Your computer has been locked. Fake FBI warning (virus)

andy | August 21, 2012

FBI, a governmental agency belonging to the United States Department of Justice is a decent organization. It has nothing to do with spreading the message you see depicted at the screenshot below. If your computer has been locked supposedly by FBI warning you should understand that it is totally fake. Right now there are following search queries in the search engines – FBI ransomware, FBI Greendot MoneyPak virus, or, in some cases, FBI virus. However, this is the mistake to think that this screen locker developed by the team of cyber hackers has to do with FBI agency of the United States. Again, we urge you to be extremely careful when you see such scary messages coming up in front of your screen. Remember that they are the products of online fraudsters who can’t wait until you share some funds with them. In particular, here is what the message actually says:

All activity of this computer has been recorded.
If you use a webcam, videos and pictures were saved for identification.
You can be clearly identified by resolving your IP address and the associated hostname.
Your computer has been locked!
Illegally downloaded materials (MP3’s, Movies or Software) have been located on your computer.
By downloading, those were reproduced, thereby involving a criminal offense under Section 106 of the Copyright Act.
The downloading of copyrighted material via the Internet or music-sharing networks is illegal and is in accordance with Section 106 of the Copyright Act subject to a fine of imprisonment for a penalty of up to 3 years.
Furthermore, possession of illegally downloaded material is punishable under Section 184 paragraph 3 of the Criminal Code and may also lead to the confiscation of the computer, with which the files were downloaded.
To unlock your computer and to avoid other legal consequences, you are obligated to pay a release fee of $200. Payable through GreenDot Moneypak. After successful payment, your computer will be automatically unlocked. Failure to adhere to this request could involve criminal charges and possible imprisonment.
To perform the payment, enter the acquired GreenDot Moneypak code in the designated payment field and press the “Submit” button.

Do not trust this misleading and faulty notification. It comes from the pack of online hackers who simply want to earn money by means of scaring and deceiving you. Do not pay any money as a supposed penalty or fine. Download our recommended software to protect your PC from infections like the one you see depicted at the screenshot. Finally, to get rid of this message and to unlock your PC please follow these guidelines in this post – http://trojan-killer.net/pc-infected-ransomware-virus/

Ransomware automatic remover:

Alternative solution to unlock your computer through system restore:

58 Comments

  1. Candace says:

    Easy way to solve this problem… Turn on your computer and press the F8 key before Windows starts.
    Click Repair Your Computer. Click System Restore (System Restore uses
    restore points to return your system files and settings to an earlier
    point in time (before fake FBI system block) without affecting personal files). If you’re prompted for
    an administrator password or confirmation, type the password or provide
    confirmation. Wait until restoration is done and restart computer.
    Everything should be back to normal. Hope this works for everyone cause it
    worked for my Windows 7. Good luck : )

  2. paul says:

    Solution worked quickly, simply and perfectly, even when employed by an unsophisticated user like me.

  3. Rob says:

    Holy smokes, thanks! Worked for me as well! I thought I was hosed. I saw a local news article on this, but, I could not find it.
    Thanks again! BIG TIME!

  4. Rich says:

    Restoring to an earlier restore point did not work for me. After searching around in safe mode, I found a different implementation. A fake file – ctfmon.exe – was created in the startup directory – %AppData%\Roaming\Microsoft\Windows\Start Menu\Programs\Startup. I knew because the modified date was earlier today. I deleted that file, and now everything is OK.

  5. Lee says:

    tried presssing F8 and it did not work for me. Computer still locked

  6. prudencio says:

    al encender mi laptop aparece el anuncio de fbi y no me tiempo de poner f8 ,que puedo hacer

  7. TBone says:

    The F8 with the system restore worked for me, running windows 7 – thanks for the advise, huge help! The Geek Squad at Best Buy quoted $200.00 to resolve the problem. The G-Sqaud is in on this!!

  8. Julia says:

    Dear TBone,
    We are really happy to be usful for you. If there are any other questions, make sure to contact us. We will gladly help you.
    Best regards,
    Trojan Killer customer support team.

