Print

Internet Crime Complaint Center Virus

Internet Crime Complaint Center "Threat of Prosecution Reminder" virus - how to unblock your computer?

Internet Crime Complaint Center message which states that computer user's PC was locked for law violations is a scam. It's a ransowmare infection which was created by Cyber criminals to trick unsuspecting PC users into paying a non existent fine for supposedly made law infringements. Internet Crime Complaint Center has nothing to do with this message, this screen locker was developed by Cyber criminals in order to steal money from PC users. To scare PC users into believing that this message is legitimate (Threat of prosecution reminder) Cyber criminals are exploiting the name and graphics of  an authority (IC3).

Previous variants of ransomware infections have been exploiting the names of Metropolitan Police, FBI, Interpol etc. Notice that none of the authorities around the world are using screen lockers to collect fines for law infringements. Furthermore most of ransomware infections are localised - Cyber criminals have translated their deceptive messages to various languages - the same ransomware infection can show itself with different language and graphics corresponding to the location of computer. Such localisation is made possible by detecting the IP address of the PC that is targeted by ransomware infection.Internet Crime Complaint Center virus is being distributed using drive-by downloads and Trojan infections. Most commonly Cyber criminals are using security vulnerabilities found on user's PC to spread their deceptive ransomware infections. To avoid such infections PC users should keep their operating system and all of the installed software up-to-date. Best computer security practises include using legitimate antivirus and antispyware programs.

Internet Crime Complaint Center virus

If your computer is already infected with Internet Crime Complaint Center virus you should ignore it and eliminate it from your computer. Don't pay this fine - you will loose your money and your computer will remain blocked. Notice that to collect the fake fines Cyber criminals are using Green Dot MoneyPak prepaid cards, contrary to credit cards when you send money using pre-paid card services you won't be able to dispute or cancel your transaction, moreover such money transaction method makes it very complicated to track Cyber criminals for the real authorities. Statements of video and voice recording are as fake as the whole message. Use the provided removal guide and eliminate Internet Crime Complaint Center virus.

Deceptive message presented in Internet Crime Complaint Center ransomware:

Internet Crime Complaint Center
Department of Federal Bureau of Investigation
Threat of Prosecution Reminder
You have been violating Copyright and Related Rights Law (Video, Music, Software) and
illegally using or distributing copyrighted content, thus infringing Article 1, Section 8, Clause 8, also known as the Copyright of the Criminal Code of United States of America. Article 1, Section 8, Clause 8 of the Criminal Code provides for a fine of two to five hundred minimal wages or a deprivation of liberty for two to eight years.
You have been viewing or downloading prohibited Pornographic content (Child porn, Zoofilia, etc.), thus violating article 202 of the Criminal Code of the United States of America. Article 202 of the Criminal Code provides for a deprivation of liberty for four to twelve years.
Pursuant to the amendment to the Criminal Code of the United Stets of America of May 28, 2011, this law infringement (if it is not repeated - first time) may be considered as conditional in case you pay the fine to the State.Fines may only be paid within 72 hours after the infringement. As soon as 72 hours elapse, the possibility to pay the fine expires, and a criminal case is initiated.

Internet Crime Complaint Center virus removal:

Step 1

During your computer starting process press F8 key on your keyboard multiple times until Windows Advanced Options menu shows up, then select Safe mode with networking from the list and press ENTER.

Step 2

Log in to the account that is infected with Internet Crime Complaint Center virus. Start your Internet browser and download a legitimate anti-spyware program. Update the anti-spyware software and start a full system scan. Remove all the entries that it detects.

remover for Internet Crime Complaint Center virus

By downloading any software listed on this website you agree to our Privacy Policy and Terms of Use. We are affiliated with anti-virus and anti-spyware software listed on this site. All the products we recommend were carefully tested and approved by our technicians as being one of the most effective solutions for removing this threat.

Can't boot in Safe Mode with Networking? (Internet Crime Complaint Center virus blocks Safe Mode with Networking)

If you have more than one user account in your operating system - please log-in to the clean account and download the recommended anti-spyware software, install it and run a full system scan, remove all the security infections it will detect, however if you have only one user account please follow this guide (this guide will show you how to create a new user account using safe mode with command prompt - using this newly created user account you will be able to remove Internet Crime Complaint Center ransomware).

If Internet Crime Complaint Center also blocks your operating system's Safe Mode with Networking follow these removal instructions:

1. Start your computer in Safe Mode with Command Prompt - During your computer starting process press F8 key on your keyboard multiple times until Windows Advanced Options menu shows up, then select Safe mode with command prompt from the list and press ENTER.

Boot your computer in Safe Mode with Command Prompt

2. When command prompt mode loads enter the following line: net user removevirus /add and press ENTER.

3. Next enter this line: net localgroup administrators removevirus /add and press ENTER.

creating new user using command prompt

4. Finnaly enter this line: shutdown -r and press ENTER.

adding a new user in command prompt

5. Wait for your computer to restart,  then boot your PC in Normal Mode and login to the newly created user account ("removevirus"). This account won't be affected by the ransomware infection and you will be able to download and install recommended anti-spyware software to eliminate this virus from your computer.

new user account created

6. Download and install recommended anti-spyware software to eliminate this ransomware infection from your computer:

remover for Internet Crime Complaint Center virus

By downloading any software listed on this website you agree to our Privacy Policy and Terms of Use. We are affiliated with anti-virus and anti-spyware software listed on this site. All the products we recommend were carefully tested and approved by our technicians as being one of the most effective solutions for removing this threat.

