'Mandiant U.S.A Cyber Security' Ransomware

'Mandiant U.S.A Cyber Security' Ransomware Description

ScreenshotThe 'Mandiant U.S.A Cyber Security' Ransomware belongs to the notorious Urausy family of malware. ESG security researchers have received reports that the 'Mandiant U.S.A Cyber Security' Ransomware blocks all access to Windows, threatening the computer user so a ransom of $300 USD will be paid. The 'Mandiant U.S.A Cyber Security' Ransomware blocks all access to the victim's files, Desktop or applications. The 'Mandiant U.S.A Cyber Security' Ransomware displays a fake message from the FBI as well as from other government agencies such as Interpol and the Department of Justice. The 'Mandiant U.S.A Cyber Security' Ransomware message threatens the victim, accusing them of participating in illegal activities such as viewing illegal pornographic material and distributing malware. ESG security researchers strongly advise against following the 'Mandiant U.S.A Cyber Security' Ransomware Trojan's instructions. The 'Mandiant U.S.A Cyber Security' Ransomware is not associated in any way with police enforcement; this fake message is part of a scam to try to steal your money.

The Huge Fine Asked by the 'Mandiant U.S.A Cyber Security' Ransomware

The 'Mandiant U.S.A Cyber Security' Ransomware demands payment of its $300 USD ransom through MoneyGram or MoneyPak. These are vouchers that are purchased in stores in the United States which permit computer users to make online payments. Although the 'Mandiant U.S.A Cyber Security' Ransomware message claims that the 'Mandiant U.S.A Cyber Security' Ransomware will unblock access to the infected computer if the ransom is paid, this is not true. It is important to remember that paying 'Mandiant U.S.A Cyber Security' Ransomware's ransom will do nothing to remove this threat from your computer or restore access to the infected computer.

The 'Mandiant U.S.A Cyber Security' Ransomware scam uses an elaborate, highly convincing ransom message. This message accuses the victim of viewing child pornography and other types of illegal pornographic material. The 'Mandiant U.S.A Cyber Security' Ransomware then goes on to list the different articles of the law that include the penalties for these types of offenses. These penalties are quite severe, including years of jail time and thousands of dollars in fines. These types of messages are meant to scare inexperienced computer users, making them believe that they are being prosecuted by the law. They are often written in the victim's country's language and reference the country's main police agencies. Viewing the 'Mandiant U.S.A Cyber Security' Ransomware message carefully reveals numerous inconsistencies, grammar errors and misspellings, indicating that it is actually part of a scam rather than a real, official message from the police.

Technical Information

Screenshots & Other Imagery

'Mandiant U.S.A Cyber Security' Ransomware Image 1

Registry Details

'Mandiant U.S.A Cyber Security' Ransomware creates the following registry entry or registry entries:
RegistryKey
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon "shell" = "explorer.exe,%AppData%\cache.dat"

More Details on 'Mandiant U.S.A Cyber Security' Ransomware

The following messages associated with 'Mandiant U.S.A Cyber Security' Ransomware were found:
Mandiant U.S.A. Cyber Security
FBI. Department of Defense
U.S.A. Cyber Crime Center
Interpol

Attention!
Your computer has been blocked for safety reasons listed below.

You are accused of viewing/storage and/or dissemination of banned pornography (child pornography/zoophilia/rape etc). You have violated World Declaration on non-proliferation of child pornography. You are accused of committing the crime envisaged by Article 161 of United States of America criminal law.

Article 161 of United States Of America criminal law provides for the punishment of deprivation of liberty for terms from 5 to 11 years.

Also, you are suspected of violation of "Copyright and Related rights Law" (downloading of pirated music, video, warez) and of use use and/or dissemination of copyrighted content. Thus, you are suspected of violation of Article 148 of United States of America Criminal Law.

Article 148 of United States of America criminal law provides for the punishment of deprivation of liberty for terms from 3 to 7 years or 150 to 550 basic amounts fine.
It was from your computer, that unauthorized access had been stolen to information of State importance and to data closed for public Internet access.

.

.

The penalty set must be paid in course of 48 hours as of the breach. On expiration of the term, 48 hours that follow will be used for automatic collection of data on yourself and your misconduct, and criminal case will be opened against you.

Amount of fine is 300$. You can settle the fine with MoneyPak or MoneyGram xpress Packet vouchers.

As soon as the money arrives to the Treasury account, your computer will be unblocked in course of 24 hours.
Then in 7 day term you should remedy the breaches associated with your computer. Otherwise your computer will be blocked up again and criminal case will be opened against yourself (with no option to pay fine).

6 Comments

  • Emmanuel,Flores J:

    My tablet was lock by this virus but in was not watching pornography on purpose it just came out and i don't have money to pay this fine

  • Shawn Graham:

    i was browsing the web on my mobile device. it locked up with a very similar message. i cant even access the home screen. do i have to get a new phone?

  • karina:

    My tablet is locked and nobody watched pornography i dont have money to pay this fine

  • Laquanebarnes:

    Can't use my tablet because of that virus the same one HELP

  • nadia:

    guys it's simple. Power off your device and turn it on again.As soon as its on rush to the settings before it goes back on the cyber police page.Once your in settings hurry up and reset your device it will remove everything and no longer have the virus.This happened to me a few days ago and I never looked up child porn infact I am a child(12) also I knew they were losing cause I never copied any work already done by another person.

  • Dominique Mason:

    I need help on removing the virus off my Samsung Galaxy 4 Tablet please help

Leave a Reply

Please DO NOT use this comment system for support or billing questions. For SpyHunter technical support requests, please contact our technical support team directly by opening a customer support ticket via your SpyHunter. For billing issues, please refer to our "Billing Questions or Problems?" page. For general inquiries (complaints, legal, press, marketing, copyright), visit our "Inquiries and Feedback" page.


HTML is not allowed.