  9. brian says:

    locked and cant seem to get these remedys to work

  10. Chuck says:

    Thanks Candace..it worked for me on my Windows 7 as well!!!! Very simple solution

  11. Jay Beans says:

    Brilliant! Thank you, Candace! I received a message that the sys restore failed; however, I restarted the computer again and when the desktop loaded a pop-up appeared saying the restore was successful and sure enough, it was. Thanks again!

  12. Michi says:

    Omg thank u sooooo much it worked….I was about to lose my mind……thanks candace….

  13. sue says:

    It totally worked for me. Thank you Candace

  14. Jacobus says:

    Thank you so much for the advise, it just worked perfect for me.

  15. Donald Brown says:

    The ‘FBI’ ransonware has infected a friend’s computer. It will not allow booting into any type of Safe mode. If you try a Safe mode, it gives a blue screen stating that the computer was not shut down properly and if this has occurred before, etc.

    I’ve tried the Windows Defender Offline boot disk, it found 6 files and deleted them. I rebooted the system and it was back.

    Any ideas?

  16. MiMI says:

    Absolutely worked! I have windows 7. Thank you. It’s was so easy.

  17. andreas says:

    Donald Brown,

    Please, try this manual removal guide:
    http://trojan-killer.net/pc-infected-ransomware-virus/

  18. Rich says:

    Thank you so very much guys. this worked great. time to buy a virus protection software

  19. hakim says:

    Hi, I got the same problem but i have an old pc w/ xp windows i need help. plz .

  20. thompson says:

    hey Candace!!! u r genius !!!

    i tried to fix this problem last 5 h

    but you can solve this just 5m !!!

    thank you!!!

  21. dolphins david says:

    My experience was identical to that of Jay Beans!

  22. Mason says:

    I have a Pavilion dm4. How do I get it to press the f8 key? Do I use the fn button? I have tried just pressing it, but it didn’t work.

  23. Sylvester says:

    I’m an IT professional and I’ve just removed this off my sisters computer and the above method didn’t work for me, so what I did was have her go into safe mode without networking and go into one of her other admin accounts, navigate through the user folder to the infected profile and pull her pics and docs from that profile to her clean profile profile. Once she did that I had to delete the infected profile and create another with a different name. The virus seems to be profile specific and needs an internet connection to be active. I tried safe mode with networking and the page popped up, but with regular safe mode the page popped up saying this page can not be displayed and check your internet connection….. FYI

  24. Mike says:

    Rich, (Oct. 4 posting), removing the cftmon line worked while the repair windows program did not. THANK YOU! You are a lifesaver. Really, thank you so much dude.

  25. Tyler says:

    @ TBone-

    I think you’re right about that.
    Odd that Geek Squad charges the same amount to resolve the issue as the fauxgram that your computer is infected with.

  26. Edwin says:

    Mine had an audio file with it but I system restore my laptop and now it’s gone…for now GOD I HATE hackers even more thanks to it becuase now my internet provider won’t work ><

  27. Nate says:

    I have one of the oldee versions of XP. I push F8 and i try to run in safe mode but nothing happened it brought me back to the screen and said it it wouldn’t work. I tried to do it again with safe mode with networking same thing happened. Any ideas? Please save me

  28. Stephen Vajda says:

    To avoid the FBI screen I turned off the computer and removed the network cable, i.e. cable from the router. Then I restored my system to a previous break point. Any idea how to avoid this in the first place?

  29. lynn says:

    System restore worked!!! Thanks!!!

  30. Dad of 15yo says:

    I hope this works it scared the hell out of me, I knew my 15yo was surfing questionable sites, i warned her about viruses

  31. nicole says:

    Yes!!! Candace u are amazing! It worked like a charm

  32. Jesse James says:

    Candace or anybody,

    what is the password(s) or confirmation you enter when Administrator prompts you

    Jesse

  33. Jeremy says:

    I tried rebooting in safe mood,as soon as it opens it shuts down..what do I do?

