Malware Removal Instructions

  • Subscribe to our RSS feed.
  • Twitter
  • StumbleUpon
  • Reddit
  • Facebook
  • Digg

Wednesday, 6 March 2013

Know the Enemy – Identifying & Removing the FBI Virus

Posted on 12:48 by Unknown
What is the FBI Virus?

Also known as Reveton ransomware, the FBI virus is a form of malware - malicious software that criminals install on your computer without your consent. It provides criminals with the ability to freeze your computer from a remote location. Your computer screen is then filled with a pop-up window displaying a warning that your computer is locked by a local law enforcement agency, such as the FBI or Metropolitan Police, please read how to remove FBI Moneypak virus.

It demands that you pay a fine, claiming that you and your computer have been involved in illegal activities, such as the downloading and sharing of copyrighted files. New versions of the virus can activate your webcam and take a picture of you to display alongside the warning. Some versions now contain a dynamic configuration module which allows the hacker real time control of your browser. They can use this to create interactive pop-up boxes and responsive forms that request further personal information, such as your bank details and date of birth.




How does the FBI Virus work?

The main strategy behind the FBI virus is scare tactics and holding the victim’s computer to ransom. By persuading the victim that they are in serious trouble with the authorities the attackers hope to gain not just a one off payment but also intimidate the victim into providing payment details and other personal information. If the victim does comply and pays the fine as requested, this does not mean that the virus will be removed– the lock out screen may remain or the virus may appear to be removed but instead go into hiding and exploit other vulnerabilities using a wide range of malicious tactics.

It may be easy to assume as a knowledgeable, and security conscious, computer user that you would immediately identify this as a virus and not fall prey to ransomware. However the screenshots and tales circulating the internet show this to be convincing and threatening. By displaying an image of the victim on their screen or creating responsive pop-up boxes it becomes even more intrusive and damaging than simply locking the victim out of their computer. Even if the victim is aware that this was a scam, and not actually the FBI, the feeling of a hacker having control of your computer, capturing an image of you using your own technology and live communicating with you through a pop-up box could be considered akin to a burglar physically breaking into your home.

Detecting Infection

The FBI virus is usually installed when you click on a malicious attachment in an email or when you click on a malicious link in an instant message, email or a message on a social networking site. It could even be installed when you unknowingly pay a visit to a malicious website. When your computer becomes infected with the virus, your personal material and computer system’s functionality are put at risk. If your infected computer is switched on and connected to the Internet, the virus will have complete control over your computer and all of the data stored on it.

In addition to presenting you with an “official” warning on your frozen computer system, the FBI virus is likely to bring less obvious malware. It has been reported by the, genuine, FBI that Reveton malware is being combined with Citadel, an advanced and powerful malware that is particularly difficult to remove. If you believe that your computer has been infected by a malicious program, you should run a full system scan using trusted antivirus software.

Removing the FBI Virus

To remove the FBI virus and other types of malicious software that may be installed on your computer, you will need to have an up-to-date antivirus program on your computer. While it may be possible for you to manually remove the FBI virus, and there are several sites including this one which provide instructions on how to do this, this could result in permanent damage to your system, particularly if you are not completely confident in how to go about this.

Thus, manually removing the FBI virus is only recommended if you are confident in your ability and willing to sacrifice everything should it go wrong. For the majority of cases total removal of the FBI virus, and possibly Citadel malware, requires reinstalling your operating system from a rescue disc or master boot record. Hopefully you will be have been vigilant in your scheduled data backups and won’t suffer too much loss. It is important to remember that this virus, or any form of ransomware or malware, could have gained access to your passwords. Once you have successfully cleared your computer of infection you should ensure your accounts have not been compromised and change all passwords to something completely new, unique and, hopefully, uncrack-able. If you don't know how to create a strong password, please read this article.

Preventing FBI Virus Infection

As we all know the best cure for anything is prevention. In order to prevent infection from the FBI virus or any other form of malware, it is advised to avoid clicking on links to suspicious websites, opening spam email messages, visiting adult websites or downloading and using pirated software. It is also strongly recommended to install a reputable antivirus program, such as Kaspersky, on all your internet-enabled devices. Take the time to make a rescue disc or USB drive; you never know when you might need it.

