About 1LH6PhEPTpz5CV4BuWFhW21b6DAiHzFPMC

1LH6PhEPTpz5CV4BuWFhW21b6DAiHzFPMC is a bitcoin email scam just like 1MJne4rgeirTYxCwC81nJHPqox7DSsCMoe and 1Fjg3Q89MawTyfNcMbX6MUnfT923icRuMy . In case that you have been spammed with some strange email messages that blackmail you to pay ransom to some anonymous hackers, then you probably have become a target of a particular blackmail scheme known as the email BitCoin scam. This scam has been spreading around the web recently and security experts have been warning the web users about it in order to prevent more people from being tricked by the hackers who stand behind the blackmail scheme. In the next lines, we will tell more about the scenario which is typically used by the crooks to extort money out of the unsuspecting victims, as well as the risks and the potential threats such emails may relate to.  Typically, the people who become a target of this scam receive a warning message from a self-proclaimed hacker who informs them that there is a Trojan Horse or another nasty piece of malware inside the computer. In order to cause panic, the crook claims that he intends to activate the malware and use it to corrupt the system and its data or to steal some sensitive information, publish personal details or do some other nasty stuff unless you pay him a fat amount of money as a ransom.  He asks for a payment in BitCoins and provides strict instructions and a deadline. The fact that you have received such a message, however, should not set you into a panic because, in most of the cases, the threatening emails which spam your inbox are nothing but a bluff. They typically never provide you with any solid evidence that you indeed have malware inside your computer and rely on simply scaring you. People with malicious intentions often use them to make some quick money from naive users but you can easily deal with them if you don’t fall for their fake statements and phishing links.

Removing 1LH6PhEPTpz5CV4BuWFhW21b6DAiHzFPMC by yourself

At the same time, it is not a good idea to simply ignore such messages because sometimes they can be used for distribution of real Trojans and other nasty viruses which need to be detected and removed immediately. One recent example of a malware piece that can travel via email scams like the one that we describe is 1LH6PhEPTpz5CV4BuWFhW21b6DAiHzFPMC. This is a nasty Trojan-based infection which can compromise your computer without any visible symptoms the moment you click on a phishing email. It can provide its creators with remote access, sensitive details, passwords, personal files and more. That’s why in case you have opened and interacted with an email BitCoin scam message, it is highly recommended that you carefully scan your computer with a professional malware-removal tool and check for the presence of this or some other hidden threats. If you don’t have such a tool, on this page there is a professional scanner that can do the job. There is also a detailed removal guide which can help you to remove 1LH6PhEPTpz5CV4BuWFhW21b6DAiHzFPMC in case it has sneaked inside your computer without your knowledge. Ideally, if the scan detects no malware, then you’ve probably been spammed with a bluff message. In this case, you should consider yourself lucky and simply delete the scam email without stressing about its statements and without paying ransom to anyone.

And I got an idea…. I made a screenshot of the adult sites where you have fun (do you understand what it is about, huh?). After that, I made a screenshot of your joys (using the camera of your device) and glued them together. Turned out amazing! You are so spectacular! I’m know that you would not like to show these screenshots to your friends, relatives or colleagues. I think $760 is a very, very small amount for my silence. Besides, I have been spying on you for so long, having spent a lot of time! Pay ONLY in Bitcoins! My BTC wallet: 1LH6PhEPTpz5CV4BuWFhW21b6DAiHzFPMC

SUMMARY:

[add_third_banner]

Remove 1LH6PhEPTpz5CV4BuWFhW21b6DAiHzFPMC

1: Preparations

Note: Before you go any further, we advise you to bookmark this page or have it open on a separate device such as your smartphone or another PC. Some of the steps might require you to exit your browser on this PC.

2: Task Manager

Press Ctrl + Shift + Esc to enter the Task Manager. Go to the Tab labeled Processes (Details for Win 8/10). Carefully look through the list of processes that are currently active on you PC.

If any of them seems shady, consumes too much RAM/CPU or has some strange description or no description at all, right-click on it, select Open File Location and delete everything there.

Also, even if you do not delete the files, be sure to stop the process by right-clicking on it and selecting End Process.

