Trojan.Tobfy Removal Guide

Trojan.Tobfy is a dangerous Trojan infection which is already known to a great number of computer users as ransomware. The Trojan locks the computer and generates a full-screen message which claims that the PC user is charged with particular illegal activities. There are a lot of different versions of the texts given in the fraudulent messages, but a tendency to refer to the use of copyrighted, or illicitly acquired, and pornographic material has been noticed.

With Trojan.Tobfy on the PC, you will not be able to use the computer; there will be no chance to access the desktop, download or use applications and so on. However, you can use Safe Mode but it is not convenient for everyday functions.

The Trojan can be downloaded as a regular application such as Skype or uTorrent, but as soon as it gets to the system, it modifies the Registry so that it can start running its processes once your Windows operating system starts. Moreover, depending on the version of Trojan.Tobfy, such processes as taskmgr.exe, regedit.exe, msconfig.exe and cmd.exe can be disabled.

As for the warning, it presents a well-known legal institution to make people believe that it has launched an investigation into the allegations presented in the warning. In fact, the institution presented, for example, FBI, has nothing to do with the lock-down of your computer and other malfunctions of the PC. For instance, the so-called FBI Virus requires that you have to pay a fine in order to unlock your computer. Depending on the version of the Trojan, the warning may demand from 50 to 400 U.S. dollars. Very often, the money has to be paid via Ukash, Paysafecard or MoneyPak. If your PC is already infected with a ransomware infection, ignore the content of the warning and remove the infection as soon as you can.

If you want to make sure that the warning is fake, you can contact the institution presented, but do not use the contacts provided by the threat. For example, one of the messages containing the credentials of FBI contains an email address fine@fbi.gov. In order to report abuse, you should fill out a real form available online instead of trying to get a confirmation letter that you really have to pay a fine.

Additionally, the Trojan may also try to threaten you into thinking that the computer lock-down related issue is serious by recording you with your own camera if one install. If you see yourself in a small screen, do not worry because it is just a trick. Ignore the content of the message, the emblems of police or any other institutions and terminate the threat instead of paying the money which is required.

How to remove Trojan.Tobfy

Windows Vista/7

1. Restart the computer.
2. As soon as the BIOS screen loads, start tapping the F8 key.
3. Using the arrow keys, select Safe Mode with Networking and press Enter.
4. Open the browser and go to http://www.411-spyware.com/download-sph and download SpyHunter.
5. Run the installer and scan the PC to detect Trojan.Tobfy.

Windows XP

1. Reboot the computer.
2. Wait for the BIOS startup screen to load and start tapping the F8 key.
3. Use the arrow keys to highlight Safe Mode with Networking and hit Enter.
4. Click Yes when the dialog box pops up.
5. Open the Start menu.
6. Launch Run.
7. Type msconfig in the Open box.
8. Press OK.
9. Under the Startup tab, uncheck all startup programs.
10. Click Apply.
11. Download SpyHunter.
12. Restart the computer.
13. Install the application and remove the threat.

Windows 8

1. Press the Windows key to open Start Menu.
2. Click on the Internet Explorer tile.
3. Type http://www.411-spyware.com/download-sph and press Enter.
4. Click on Run to uninstall the application.
5. Scan the PC to have the threat detected and removed.