Help Virus Locked up pc?

Question

Was watching a show and then pc reset and this message now appears have no Idea how to remove it and cannot get pc into safe mode here is the message
Warning!
Your PC has been locked due to illegal activities performed from your PC. You visited sites with pornographic and child pornography content. Also your PC includes pornographic video files. Thereby you break the laws of the United states of america. To Unlock the computer is necessary to pay 30$ fine The payment must be made within 24 hours
if you do not make the payment then your ip address and personal data will be transmitted to the police payment is to be made by moneypak greendot you can buy moneypak greendot in walmart,walgreens,cvs rite ate kamart kroger and mei jer 7eleven you must send money pak code to [e-mail] you will recieve unlock code after that after payment receiving your pc will be immediatelly unlocked.

I know its a scam just wanna know how to get rid of it theres no porn on my pc and wasnt on a porn site was

What happens is I start pc it gives a few seconds the compaq logo comes on then the message ive done the holding of f8 the f8 mashing cant get into boot menu cant do recovery either any help would be awesome

Answer 1

Master Boot Record virus. You need to re-write your MBR to clear the problem to allow booting. Once the MBR is re-written, I'd hook the suspect disk to a known clean system for scanning with multiple anti-malware and AV programs. When it's hooked up to a known clean system, copy off all your data (documents, pictures, tax returns, etc) just in case.



There are some sources that claim the only way to ensure there are no traces of the malware present is to wipe the drive and reinstall the OS and all your programs.



For what it's worth, here is the information for moralspolice.net:

Registrant:

Johnsons LLc

Erik Samuil ***********@email.com)

67 Road, 23

Bagam city

Illinoys,00456

BS

Tel. [phone]

Fax. [phone]



And the nslookup information:

> set type=all

> moralspolice.net

Server: google-public-dns-a.google.com

Address: 8.8.8.8



Non-authoritative answer:

moralspolice.net MX preference = 0, mail exchanger = moralspolice.net

moralspolice.net

primary name server = ns1.wshost.org

responsible mail addr = websystems.mail.ru

serial = 2011102802

refresh = 86400 (1 day)

retry = 7200 (2 hours)

expire = 3600000 (41 days 16 hours)

default TTL = 86400 (1 day)

moralspolice.net nameserver = ns2.wshost.org

moralspolice.net nameserver = ns1.wshost.org

moralspolice.net internet address = 64.191.95.121

Answer 2

Had the same thing happen to me last night with the same message that extorts money locking up the computer. We can't access the hard drive with the rescue bootable disk so we're going to have to take the computer into the Geek Police to see if they can wipe the virus off. Very frustrating. Does anyone have a fix for this?

Answer 3

Just had this happen to one of my clients and the drive is not readable when connected to another computer. Windows says drive needs to be formatted.

AVG boot disk doesn't work either, can't read the drive.

Tried windows repair, also cannot see the windows instance. Looking at reformatting the drive and then using Avanquest data recovery program to hopefully retrieve files.

Answer 4

You can download ccleaner for free here: http://bit.ly/1Bk5V5C



First open CCleaner

Go to the Cleaner tab and you will be confronted by a very confusing lineup of checkboxes.

To make this brief, below is my recommended setup:

Under internet explorer check temporary internet files, cookies, and last download location. Most users don't really need this stuff. keep history and bookmarks unchecked, history is a maybe, but you don't want to lose bookmarked sites. You can normally leave Windows Explorer, System, and Advanced alone.

Run CCleaner and it will start deleting files.

afterward it will present you with a list of the files deleted, you really don't need to go through it as it will be several pages long.

The registry cleaner is recommended for slightly more advanced users. Use it after uninstalling programs as they will often leave behind incorrect registry entries.

If you decide to run Registry cleaner then review the items detected and always back up the registry (I keep a folder aside for this)

The Tools tab lets you uninstall programs and set startup programs. Why do you need this if Windows has all of these features? Especially with Vista Home Ed. The windows defender software explorer( startup programs) doesn't pick up some entries (however software explorer is easier to use).

Using CCleaner to uninstall programs and then check for leftover registry entries takes less time.

Under Options you can determine how CCleaner cleans your files. I leave this alone.

Answer 5

This exact thing happened to me as well about 30 mins ago. I can't get into safe mode as well. I'm posting this from my phone. Not good since I'm in the middle of a

Huge project.

Answer 6

yeah a con report them to the police, Location: Scranton, Pennsylvania even i found this, it maybe easiest to do a clean install, if your remove your drive and plug it into another pc you should be able to get the data off. can find very little info, good luck

Answer 7

You need to download a stand alone anti-virus program. AVG has a free one. You burn it onto a CD and boot to it (runs Linux). Be sure to also kill the cookies - the program will prompt you.