Internet Crime Complaint Center virus. Removal tool

andy | November 27, 2012

The warning that you see depicted below supposedly coming from the Internet Crime Complaint Center of the Department of Federal Bureau of Investigation is a serious ransomware virus infection. This is a brand new desktop (screen) locker that completely hijacks the infected PC with the scary notification, locks the system utterly and then asks for a ransom amount to be paid to unlock it. By the way, the sum hackers want users to pay is quite a large one – 500 USD. They want deceived and trick people to donate this money in their favor through indication of special GreenDot MoneyPak voucher (PIN) codes in the respective section of the locking background. And, or course, the fake ICCC warning comes with quite a serious accusation with regard to users. Here is what the condemnation reads:

Internet Crime Complaint Center virus

Internet Crime Complaint Center
Department of Federal Bureau of Investigation
All activity of this computer is being recorded using audio, video and other devices.
Saved data will be used for identification.
Illegal activity report is sent to government agencies.
Threat of prosecution reminder
You have been violating Copyright and Related Rights Law (Video, Music, Software) and illegally using or distributing copyrighted content, thus infringing Article 1, Section 8, Clause 8, also known as the Copyright of the Criminal Code of United States of America. Article 1, Section 8, Clause 8 of the Criminal Code provides for a fine of two to five hundred minimal wages or a deprivation of liberty for two to eight years.
You have been viewing or distributing prohibited pornographic content (child porn, zoofilia, etc.) thus violating article 202 of the Criminal Code of the United States of America. Article 202 of the Criminal Code provides for a deprivation of liberty for four to twelve years.
Pursuant to the amendment to the Criminal Code of the United States of America of May 28, 2011, this law infringement (if it is not repeated first time) may be considered as conditional in case you pay the fine to the State.
Fines may only be paid within 72 hours after the infringement. As soon as 72 hours elapse, the possibility to pay the fine expires, and a criminal case is initiated.

You should be warned ahead of time of this infection. Don’t trust any statement that you see in the text of the ransomware locker. Ignore anything it tells you completely and seek for assistance to successfully get rid of this threat from your system immediately. We can offer such help to you. Simply follow the removal guidelines carefully as stipulated below. If you have any questions or difficulties deleting this scam please get in touch with us immediately via all available customer support channels at our site.

Ransomware unlocking procedure

Note! This tutorial is effective for all GreenDot MoneyPak, Ukash and Paysafecard ransomwares.

  1. Restart your computer and press F8 while it is restarting.
  2. Choose safe mode with networking.
  3. safe mode with networking

  4. Press Start menu and select Run, or press [Win]+R on keyboard.
  5. Run command

  6. Type msconfig
  7. msconfig

  8. Disable startup items rundll32 turning on any application from Application Data.
  9. Restart your system once again.
  10. Scan your system with GridinSoft Trojan Killer to identify file and delete it.

Some versions of these viruses disable all safe modes, but give a short gap that you can use to run anti-malware programs. Then do following:

  1. Reboot normally.
  2. Click Start and choose Run.
  3. Enter the text specified in the quotation below. If malware is loaded, just press Alt+Tab once and keep entering the string blindly then press Enter.
  4. http://trojan-killer.net/download.php

  5. Press Alt+tab and then R (letter) a couple of times. The process of ransomware virus should be killed after you succeed to download, install our recommended software and scan your PC with it.

Download GridinSoft Trojan Killer for thorough system checkup

6 Comments

  1. Irina says:

    Andy! Please help! Nothing seem to work to get rid of this horrible virus! I’ve tried all your optione. I seem to only be able to boot normally and then have 15-30 sec before the virus takes over …. please help me!

    I am on Houston time. I hope to hear from you tomorrow morning (December 24) my time.

    Thank you so much in advance for your help :-)
    Irina

  2. J says:

    Your solution doesn’t work for my case. Regardless which type of the safe mode I started Windows XP, the screen is always locked up by this virus.

  3. Homie says:

    This happened to me last night and was a nightmare. I was able to boot with safe mode, but when I tried to bring up the command prompt, the virus completely locked my computer down, it was then loading even in safe mode, and with or without an internet connection. My only solution was to press F8 upon start up, and restore my computer to an earlier time, which happened to be the day prior. It worked and it got rid of it, but then I had to reinstall firefox because it wouldn’t let me clear history, as I wanted to clean my system as best as possible. I’m a little worried it might be hibernating somewhere in my system.

  4. Usama says:

    For those of you who’ve got infected by the nastier version of this virus in which safe more or safe mode with networking doesn’t work, one solution is to get a bootable windows dvd, boot your computer from that dvd, choose to repair your system, from there choose to do a restore to an earlier point.
    It worked for me.

  5. paul says:

    And for all those who have the latest variation of this virus DO NOT bother with spyhunter or any of the other crap as it won’t work without an internet connection. Which the new version of the virus blocks completely.It also stops the use of “system restore” . Stupid me paid for the spyhunter malware finder … it found the virus alright but doesn’t remove it until it’s activated… again it won’t do that because All internet access is blocked.

  6. Megan says:

    I have tried the options listed here. This virus has hijacked my computer even in all safe modes. Need help.

Leave a comment

*