If the newly created user account is also affected by the ransomware infection try doing a System Restore:

1. Start your computer in Safe Mode with Command Prompt - During your computer starting process press F8 key on your keyboard multiple times until Windows Advanced Options menu shows up, then select Safe mode with command prompt from the list and press ENTER.

Boot your computer in Safe Mode with Command Prompt

2. When command prompt mode loads enter the following line: cd restore and press ENTER.

system restore using command prompt type cd restore

3. Next type this line: rstrui.exe and press ENTER.

system restore using command prompt rstrui.exe

4. In the opened window click "Next".

restore system files and settings

5. Select one of the available restore point and click "Next" (this will restore your computer's system to an earlier time and date, before the ransomware infiltrated your PC).

select a restore point

6. In the opened window click "Yes".

run system restore

7. After restoring your computer to a previous date download and scan your PC with a recommended anti-spyware software to eliminate any left remnants of Internet Crime Complaint Center ransomware.

Alternative Internet Crime Complaint Center virus removal guide:

If this ransomware blocks your screen when you start your computer in safe mode with networking, try starting your PC in safe mode with command prompt.

1. During your computer starting process press F8 key on your keyboard multiple times until Windows Advanced Options menu shows up, then select Safe mode with command prompt from the list and press ENTER.

win 7 safe mode with command prompt

2. In the opened command prompt type explorer and press Enter. This command will open explorer window, don't close it and continue to the next step.

3. In the command prompt type regedit and press Enter. This will open the registry editor window.

4. In the registry editor window you should navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\

registy editor winlogon

5. In the right side of the window locate "Shell" and right click on it. Click on Modify. The default value data is Explorer.exe if you see something else written in this window remove it and type in Explorer.exe (you can write down whatever else was written in the value data section - this is a path of the rogue execution file) - use this information to navigate to the rogue executable and remove it.

6. Restart your computer, download and install a legitimate anti-spyware software and perform a full system scan to eliminate any left remnants of Internet Crime Complaint Center virus.

remover for Internet Crime Complaint Center virus

By downloading any software listed on this website you agree to our Privacy Policy and Terms of Use. We are affiliated with anti-virus and anti-spyware software listed on this site. All the products we recommend were carefully tested and approved by our technicians as being one of the most effective solutions for removing this threat.

If you can't start your computer in safe mode with networking (or with command prompt) you should boot your computer using a rescue disk. Some variants of ransomware disables safe mode making it's removal more complicated. For this step you will need access to another computer. After removing Internet Crime Complaint Center virus from your PC restart your computer and scan it with a legitimate antispyware software to remove any possibly left remnants of this security infection.

Other tools known to remove Internet Crime Complaint Center virus:

Some malicious software modifies browser settings and disables downloads of spyware and virus removing software. If you have problems downloading anti-spyware software with Internet Explorer, try downloading with Chrome, FireFox, Opera, etc.

If you can't access Internet:

Load your computer in safe mode. Click Start, click Shut down, click Restart, click OK. During your computer starting process press F8 key on your keyboard multiple times until you see Windows Advanced Option menu, then select Safe mode with networking from the list.

Start Task manager. Press ctrl+alt+del (or ctrl+shift+esc) and end task the processes of rogue program. ( if after this procedure you can't access any programs press ctrl+alt+del, click File, select New Task, and type explorer.exe then press OK.

Open Internet explorer, click Tools and select Internet Options. Select Connections, then click LAN settings, if a Use a proxy server for your LAN is checked, un-check it and press OK.

After this procedure you should be able to access Internet. Now you can download anti-spyware software from our "Top spyware removers" section and run a full scan. Download, install and don't forget to update your selected anti-spyware program.

Manual Internet Crime Complaint Center virus removal:

If you were unable to remove Internet Crime Complaint Center virus using the steps above, you can use this manual removal instruction. Use it at your own risk. If you don't have strong computer knowledge you could harm your operating system. Be careful and use it only if you are an experienced computer user. (Instructions on how to end processes, remove registry entries...)

End these Internet Crime Complaint Center virus processes:

random.exe

Delete these Internet Crime Complaint Center virus files:

%Temp%\<random>.exe
%StartupFolder%\ctfmon.lnk

Comments 

 
#6 me 2013-05-06 00:41
Unfortunately Tugore, no one will be punished for this. they do this from countries that have no or lax laws against this type of fraud, and are well disguised on top of that. Short of made-up things like karma or god, nothing is going to touch these a$$holes and they are certainly getting very rich from this.
Quote
 
 
#5 Tugore 2013-03-20 07:37
Whoever wrote this virus needs to be punished.....severely, and they will be - you can count on that
Quote
 
 
#4 heather 2013-01-07 00:11
I have a MacBook with vista, and Mac is. Anyway I got this virus too. Just decided to redo windows. As long as you don't format it if you have vista or windows 7 your files will still be backed up.
Quote
 
 
#3 Jamie 2012-12-27 23:42
I had to do step 4 from another computer before acutally loging into the computer.
Quote
 
 
#2 admin 2012-12-20 10:36
Hi Lawrence, try booting your computer using a rescue disk. http://www.pcrisk.com/computer-technician-blog/general-information/6775-how-to-boot-your-computer-using-a-rescue-disk
Quote
 
 
#1 Lawrence 2012-12-20 00:53
This virus had somehow also disabled booting from command prompt or the safe mode. Is there a way around this?
Quote
 

Add comment

PCrisk.com is not responsible for the content of the comments.


Security code
Refresh