Ransomware (Browser Hijacker) from Carolina Shooters Club (NOT THIS FORUM)

bilall · Feb 15, 2017

I know this is long and somewhat technical, but it might save someone a lot of time and money:
I know some of you also are members of the Carolina Shooters Club.

I got a Browser Hijacker virus today while browsing the Carolina Shooters Club. It was the "Damaged Activation Key" hijack, which tries to get you to enter your Microsoft login and password and tries to get you to give them a credit card to "fix" your system. Once it is in your system, it will come up every time you start your browser.

If you get a popup stating that your activation key is damaged and you can't get around it, DO NOT click OK or the "X" button or call the fake Microsoft toll free number.. Instead, either turn off your system immediately or use task manager to end the browser task. Then you can start your browser from the command line without activating the hijacker. Then you can clear out all temp files, history, and so forth. This should clear up the problem.
If you do get this and need help, just send me a forum message and I'll do what I can to help you get rid of it.

BenMara · Feb 17, 2017

PC or Mac?

bilall · Feb 18, 2017

Blackbeard · Feb 19, 2017

More than likely came from the ad units. Sucks...but now that they sold out, it happens.

Long live Palmetto Shooters!

bilall · Feb 19, 2017

I know that the fact that I had a problem is no reflection on the CSC forum. It could have been anything from a rogue ad or a compromised entry in a DNS server somewhere.

I still prefer Palmetto Shooters. I just wish we could get some of the old members to return or get more new members and activity.

bilall · Feb 28, 2017

There is an active thread on Carolina Shooters Club for posts about ransomware that people have gotten from the site. Looks like quite a few people have had issues. Be cautious if you use that site.

bilall · Feb 28, 2017

I have been referring to the affected forum incorrectly. The actual name is "Carolina Shooters Club". I have corrected my posts to reflect the proper name. Sorry for the incorrect forum title.

octaviain · Mar 28, 2017

Do not worry about it! I do not pay for any Ransomware or fake pop up massage as i have found the solution to deal with Ransomware.
Actually there are many blogs provide manual guide to solve such problem.

I collect some of them and I think they are helpful:
http://911ransomware.com/forum/threads/list-of-free-ransomware-decryptors.53/

http://www.trymytools.com/category/ransomware/