Category: 2-World

If you receive FBI Anti-Piracy Warning message on your computer, you should realize that it is not the real FBI Anti-Piracy Warning from the Federal Bureau of Investigation. The FBI will not only send you notification like that and ask you for $200 fine. If you did violate the laws and related policy, you will receive phone call from the police but not the stupid message on your computer. This lock screen, which is displayed below, will be shown when you login to Windows and will not allow access to the Windows desktop, your files, or your applications. Obviously, the FBI Anti-Piracy Warning is a kind of virus which we call it ransomware. This virus will lock your computer system and scare you that you have to pay a $200 fine to the account they mentioned if you want to release your PC system.  Never believe the fake notification from the virus.  The task of top priority is to remove the FBI Anti-Piracy Warning virus. Here is the tips from YooSecurity Official Blog which does work for removing the FBI virus. YooSecurity is a branch company of the YooCare (http://www.yoocare.com) that is the most famous PC online tech support of the world.

The experts from YooSecurity are well trained for years and they know how to get rid of the PC threats safely and manually.  If you keep to stay focus on our site you will learn more guides about how to remove virus yourself.

 

The text of this lock screen is:

FBI Anti-Piracy Warning
All activity of this computer has been recorded.
If you use a webcam, videos and pictures were saved for future identifications.

Your Computer has been locked!
Illegal downloaded material (MP3's, Movies or Software) has been located on your computer.

Unlock your computer:
To unlock your computer and yo avoid other legal consequences you are obligated to pay a fine of $400. Payment of the fine is done by GreenDot MoneyPak payment voucher. After payment is made your computer will be unlocked and legal actions will not be taken.
Failure to comply with FBI Anti-Piracy warnings could result in criminal charges and possible imprisonment up to 3 years in country jail.

The text of the recorded audio alert is:

FBI Warning. Your computer is blocked for violation of federeal law.

As you can see this is a computer infection and not an actual alert from the FBI. Therefore, please do not purchase a MoneyPak and send the ransom payment. The legitimate FBI Anti-Piracy warning is included in some movie and other copyrighted works. Such warning just warns about the copyright and does not forces to pay any ransom. The ransomware works differently and demands the payment using pre-paid cards. No government institution would do such thing without court order and not in person. Instead you should use the removal guide below to remove this infection and other malware like ICE Cyber Crimes Center, FBI Moneypak virus  from your computer for free.

Step 1: Reboot computer and hold down the F8 when restarting. Press this key continuously at startup to get to Windows Advanced Startup menu. Use arrow keys to select “Safe Mode With Networking Working”:

Step 2: Press Ctrl+Alt+Del keys to open the Task manager to stop the progress of Fake Green Dot MoneyPak FBI Anti-Piracy Warning Virus Scam. Because the name will be changed fast, it will be displayed with different name with random letters.


Step 3: Delete all the files and Windows Registry entries related to Green Dot MoneyPak FBI Anti-Piracy Warning Virus Scam

Login to profile in which you are getting FBI warning virus…
Goto my computer
Then press ALT button once
Goto tools on menu bar
Goth select Folder options…
Click on view tab
Select Show hidden files, folders, and drives
Click ok button

HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Random.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Random.exe

Associated FBI Anti-Piracy Warning MoneyPak Ransomware Files:

%CommonAppData%\<random>
%CommonAppData%\<random>.exe
%CommonAppData%\<random>\
%CommonAppData%\<random>\arr-next.gif
%CommonAppData%\<random>\bg.wav
%CommonAppData%\<random>\b-sep.gif
%CommonAppData%\<random>\btn.png
%CommonAppData%\<random>\btn-sq.gif
%CommonAppData%\<random>\cam-place.bmp
%CommonAppData%\<random>\card.jpg
%CommonAppData%\<random>\green-l.png
%CommonAppData%\<random>\green-r.png
%CommonAppData%\<random>\ie7.css
%CommonAppData%\<random>\larr.gif
%CommonAppData%\<random>\lock.png
%CommonAppData%\<random>\locked-text-en.png
%CommonAppData%\<random>\logo-img.png
%CommonAppData%\<random>\logo-text.gif
%CommonAppData%\<random>\main.html
%CommonAppData%\<random>\mainbg.gif
%CommonAppData%\<random>\mcafee-lock.png
%CommonAppData%\<random>\money.gif
%CommonAppData%\<random>\moneypak.png
%CommonAppData%\<random>\payments-en.png
%CommonAppData%\<random>\side-block.png
%CommonAppData%\<random>\step.gif
%CommonAppData%\<random>\step.png
%CommonAppData%\<random>\style.css
%CommonAppData%\<random>\wait.html
%WinDir%\<random>.exe

File Location Notes:

%Windir% refers to the Windows installation folder. By default, this is C:\Windows for Windows 95/98/ME/XP/Vista/7 or C:\Winnt for Windows NT/2000.

%CommonAppData% refers to the Application Data folder for the All Users Profile. By default, this is C:\Documents and Settings\All Users\Application Data for Windows 2000/XP and C:\ProgramData\ for Windows Vista/7.

%CommonAppData% refers to the Application Data folder in the All Users profile. For Windows XP, Vista, NT, 2000 and 2003 it refers to C:\Documents and Settings\All Users\Application Data\, and for Windows Vista/7 it is C:\ProgramData.