  34. Michael says:

    Well i didnt follow specificly ur advice but however i was hopeing i was finding some thing else to do and beside did anyone else see the charges on the side of thepage when it opened ?just wodering

  35. mom says:

    Does this work on Windows 8. My daughters laptop is locked,I don’t know how to open it in safe mode and F8 isn’t working…

  36. Mom says:

    My daughter’s is locked and she has windows 8 and F8 isn’t working any suggestions?

  37. Jesse James says:

    Can anybody out there know what to say or enter when the “system restore” asks for “password” or “confirmation” from the Admin.question on this system???

  38. munster says:

    I got that too, its a trojan, turned off the pc, disconect modem line, start pc on the pc botton and keep pressing f8 until safe mode comes on, then restored to a former date, it worked, then run anti virus program, found 6 sever items in there, deleated them,when this happened it said send 300 dollars via pay pal to restore pc to on line, its a total scam fake.

  39. PJ says:

    None of this is working. Running WinXP…safe modes will not work, will not load from CD or flashdrives, disconnecting the Inet cable bought me more time before the lock screen kicks in but still I am not able to get anything running or typed that gets a chance to take hold before the virus locks down the machine. Any Help?

  40. steve says:

    If you are having this problem, just follow instruction from Cnadace…………..F8 ……….. thank you so much Candace……very easy to fix

  41. MIrko says:

    I had the same problem with FBI Moneypak green dot virus scam for $200
    on Windows 7 and your comment helped us to remove the malware! Thank you so much! We restored PC to an earlier time through safe mode and it works now. Thanks again!

  42. joe says:

    Thank you for the simple yet extremely effective tips you made a crappy situation easily fixed.

  43. korean says:

    A passerby.
    Recently got this virus, system restore knew no avail.
    The recent virus will not work. However, the informaton you gave us about the ‘Safe Mode’ seems to be the way.
    Seems to be a lot of help. Thank you.

  44. Artemis says:

    For those that said the remedy didn’t work. I had to reboot and ponce on the f8 key quite a bit to get it to kick in. Tap right from the start many times!!! I rebooted 4 times to tap and try And finally got to the repair menu.

  45. Ted says:

    Thank-you Candace!! Your solution was simple and effective on my windows 7 machine. Greatly appreciated!

  46. jolene says:

    I have a brand new gateway computer with windows 8. Help F8 doesn’t work.

  47. Tony says:

    Thanks, worked perfectly. Yo are the best.

  48. Tony says:

    Thanks, worked perfectly. You are the best

  49. keith says:

    i thought i was in sooo much trouble, i restored my computer and now that white screen left. thank you, and thank god.

  50. Margaret says:

    Worked like a charm. I too received the message that the system restore failed, but when the pc restarted it was successful. Thank you sooo much!
    I love you all…

  51. Dom says:

    Thank you so much ! It worked ! I was scared as heck ! Lol

  52. John says:

    I just pressed CTL-ALT-DEL and closed Firefox using the task manager. Ran Malwarebytes straight away and no virus found

  53. John says:

    I am wondering why you have not published my comment

  54. ashley says:

    Thank you soo much!! This worked for me. I had got on the interent on the computer and it had popped up. As some one that doesn’t watch the news and hasn’t heard of the scam I started to freak out. Thankfully with your advice I had got my computer back to normal. Thank you again.

  55. a says:

    I got this message on my pc but my computer never locked up. Should I still be worried about the virus?

  56. Nero I says:

    How do I know that the message I received was a trojan?
    Is it even possible for it to be real?
    It seems pretty official and it has the seal from Interpol and everything.

    If it’s a virus, I obviouly want to remove it, but if it is real I need to know soon to pay the fine and avoid getting into trouble.
    Thanks

  57. les says:

    on windows 8 try going to apps and type in restore do a complete restore of your computer than restart

  58. Caitlin says:

    Thanks so much, my computer is only a year old and I only use it or school so when this happened I was in total panic!! thanks to people like you I didnt loose $300 to some scamming idiots!

1 Trackbacks

Leave a comment

*