Email ThisBlogThis!Share to XShare to FacebookShare to Pinterest
Posted in Ransomware | No comments
Newer Post Older Post Home

0 comments:

Post a Comment

Subscribe to: Post Comments (Atom)

Popular Posts

  • What is wrtc.exe and how to remove it?
    wrtc.exe - by Perion Network Ltd. What is wrtc.exe? wrtc.exe is a part of IncrediMail software, digitally signed by Perion Network Ltd. This...
  • Remove ShopperReports (Uninstall Guide)
    ShopperReports is defined as adware or a potentially unwanted program that displays marketing related results in a side pane of the browser...
  • Trojan.MBRlock, Внимание! Ваш компьютер заблокирован
    Trojan.MBRlock is a very disturbing piece of malicious code which infects the master boot record (MBR) and prevents Windows from starting. ...
  • False Positive: Ikarus and Comodo detecting TDSSKiller as a Trojan horse
    This awkward moment when you realize that your favorite rootkit removal utility is detected as malware. I probably wouldn't even have no...
  • Remove RiskTool.Win32.BitCoinMiner (Uninstall Guide)
    RiskTool.Win32.BitCoinMiner is a risk tool or potentially unwanted application that may use your computer's resources to generate bitco...
  • Remove Rattlingsearchsystem.com (Uninstall Guide)
    Rattlingsearchsystem.com is a ZeroAccess/Sirefef rootkit-related browser hijacker that redirects users to shady websites while searching on...
  • Remove TR/ATRAPS.Gen2, removal instructions
    Cyber crooks and third parties that buy stolen data are increasingly using more and more sophisticated techniques, in a variety of different...
  • Remove Ask Search and Ask Toolbar (Uninstall Guide)
    Ask Search and Ask Toolbar are very often incorrectly classified as virus/spyware that may cause search redirects. The majority of us pref...
  • How to remove 'TidyNetwork' adware virus from your computer
    As internet users most of us have seen those irritating little pop-up windows that are advertising something that we normally have little or...
  • Remove Windows Attention Utility (Uninstall Guide)
    Windows Attention Utility is a rogue security application that generates misleading warnings about nonexistent viruses and attempts to lure...

Categories

  • Adware
  • Answers
  • Antivirus software
  • Browser Hijackers
  • Cloud Computing
  • Fake Alerts
  • Giveaways
  • Hoax
  • How-To
  • IaaS
  • Internet
  • Malicious websites
  • Malware
  • PaaS
  • Parental Controls
  • Passwords
  • Phishing
  • Process Information
  • Ransomware
  • Rogue programs
  • Rootkits
  • SaaS
  • Security Advisories
  • Spam
  • Spyware
  • Trojans
  • Viruses
  • Web Browsers
  • Worms

Blog Archive

  • ▼  2013 (173)
    • ►  December (6)
    • ►  November (13)
    • ►  October (11)
    • ►  September (20)
    • ►  August (4)
    • ►  July (17)
    • ►  June (31)
    • ►  May (25)
    • ►  April (15)
    • ▼  March (17)
      • False Positive: Ikarus and Comodo detecting TDSSKi...
      • Remove Price Peep (Uninstall Guide)
      • Remove Solid Savings (Uninstall Guide)
      • Identity Theft Protection – How to Stop Your Life ...
      • Remove PC Fix Speed and 24x7 Help (Uninstall Guide)
      • This website has been blocked for you! removal ins...
      • Remove Why do I see this page? virus - Attention R...
      • AVASoft Professional Antivirus Firewall Alert remo...
      • Remove Ukash virus
      • Remove Department of Justice virus
      • How to Remove AVASoft Professional Antivirus – AV...
      • Remove System message - Error Seek popup and relat...
      • Remove Chitka pop up ads, removal instructions
      • Remove Win 7 Security Cleaner Pro, removal instruc...
      • How to Remove 22find
      • How to Remove Disk Antivirus Professional (Uninsta...
      • Know the Enemy – Identifying & Removing the FBI Virus
    • ►  February (7)
    • ►  January (7)
  • ►  2012 (86)
    • ►  November (2)
    • ►  October (4)
    • ►  September (6)
    • ►  August (6)
    • ►  July (11)
    • ►  June (1)
    • ►  May (5)
    • ►  April (7)
    • ►  March (7)
    • ►  February (17)
    • ►  January (20)
  • ►  2011 (239)
    • ►  December (8)
    • ►  November (18)
    • ►  October (21)
    • ►  September (24)
    • ►  August (28)
    • ►  July (32)
    • ►  June (16)
    • ►  May (23)
    • ►  April (15)
    • ►  March (16)
    • ►  February (9)
    • ►  January (29)
  • ►  2010 (2)
    • ►  December (2)
Powered by Blogger.

About Me

Unknown
View my complete profile