PDA

View Full Version : Problems with "locked" computer



tremendous
29-06-2012, 02:46 AM
Hi! I have problems with my PC. I says to be locked and I have to pay $100 to unlock it. I know that from a message displayed on my desktop by FBI. I really doubt it that this warning is really sent by FBI, because there is no reason for this to be so.

Please, let me know what to do, because I cannot do anything on my PC without the annoying message on top of everything. Thanks

stratex5
29-06-2012, 06:23 AM
Take it to a repairer to get fixed.

8ftmetalhaed
29-06-2012, 09:14 AM
It's spyware. Ignore it, and one of us can give fixing it a go. If you're able to, download Rkill, Malwarebytes AntiMalware, Spybot Search and Destroy, Teamviewer, Hijackthis, and one of us can help you out further. You may have to boot into safe mode to install them (reboot it, press f8 when it's starting up, then select 'safe mode' from the menu.

rkill - http://download.cnet.com/RKill/3000-8022_4-75221743.html
MBAM - http://download.cnet.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html
Spybot SnD - http://www.safer-networking.org/en/download/
Teamviewer - http://www.teamviewer.com/en/download/index.aspx
HJT - http://sourceforge.net/projects/hjt/

Nick G
29-06-2012, 09:44 AM
Its spyware. Boot into safe mode with networking (press and hold f8 while booting up, and install the programs 8ftmetalhaed linked to. Post the hijack this log here, and one of us will have a look at it. Also get CCleaner and disable some programs from running on startup. Are you using an antivirus?

EDIT. Also run teamviewer, pm me your password and id, and I'll have a look at it.

wainuitech
29-06-2012, 10:18 AM
Just a heads up nick -- Going from memory you have to have 10 posts to PM anyone, so tremendous may not be able to send the codes ( yet)

Nick G
29-06-2012, 10:25 AM
Just a heads up nick -- Going from memory you have to have 10 posts to PM anyone, so tremendous may not be able to send the codes ( yet)
Really? Didn't know that, I guess I got 10 posts pretty quick :p

I guess the teamviewer will have to wait, unless tremendous really wants to, in which case he can send an email with the details in it.

tremendous
29-06-2012, 09:12 PM
Oh, only, is Teamviewer a security tool? Can I use it to clean my PC in future? If it is effective I `ll try it. Thanks!

mikebartnz
29-06-2012, 09:32 PM
Teamviewer is a program where someone can log onto your computer and fix any problems you have but don't let every Tom Dick and Harry do so.
Speedy is the best here for it.

Bryan
29-06-2012, 09:33 PM
Teamview allows someone else to get into your computer with your authority. It will create a userID and passsword to let the helper in.

Firstly though go to Hijackthis and create a log. Post it to PressF1 so we can look at it and advise you what to do!

Nick G
29-06-2012, 09:40 PM
Teamviewer is a program where someone can log onto your computer and fix any problems you have but don't let every Tom Dick and Harry do so.
Speedy is the best here for it.
Speedys on hols, so he's out. I promise I'm not called Tom, Dick, or Harry :D.

The thing with teamviewer is everytime time it is opened up, you get a different password, so you can only gain access once with that password. Also, you both see what the other person is doing and still use it yourself, so you can always take control back. If you do let me have a look, I'll tell you what I'm about to do in the chat box before I do it, so you will know what I'm going to do.

EDIT. Yes, I have used teamviewer before :p

Speedy Gonzales
02-07-2012, 06:36 PM
Probably wont matter if you install teamviewer and copy/paste the id and password in here. Then I could have a look. Since next time you run it it'll change (unless you give it a password so it stays the same). When you say its locked can you get into windows tho?? It maybe ransomware malware. If its asking for money

Chilling_Silence
02-07-2012, 08:02 PM
I think it's the FBI... Have you been visiting websites they wouldn't approve of? ;)

wainuitech
02-07-2012, 10:31 PM
Its quite easy really, you start in safe mode, remove a certain reg key and one exe file and that allows windows to run normally, then you can run anti-malware programs to check for other infections.

Did one of these a week ago and found quite a few other infections as well.


I'm not posting the reg key because removing the wrong one can cause problems if a person doesn't know anything about the registry.