3: IP related to 1LH6PhEPTpz5CV4BuWFhW21b6DAiHzFPMC

Go to c:\windows\system32\drivers\etc\hosts. Open the hosts file with notepad.

Find where it says Localhost and take a look below that. 

If you see any IP addresses there (below Localhost) send them to us here, in the comments since they might be coming from the 1LH6PhEPTpz5CV4BuWFhW21b6DAiHzFPMC.

[add_forth_banner]

4: Disable Startup programs

Re-open the Start Menu and type msconfig.

Click on the first search result. In the next window, go to the Startup tab. If you are on Win 10,  it will send you to the Startup part of the task manager instead, as in the picture:

If you see any sketchy/shady looking entries in the list with an unknown manufacturer or a manufacturer name that looks suspicious as there could be a link between them and 1LH6PhEPTpz5CV4BuWFhW21b6DAiHzFPMC , disable those programs and select OK.

5: Registry Editor

Press Windows key + R and in the resulting window type regedit.

Now, press Ctrl + F and type the name of the virus.

Delete everything that gets found. If you are not sure about whether to delete something, do not hesitate to ask us in the comments. Keep in mind that if you delete the wrong thing, you might cause all sorts of issues to your PC.

6: Deleting potentially malicious data – 1LH6PhEPTpz5CV4BuWFhW21b6DAiHzFPMC

Type each of the following locations in the Windows search box and hit enter to open the locations:

%AppData%

%LocalAppData%

%ProgramData%

%WinDir%

%Temp%

Delete everything you see in Temp linked to 1LH6PhEPTpz5CV4BuWFhW21b6DAiHzFPMC Ransomware. About the other folders, sort their contents by date and delete only the most recent entries. As always, if you are not sure about something, write to us in the comment section.

The post Remove 1LH6PhEPTpz5CV4BuWFhW21b6DAiHzFPMC (Bitcoin Mail Removal Guide) appeared first on Malware Complaints.

About 1Fjg3Q89MawTyfNcMbX6MUnfT923icRuMy

1Fjg3Q89MawTyfNcMbX6MUnfT923icRuMy is a new bitcoin email virus scam, almost identical to 1MJne4rgeirTYxCwC81nJHPqox7DSsCMoe and 15w8KYwC76vDRiSZD2LK6dEbHvs7N38mh6 . The most probable reason you landed on this page is because you have recently opened an e-mail message stating that your computer has been compromised by a hidden malware some time ago and with its help, a self-proclaimed hacker has been monitoring your and has captured some sensitive information about your personal life, your passwords and other delicate and embarrassing files of yours. This type of messages are typically known as email BitCoin scams because their idea is to scare the victims into paying ransom to some anonymous cybercriminals. They normally contain a threatening text that asks you to pay a certain amount of money to please the hacker so he spares your computer and “forgets” about his intentions to do something nasty with your information and the compromised system. For maximum anonymity, the payment is requested in bitcoins and the victim is given a short deadline to transfer the required amount.

In case you really have been compromised by a hidden malware, then you really might be in trouble. Especially if the threat comes from the Trojan Horse family and is an advanced infection like 1Fjg3Q89MawTyfNcMbX6MUnfT923icRuMy. Such a piece can be very versatile and stealthy and you may indeed have no idea that you have been compromised by it from months. What is more, with the help of the Trojan the creators can gain access to your machine and mess with it the way they want. They can hack into your webcam and mic and spy on you. Or they can capture screenshots and other information such as files, passwords and literally every keystroke of yours. In addition to that, the malware may create security holes, block the existing antivirus program and insert other viruses and threats such as Ransomware or Rootkits without your knowledge.

Removing 1Fjg3Q89MawTyfNcMbX6MUnfT923icRuMy manually?

