CIA virus is screen-locker ransomware that claims to encrypt your files and delete them if you don’t pay $100.
CIA virus is ransomware similar to M4N1F3STO and the FBI virus that employs a deceptive screen-locker window containing an image of a CIA badge and a message that claims the files on your computer have been encrypted. However, the CIA virus does not actually encrypt files on the computer it infects. Instead, the CIA virus will utilize a lock-screen and deceptive message in order to frighten victims into making an unnecessary payment.
Table of Contents
Overview
| Names | Distribution |
|---|---|
| CIA virus, CIA ransomware, CIA Special Agent 767, CIA Special Agent, CIA US Special Agent | N/A |
CIA virus is ransomware that displays a lock-screen window and message. The lock-screen will restrict access to the infected machine by utilizing a full-screen window that cannot manually be closed. The lock-screen contains a message and an image of a CIA badge. The message claims that files have been encrypted on your computer even though they have not been. The ransomware then tries to persuade you to send an “early bird” discount of $100 to the listed bitcoin address in order to get a decryption key or special software.
Ransom Note
IMPORTANT! PLEASE READ! Unfortunately the files on this computer (documents, photos, videos) have been encrypter using an extremely secure and unbreakable algorithm. This means that the files are now useless unless they are decrypted using a key. The good news is that your files are not lost forever! This tool is able to rescue the files on your computer for you! BY PURCHASING A LICENSE FROM US, WE ARE ABLE TO RESCUE YOUR FILES 100% GUARANTEED FOR EVERY LOW EARLY BIRD PRICE OF ONLY $100 USD!* In 5 days however, the price of this service will increase to $250 USD, and after $500 USD. Payment is accepted in Bitcoin only. You can purchase Bitcoin very easily in your area by bank transfer, Western Union, or even cash. Visit www.localbitcoins.com to find a seller in your area. You can also goolge Bitcoin Exchanges to find other methods for buying Bitcoin Please check the current price of Bitcoin and ensure you are sending the correct amount before making your payment! Visit www.bitcoinaverage.com for the current Bitcoin Price. After making your payment, please wait up to 24 hours for us to make your key available. Usually done in much less time however. IMPORTANT: Once the key is available and you click \"Decrypt Files\", please wait and let the decryption process complete before closing this tool. This Process can take from 15 minutes to 2+ hours depending on how many files need to be decrypted. You will get a notification thatthe decryption process is complete, at which time you can click \"Exit\". Removing this tool from your computer without first decrypting your files will cause your files to be lost forever. Bitcoin Address: 1GmGBH9ra2dqA8CgRg8a8Rngx4qHb2hLDW *Please note that early bird qualification is determined from the date that this tool was first run as recorded on our servers.
Unlock Code Message
The lock-screen can easily be unlocked by inputted a default code. The default code is very graphic and very offensive. To unlock the lock-screen you can submit this unlock code on the lock-screen: suckmydicknigga
JUST DELETE IT TO REMOVE IT HAHA YOU HAVE BEEN FOOLED
Once the unlock code is entered it will display the message above which clarifies that the virus is only a lock-screen designed to obtain currency by using social engineering tactics.
Removal Software
| Name | Detection | Download |
|---|---|---|
| Malwarebytes Anti-Malware | Ransomware | Download (Free) | Buy |
| HitmanPro by Surfright | Ransomware | Download (Free) |
Troubleshoot
Alternative methods are suggested if there are issues removing CIA ransomware from an infected computer.
How to Restore your computer
If a restore point has previously been established on your machine you will be able to perform a system restore in order to restore your machine to a date and time before it was infected. You will lose files on your computer that were obtained prior to the restore point.
There are several options to restore your computer. Most computers have their own restore software that can be found by performing a search. Additionally, computers that run the Windows Operating System have a default restore program that can also be found by performing a search.
A boot screen that can be used to access options to restore your computer can be reached by rebooting your computer and pressing the F8 key once the manufacture screen is displayed.
How to Recover your computer to factory settings
A system recovery (or reset) will recover your computer to factory settings. You will lose the current programs and files on your computer.
There are several options to recover your computer to factory settings. Most computers have their own recovery software that can be found by performing a search. Additionally, computers that run the Windows Operating System have a default recovery program that can also be found by performing a search.
A boot screen that can be used to access options to restore your computer can be reached by rebooting your computer and pressing the F8 key once the manufacture screen is displayed.
Leave a Comment