Remove “I greet you I have bad news for you” Email Bitcoin Virus (July 2019 Update)

How irritating is this problem? (9 votes, average: 4.78)

This page aims to help you remove “I greet you I have bad news for you”. Our removal instructions work for every version of Windows.

Virtual security experts have recently been warning about a popular email bitcoin scam, which could be related to a specific type of a Trojan Horse infection, named “I greet you I have bad news for you”. This specific Trojan-based infection seems to have focused on spamming the users’ mailboxes with a ransom-demanding message that asks them to send a certain amount of money to a specific BitCoin wallet.

The email states:

“I greet you! I have bad news for you. 11/08/2018 – on this day I hacked your operating system and got full access to your account [email protected] It is useless to change the password, my malware intercepts it every time. How it was: In the software of the router to which you were connected that day, there was a vulnerability. I first hacked this router and placed my malicious code on it. When you entered in the Internet, my trojan was installed on the operating system of your device. . . . . I am strongly believe that you would not like to show these pictures to your relatives, friends or colleagues. I think $825 is a very small amount for my silence. Besides, I spent a lot of time on you! I accept money only in Bitcoins. My BTC wallet: 17vzpL7n29egdeJF1hvUE4tKV81MqsW4wF You do not know how to replenish a Bitcoin wallet? In any search engine write “how to send money to btc wallet”. It’s easier than send money to a credit card!”

A number of users have been recently greeted by the phishing email, which is supposed to trick them into believing that their computer has been secretly compromised by the malware of a self-proclaimed hacker and that some sensitive private data of the user would be uploaded online and/or send to their list of contacts if they don’t pay the ransom. In case that you landed on this page because you have also received such an email, you should know that the “facts” stated there are most likely false. Typically, such emails are just a scam and only aim to trick you into sending your money away. However, if you have opened and interacted with such a message, it is not excluded that its creators might have inserted malicious code that you might have triggered the moment you have clicked the message. That’s why it is a good idea to check your system for hidden malware by running a full scan with a reliable antimalware tool. Trojans such as “I greet you I have bad news for you” can oftentimes be found inside such spam emails and can secretly compromise the computer without you noticing it. What is more, such pieces of malware, if you have already been infected with them, could actually be the cause for phishing and scam emails like the one that we described above. That’s why, in this article, we will focus on how to quickly and safely detect and remove “I greet you I have bad news for you” from your computer and how to protect your system in the future. The removal guide below contains detailed instructions on that, as well as a trusted automatic removal tool for risk-free removal.

Remove “I greet you I have bad news for you” Email Bitcoin Virus

If you have a Windows virus, continue with the guide below.

If you have a Mac virus, please use our How to remove Ads on Mac guide.

If you have an Android virus, please use our Android Malware Removal guide.

If you have an iPhone virus, please use our iPhone Virus Removal guide


Some of the steps will likely require you to exit the page. Bookmark it for later reference.

Reboot in Safe Mode (use this guide if you don’t know how to do it).



Press CTRL + SHIFT + ESC at the same time and go to the Processes Tab. Try to determine which processes are dangerous. 


Right click on each of them and select Open File Location. Then scan the files with our free online virus scanner:

Drag and Drop Files Here to Scan
Maximum file size: 128MB.

This scanner is free and will always remain free for our website's users. You can find its full-page version at:

Scan Results

Virus Scanner Result

After you open their folder, end the processes that are infected, then delete their folders. 

Note: If you are sure something is part of the infection – delete it, even if the scanner doesn’t flag it. No anti-virus program can detect all infections. 


Hold together the Start Key and R. Type appwiz.cpl –> OK.


You are now in the Control Panel. Look for suspicious entries. Uninstall it/them. If you see a screen like this when you click Uninstall, choose NO:



Type msconfig in the search field and hit enter. A window will pop-up:


Startup —> Uncheck entries that have “Unknown” as Manufacturer or otherwise look suspicious.

  • Remember this step – if you have reason to believe a bigger threat (like ransomware) is on your PC, check everything here.

Hold the Start Key and R –  copy + paste the following and click OK:

notepad %windir%/system32/Drivers/etc/hosts

A new file will open. If you are hacked, there will be a bunch of other IPs connected to you at the bottom. Look at the image below:

hosts_opt (1)

If there are suspicious IPs below “Localhost” – write to us in the comments.


Type Regedit in the windows search field and press Enter.

Once inside, press CTRL and F together and type the virus’s Name. Right click and delete any entries you find with a similar name. If they don’t show up this way, go manually to these directories and delete/uninstall them:

  • HKEY_CURRENT_USER—-Software—–Random Directory. It could be any one of them – ask us if you can’t discern which ones are malicious.
    HKEY_CURRENT_USER—-Software—Microsoft—-Windows—CurrentVersion—Run– Random
    HKEY_CURRENT_USER—-Software—Microsoft—Internet Explorer—-Main—- Random

If there’s an actual Trojan on your PC, you should be aware of what it might be capable of.

Receiving scam email messages that ask you to pay a ransom for keeping your data private could be just the beginning of what might happen in case that your PC has been infected with a Trojan like “I greet you I have bad news for you”. This type of malware might cause much more serious problems if not removed on time. Aside from trying to scam you, the Trojan virus may secretly load the system with other threats such as Ransomware, Spyware or Rootkits, or steal your passwords and other sensitive information in order to further use it for other scam campaigns, theft and fraud.  Unfortunately, by the time you realize what has happened, it might be too late to save your system and your privacy. That’s why you really must not waste time and focus on how to remove the infection in the fastest and the most risk-free way. The “I greet you I have bad news for you” removal tool on this page and the instructions in the removal guide can greatly help you with that, but for future protection, you really have to think about investing in reliable antivirus software. Keeping away from insecure web locations, sketchy ads, and illegal websites may prevent some malicious programs from entering your system, but ,oftentimes, the danger may come from a single careless click on a legitimate-looking transmitter and this is when a security program might come in handy.


Name “I greet you I have bad news for you”
Type Trojan
Danger Level  High (Trojans are often used as a backdoor for Ransomware)
Symptoms  This Trojan may initially lack any particular symptoms, which makes its detection really difficult. 
Distribution Method  Malicious emails and attachments, spam, torrents, pirated content, Malvertising, illegal websites. 
Detection Tool

If the guide doesn’t help, download the anti-virus program we recommended or try our free online virus scanner. Also, you can always ask us in the comments for help!

Leave a Comment