you, unfortunately I am not able to burn a CD at this time. I do have access to clean PC and flashdrive

In this case, I suggest posting a topic in the Malware Removal section, where you will more than likely be asked to run FRST in the Recovery Environment. 

 

There are alternative options that only require the use of a USB drive (and are permitted in this section), but I think you would be better off doing the above. 


Posted Image

#7 bobdull

bobdull
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:05:54 PM

Posted 11 September 2014 - 01:50 PM

OK will go there.

Thanks a lot for your help  



#8 LiquidTension

LiquidTension

  • Malware Response Team
  • 1,278 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:09:54 PM

Posted 11 September 2014 - 01:53 PM

You're welcome. 

Good luck.


Posted Image

#9 Orange Blossom

Orange Blossom

    OBleepin Investigator


  • Moderator
  • 37,106 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Bloomington, IN
  • Local time:04:54 PM

Posted 11 September 2014 - 02:38 PM

Hello.  I see your new topic is here: http://www.bleepingcomputer.com/forums/t/547794/homeland-security-virus-locked-up-my-computer/ and has already been picked up.  To avoid potential confusion, I'm closing this topic.

 

Orange Blossom :cherry:


Help us help you. If HelpBot replies, you MUST follow step 1 in its reply so we know you need help.

Orange Blossom

An ounce of prevention is worth a pound of cure

SpywareBlaster, WinPatrol Plus, ESET Internet Security, NoScript Firefox ext.


animinionsmalltext.gif




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users