Recommended Posts

Lets not forget to talk about how you got infected in the first place. Because if you don't fix it, you may be reinfected very quickly.

The most likely cause is an out of date version of Java on your machine. If you know you don't need it or think you don't need it uninstall it. Other applications which are targeted by exploits are Flash and adobe reader.

So its VERY VERY important that you keep your system current with the latest windows updates and keep the 3rd party applications listed above up date as well.

A great application to do so is called Patchmypc located at http://www.patchmypc.net in a single click it will automatically update all the important 3rd party applications all with 1 click.

There is some useful stuff in this thread:

https://www.neowin.net/forum/topic/1149774-unknown-scareware/

Get one of the anti-virus boot CDs and see if that can remove the virus.

Kapersky Av Rescue CD cleans up the FBI "virus" scareware. Ive used it on approx. 20 infections work level and about another 5 personally on friends n families PCs. Ive personally had a 100% success rate with Kapersky Bootcd.

https://support.kaspersky.com/viruses/rescuedisk

Its a driveby payload due to an outdated version of Java on your machine ;)

glad you got it sorted - I have not had to deal with this one yet.. But it took a picture off your webcam?? That is a freaking awesome.. You have to give creds to some of these guys.

Kind of hoping one of friends or family run into this one - just so I can lmao :)

So how much was the fine they wanted you to pay?

Its also checks your locale and spits up the region specific "Police" Organisation. :) we get the Metropolitan Police logo (pity that only has effect in London and im in Scotland lol) pretty convincing though. I think it was either ?50 or ?500 to remove. Lol Kapersky did that for ?0 :p

Some variants of the FBI/DOJ virus can't be removed unless hours and hours are spent on it. I have had a few instances where I tried multiple removal/scanners in safe mode, booted off scanner discs from outside the OS, etc. etc. and none of them worked. Most of the time it's not that tough, just don't be too angry if you can't 100% clean it up. Just not possible in all cases.

Some variants of the FBI/DOJ virus can't be removed unless hours and hours are spent on it. I have had a few instances where I tried multiple removal/scanners in safe mode, booted off scanner discs from outside the OS, etc. etc. and none of them worked. Most of the time it's not that tough, just don't be too angry if you can't 100% clean it up. Just not possible in all cases.

I've never actually seen one that wasn't a single exe or dll cause the issues in appdata\local \appdata\roaming \appdata\(username) or c:\programdata. I mean sure sometimes there were some other critters, but they were always in the same directory of the exe or dll file causing the issue. In all cases just booting off a bartpe disc / USB and deleting them by hand let me get back into windows.

glad you got it sorted - I have not had to deal with this one yet.. But it took a picture off your webcam?? That is a freaking awesome.. You have to give creds to some of these guys.

Kind of hoping one of friends or family run into this one - just so I can lmao :)

So how much was the fine they wanted you to pay?

and i wish you will never have to deal with it =) and no one else too, of course. yes, when i saw blue light i immediately turn away my laptop but it still snapped it. i swear it's really really scary, you don't really think straight at the moment. only later i saw the poor language and commercials. as far as i remember, they wanted 100?, but im not sure

oh and of course, i credited a guy in a post just above yours! will be forever thankful to everyone, such an amazing community to run into

Lets not forget to talk about how you got infected in the first place. Because if you don't fix it, you may be reinfected very quickly.

The most likely cause is an out of date version of Java on your machine. If you know you don't need it or think you don't need it uninstall it. Other applications which are targeted by exploits are Flash and adobe reader.

So its VERY VERY important that you keep your system current with the latest windows updates and keep the 3rd party applications listed above up date as well.

A great application to do so is called Patchmypc located at http://www.patchmypc.net in a single click it will automatically update all the important 3rd party applications all with 1 click.

Tbh i've just uninstalled Java as i read it from your comment. I really don't think i need it, thanks! but as for flash and adobe, i actually need those. i mean, i wasn't able to watch some videos w/o them and sometimes i was running an older version and the same problem occurred. so do you think it's still better to unstall it? it's kinda funny one thing is so needed but at the same time suspected as dangerous.

and omg thank you so much for this piece of advice! i will sure download it. i try to take as much as possible from this thread, because u guys pointed out on so many important programs i've never even heard off! oh, and to add, my newly downloaded malwarebytes detected 2 trojans, my gawd, i dont know, was it either that FBI thing or something else laying somewhere, however, i got rid of them, thanks to the program.

so if i can ask you, what else beside Patchmypc do you recommend to use it?

thanks again to everyone for great responce..

