AntiChild Porno Spam Protection virus

The AntiChild Porno Spam Protection virus (also found as Anti-Child Porn Spam Protection, AntiChild Porno Spam Protection 2.0 version, or Cryptolocker) is dangerous malware categorized as ransomware that blocks access or limits access to an infected computer system, claims to have encrypted the computers files, and further demands a fine or “ransom” of $500, $1,000, $1,500 USD in order to obtain a unique RSA key or number that when inputted into correct field on the lock-screen will allegedly remove the restriction and allow users to retrieve encrypted files; however, the AntiChild Porno Spam Protection virus rarely does actually remotely encrypt and obtain victim’s files and paying the ransom will not remove this computer virus.

The AntiChild Porno Spam Protection malware infection claims that access to your computer is limited and your files have been encrypted due to child pornography being present on the computer system. This is a tactic commonly used by ransomware infections including the FBI virus in order to scare victims into paying a fraudulent fine or ransom.

Details from the AntiChild Porno Spam Protection lock-screen page or window have been detailed below (typos and all): Please note the message displayed by the malware author and distributors should be ignored as it’s only purpose is to frighten victims into paying an unnecessary ransom.

AntiChild Porno Spam Protection - 2.0 version

Warning! Access to your computer is limited. Your files has been encrypted.

Have you already see that your files are encrypted and desktop locked?

Please don't panic and send us angry emails or scare us to send claims in police, fbi or others - this is useless. (property of botcrawl.com)

Please read this instruction carefully, then you will get answers to most of your questions.

We don't answer questions which already was answered in this instructions. Do not waste our and your time.

Stupid question like - "I have backup and need only 1-2 files and can pay you only 500, 1000, 1500$ USD etc, We have a small business, this amount is too high" - will be ignored.

Have a backup - restore your files from it.

We know that in most cases this is lie, you have no backups and just trying to truck us to get discounts and pay less amount.

Our minimal price for your files is 500$ USD. We do don't get passwords for free or for 500, 1000, 1500$ USD etc. We know that you have money.

Once this particular infection is updated the authors may include additional content at the bottom of the page that is subject change as different variants of this virus are produced:

Latest Updates (lesson learned, bugs fixed).

You have Antichild Spam Porn Protection 2.0 from 22.03.2013. What's new?

1. Now we have 2 randomly generated cryptographic safe passwords, unlike the previous version when it will be a chance to generate passwords in certain circumstances. Now generating password is impossible in all cases.

2. Now files are encrypted using 2 randomly generated cryptographic safe passwords from 80 to 114 characters long, unlike one 55 characters long password and not cryptographic safe pseudorandom number generator in he previous version. (property of botcrawl.com)

Now password look's like this:

First password sample:

Second password sample:

Your ID Number and our contacts (please write down this data):

Your Id #: Our special service email useextmreme1@gmail.com (etc.)

If you are infected with the AntiChild Porno Spam Protection virus please immediately use the free removal instructions below to protect your computer and family against severe cyber crimes including credit theft, extortion, identity theft, and more.

1. Removal software (Automatic removal)

1. Install the free or paid version of Malwarebytes Anti-Malware software.

Malwarebytes Anti-Malware   Editor’s Choice

Latest versions: Malwarebytes Anti-Malware PRO, Malwarebytes Anti-Malware Free
Release date: 2013

2. Once Malwarebytes is installed, open the Anti-Malware program. If you are using the free version of Malwarebytes you will be prompted to update the database, please do so.

3. On the first tab labeled “Scanner” select the Perform full scan option and click the Scan button to perform a full system scan (pictured below).

4.  Malwarebytes will automatically detect the AntiChild Porno Spam Protection virus and third-party malware on your computer. Once the scan is complete, Malwarebytes will prompt a message stating malicious objects were detected. Select (check) the malicious objects in the list and click the Remove Selected button to completely remove the AntiChild Porno Spam Protection malware from your computer (The image below shows a file that is NOT selected for removal – ‘Make sure the box is checked in’).

2. System Restore

A System Restore is an easy solution to restore an infected computer to a date and time before it became infected with the Anti-Child Porn Spam Protection computer virus. To learn more please select a link below:

• Windows System Restore Instructions

• Windows 8 Refresh/Reset Instructions

AntiChild Porno Spam Protection removal tips:

If the AntiChild Porno Spam Protection virus is difficult to remove there are several steps you can use to troubleshoot the removal process:

User accounts

Ransomware often infects 1 user account on Windows systems at a time. Here are some tips to remove ransomware by using different user accounts.

• Log into an account not affected by malware (with administrative rights) and perform a scan with reputable software to detect and remove malware.

• You can also delete the infected account.

• Other options include creating a new user account to remove malware if only 1 Window’s user account is present on the computer system.

Denying flash

Some variants of ransomware use flash and symptoms of the infection can be halted by denying flash via Macromedia’s real-time options. To learn more and deny flash please visit: http://www.macromedia.com/support/documentation/en/flashplayer/help/help09.html

Troubleshoot internet/network issues

Safe Mode With Networking can be used to access the Internet for updates, drivers, removal software, or other files if internet and network connectivity is compromised.