That’s why it is really important that you take all the necessary actions to rule out the possibility of having an actual infection like 1Fjg3Q89MawTyfNcMbX6MUnfT923icRuMy on your system.  The best way to do that is to use a professional scanner, such as the one on this page, in order to check your entire PC for hidden harmful activity in the background. If the check does not find anything suspicious, you should consider yourself lucky and don’t get stressed about the email scam message that you have received. In many cases, such messages are used as a bluff in order to scare the unsuspecting web users and to make them transfer their money to some online crooks which can get some quick cash on the back of the victim’s fear and frustration. That’s why, unless you really detect a malware that needs to be removed, you should not trust them and should not send money to anonymous hackers who claim they have compromised your machine.  In case that the scan results show active infection, however, do not lose time but remove it immediately. You can use the instructions in the removal guide below to get rid of 1Fjg3Q89MawTyfNcMbX6MUnfT923icRuMy if that is the malware that has compromised you.

I infected you with a malware (RAT) / The malware gave me full access and control over your system, meaning, I can see everything on your screen, turn on your camera or microphone and you won’t even notice about it. webcam) and the video you were watching (on the screen) while statisfying yourself. YOU can prevent me from doing this! To stop me, transfer exactly 900$ with the current bitcoin (BTC) price to my bitcoin address. I think it’s a very good price compared to the damage and hell it can bring into your life! If you don’t know how to get bitcoin, Google – “How to buy Bitcoin”. The wallet you can create here: www.login.blockchain.com/en/#/signup/ My bitcoin adress is: 1Fjg3Q89MawTyfNcMbX6MUnfT923icRuMy After receiving the payment, I will delete the video, and we will forget everything. I give you 3 days to get the bitcoins. Don’t share this email with anyone, this should stay our little secret!

SUMMARY:

[add_third_banner]

Remove 1Fjg3Q89MawTyfNcMbX6MUnfT923icRuMy Bitcoin Mail

1: Preparations

Note: Before you go any further, we advise you to bookmark this page or have it open on a separate device such as your smartphone or another PC. Some of the steps might require you to exit your browser on this PC.

2: Task Manager

Press Ctrl + Shift + Esc to enter the Task Manager. Go to the Tab labeled Processes (Details for Win 8/10). Carefully look through the list of processes that are currently active on you PC.

If any of them seems shady, consumes too much RAM/CPU or has some strange description or no description at all, right-click on it, select Open File Location and delete everything there.

Also, even if you do not delete the files, be sure to stop the process by right-clicking on it and selecting End Process.

3: IP related to 1Fjg3Q89MawTyfNcMbX6MUnfT923icRuMy

Go to c:\windows\system32\drivers\etc\hosts. Open the hosts file with notepad.

Find where it says Localhost and take a look below that. 

If you see any IP addresses there (below Localhost) send them to us here, in the comments since they might be coming from the 1Fjg3Q89MawTyfNcMbX6MUnfT923icRuMy.

[add_forth_banner]

4: Disable Startup programs

Re-open the Start Menu and type msconfig.

Click on the first search result. In the next window, go to the Startup tab. If you are on Win 10,  it will send you to the Startup part of the task manager instead, as in the picture:

If you see any sketchy/shady looking entries in the list with an unknown manufacturer or a manufacturer name that looks suspicious as there could be a link between them and 1Fjg3Q89MawTyfNcMbX6MUnfT923icRuMy , disable those programs and select OK.

5: Registry Editor

Press Windows key + R and in the resulting window type regedit.

Now, press Ctrl + F and type the name of the virus.

Delete everything that gets found. If you are not sure about whether to delete something, do not hesitate to ask us in the comments. Keep in mind that if you delete the wrong thing, you might cause all sorts of issues to your PC.

6: Deleting potentially malicious data – 1Fjg3Q89MawTyfNcMbX6MUnfT923icRuMy

Type each of the following locations in the Windows search box and hit enter to open the locations:

%AppData%

%LocalAppData%

%ProgramData%

%WinDir%

%Temp%

Delete everything you see in Temp linked to 1Fjg3Q89MawTyfNcMbX6MUnfT923icRuMy Ransomware. About the other folders, sort their contents by date and delete only the most recent entries. As always, if you are not sure about something, write to us in the comment section.

The post Remove 1Fjg3Q89MawTyfNcMbX6MUnfT923icRuMy (Bitcoin Mail Removal Guide) appeared first on Malware Complaints.