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • The fact that memory in general is so high I have to take a loan out to build a computer now is just beyond stupid. Who's really to blame here? Low supply or high demand?
    • Display Driver Uninstaller (DDU) 18.1.5.5 by Razvan Serea Display Driver Uninstaller (DDU) is a utility for completely removing AMD/NVIDIA/INTEL graphics drivers and related packages from your system, attempting to eliminate all leftovers (including registry entries, folders and files, driver store). Though AMD/NVIDIA/INTEL drivers can usually be removed via the Windows Control Panel, this uninstaller tool was created for situations where standard uninstall fails, or when you need to fully remove NVIDIA or ATI graphics card drivers. After using this driver cleaner, your system will behave as though it’s the first time you’re installing a new driver—similar to a fresh Windows installation. As with all such tools, we recommend creating a restore point beforehand, allowing you to undo changes if issues arise. If you're having trouble installing an older or newer driver, try it—there are reports that it resolves such problems. Recommended usage: The tool can be used in Normal mode but for absolute stability when using DDU, Safemode is always the best. Make a backup or a system restore (but it should normally be pretty safe). It is best to exclude the DDU folder completely from any security software to avoid issues. You do NOT need to uninstall the driver prior using DDU. Requirements: .NET Framework 4.8 Compatible with Windows 7, 8, 8.1, 10, and 11 (32-bit or 64-bit) Note: Using on Insider Preview builds is at your own risk. Display Driver Uninstaller (DDU) 18.1.5.5 changelog: Added 'Reset to recommended' button for the Options. General fixes and improvements. Download: Display Driver Uninstaller (DDU) 18.1.5.5 | 1.7 MB (Freeware) Download: DDU Portable | 1.2 MB Links: Display Driver Uninstaller Home Page | Screenshot Get alerted to all of our Software updates on Twitter at @NeowinSoftware
    • WACUP 1.99.51.24568 Preview by Razvan Serea WACUP (WinAmp Community Update Project) is a modern, enhanced version of the classic Winamp music player, designed for better stability, performance, and compatibility. Built for Windows, WACUP retains the familiar Winamp interface while adding 64-bit support, bug fixes, and new features like improved audio format support, customizable skins, and optimized playlist management. Unlike bloated alternatives, WACUP focuses on lightweight performance and regular updates, making it the best choice for fans of the classic Winamp experience. Basically, if you miss the good old days of Winamp and want a modern upgrade that doesn’t mess things up, WACUP is for you! WACUP key features: Classic Winamp Feel – Keeps the familiar interface and functionality. Bug Fixes & Stability – Fixes old Winamp issues and improves performance. 64-Bit Support – Works better on modern systems. More Formats & Plugins – Supports additional audio formats and third-party plugins. Customizable UI – Skins and tweaks for a personalized look. Better Library Management – Improved playlists, media organization, and search. No Bloat – Focuses on performance without unnecessary extras. Regular Updates – Community-driven development with new features and fixes. WACUP 1.99.51.24568 Preview changelog: Fixed a deadlock seen from the recent crash reports when doing some of the drag + drop actions within the media library window Fixed a loading crash seen related to a problem with some of the artwork cache image files being restored which should now be better handled allowing for the bad image to be removed without it failing Fixed a deadlock seen from the recent crash reports when the internal metadata cache clearing is triggered which could block the main ui thread for too long with this now being moved to a background thread Fixed some performance issues with some of the methods related to determining artwork support which mainly affected the local library import / refresh (this is still slower for some compared to other players because there's more data & artwork aspects being checked for which means doing more processing on a single file despite the best of attempts to reduce duplicate / heavy processing where possible) Fixed a crash with the JTFE based missing files hotkey which no one seems to have used for an age for this to appear (maybe it's time to seriously consider stripping out features that aren't being used) Fixed how some of the file types which use extra information to reference their sub-songs is handled which was preventing some from being correctly resolved back to their base file (noticed fixing above) Fixed an issue with the handling of files with underscores in their filepath which wasn't being correctly handled causing some of the filename to be lost when shown as the title if title reading is delayed Fixed a few things that might be behind NotSoDirect not being stable for some setups though am still not certain that the changes done for this are going to fully resolve the problem from the crash reports Fixed the OS toast handling when there's no prior shortcut in the OS start menu to now create the shortcut (needed to allow the yes/no buttons for the new build / post-release toast) to be done as a hidden one so it's less likely to cause annoyance for those not wanting to see it whilst still allowing this less than ideal OS api implementation requirement to be met to avoid toasts without the needed buttons Fixed a regression when moving from taglib1 to taglib2 which broke some of the handling in place to allow for external programs to still access files when wacup has a held open cached instance of the file Everything else Updated cppwinrt (gen_win10shell.dll) to 3.0.260520.1 (26 May 2026) Updated libcurl (libcurl.dll) to 8.2.1 (24 Jun 2026) Updated Monkey's Audio (in_ape.dll) to 13.15 (28 Jun 2026) Updated mpg123 (mpg123.dll) to 1.33.6 (6 Jun 2026) Updated OpenSSL (libcurl.dll) to 3.5.7 (9 Jun 2026) Updated pugixml to 1.16 (16 Jun 2026) Updated taglib (tag2.dll) to 2.3.0 (11 May 2026) Updated vgmstream (in_vgmstream.dll) to the latest Git commit from 28 Jun 2026 Download: WACUP 64-bit | 9.6 MB (Freeware) Download: WACUP 32-bit View: WACUP Website | Screenshots Get alerted to all of our Software updates on Twitter at @NeowinSoftware
    • "over a thousand engineering hours" and started selling it but could not take a couple of minuets to send an AI email to ask permission. What an expensive lesson.
    • just tested it yesterday, a simple page with autoloading ADS takes 60mb....just 1 page for 60 megabytes.   poor people with a limited internet never will visit neolose
  • Recent Achievements

    • Week One Done
      Collagen Project earned a badge
      Week One Done
    • Reacting Well
      Wakeen1966 earned a badge
      Reacting Well
    • Rookie
      Almohandis went up a rank
      Rookie
    • Apprentice
      jahara21 went up a rank
      Apprentice
    • Reacting Well
      NovaEdgeX earned a badge
      Reacting Well
  • Popular Contributors

    1. 1
      +primortal
      526
    2. 2
      +Edouard
      265
    3. 3
      PsYcHoKiLLa
      146
    4. 4
      Steven P.
      99
    5. 5
      macoman
      55
  • Tell a friend

    Love Neowin? Tell a friend!