Saturday, February 16, 2013

Got ICSPA (International Cyber Security Protection Alliance Virus)/ Unlock PC from ICSPA

My computer has been locked by ICSPA! Is that real? Should I hand in the required ransom? Is that true that it is somewhat scam like online blog articles describe? If so, what can I do to unlock computer?


What ICSPA (International Cyber Security Protection Alliance Virus) Is?



ICSPA (International Cyber Security Protection Alliance) virus is a scam to scrape money from law abiding citizens. Do not ever believe the accusation of visiting or occupying porn contents, delivering terrorism and the like. Here are some interfaces of ICSPA offered for reference:


ICSPA – Royal Canadian Mounted Police Lock Down Virus


ICSPA – United Kingdom Police Ukash Virus


ICSPA – Australian Federal Police virus


ICSPA – FBI Cybercrime Division (MoneyPak) malware


What Is ICSPA Able to Do Besides Locking up?



Locking up your computer is to make you hand in money.  To hasten the money turn-over, International Cyber Security Protection Alliance Virus will disable safe mode with networking, safe mode with command prompt, restore and repair functionality one by one. Want to enter into safe mode with networking without PC shut down? Tee Support experts 24/7 online would say that the only method is to exterminate the virus.


Most people take it wrong that if one doesn’t get the virus in certain mode, one is safe. The virus is a vicious lurker. People who get similar scam virus before knows anti-virus program unable to detect anything, or even if it detects some Trojans, it cannot remove it as the virus simply comes back after each reboot.
Many people also take it wrong that some programs would help to unlock the screen. How can security utilities able to remove the virus when it contracts the machine with their protection? It is true that a program manages to enable the desktop, but unable to detect the hidden components that able to evoke the virus.


Unlock Screen from ICSPA (International Cyber Security Protection Alliance Virus)



Stick to the steps hereinafter. Since situation can be different from individual and take the constant virus evolvement into consideration, some may not be able to get the prescribed results. If it is the case, you are welcome to access Online Computer Help Center here.


Steps Show You How to Stop Webcam Stream and Unlock Your Computer

Disable Webcam

Stop your webcam stream against Cybercrime Investigation Department virus by denying flash.
Step:  right click on the video broadcast interface to select ‘settings’. You’ll get the little window popped up as shown below:


Then tick ‘Deny’


Unlock Computer 

Situation 1: able to enter into safe mode with networking

Step1:Reboot your computer and log into Safe Mode with Networking.

As the computer is booting but before Windows launches, tap the "F8 key" continuously which should bring up the "Windows Advanced Options Menu" as shown below. Use your arrow keys to highlight "Safe Mode with Networking" option and press Enter key.

 


Step2: Launch msconfig. and disable startup items rundll32 

 Click "start" —> put msconfig. in "search box" —> press Enter —> disable rundll32

 

   


Step3: Reboot your system one more time and enter into Safe Mode with Networking.


Step4: Run regedit. Search for Winlogon.

Click "start" —> put regedit in "search box" —> press Enter —> press and hold Ctrl+F to search for Winlogon




 
Step5:There will be a key labeled Shell in the right pane. It should reference Explorer.exe or be blank. If not, right click it and replace it with explorer.exe.

Note: if you cannot load explorer.exe, and cannot see Windows Task Manager or desktop, follow the steps below:

1. start explorer.exe

a) Press "Alt+Ctrl+Del".
b) Click "Task manager"
c) Click "New Task".

 

 d) Type "explorer.exe" and press "Ok"




Now explorer.exe will load and you can see your Desktop and all your files .

Step6: Save changes, reboot to safe mode with networking.


Step7: Run msconfig and disable all unnecessary startup entries.

a) Related files and folders

%Documents and Settings%\All Users\Application Data\[random]\
%Documents and Settings%\All Users\Application Data\[random]\[random].exe
%Documents and Settings%\All Users\Application Data\[random]\[random].mof
%Documents and Settings%\All Users\Application Data\[random]\[random].dll
%Documents and Settings%\All Users\Application Data\[random]\[random].ocx
%Documents and Settings%\All Users\Application Data\[random]\[random]\

b) Associated registry entries

HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Random.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Random.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\JGESrun.exe\



Situation 2: able to enter into safe mode with Command prompt
 

Step1.:Reboot your computer and log into safe mode with Command prompt.
 

As the computer is booting but before Windows launches, tap the "F8 key" continuously which should bring up the "Windows Advanced Options Menu" as shown below. Use your arrow keys to highlight "safe mode with Command prompt" option and press Enter key.


 

Step2.: type 'explore' and hit Enter key to see if you are able to see the desktop
 

then follow steps 7 depicted above.

 

Situation 3: unable to enter into any safe mode
 

Step1.:Reboot your computer and log into 'Repair Your PC'
 
As the computer is booting but before Windows launches, tap the "F8 key" continuously which should bring up the "Windows Advanced Options Menu" as shown below. Use your arrow keys to highlight 'Repair Your PC' option and press Enter key.

 

Step2.:follow steps 7 depicted above.

 

Detailed Video Shows How to Unlock Your PC



Attention please: if you are unable to use safe mode with command prompt, you are welcome to get professional and real-time help from Tee Support online technicians 24/7 online. And remember to contact us with a clean computer and a blank CD if restore points are swept and repair cannot be completed successfully.

No comments:

Post a Comment