Remove “Programmer who cracked your email” Bitcoin Virus (Nov. 2018 Update)


How irritating is this problem? (13 votes, average: 5.00)

Loading...

This page aims to help you remove “Programmer who cracked your email”. Our removal instructions work for every version of Windows.

If you have recently become a target of a viral email bitcoin blackmailing scam, then you may find the information on this article useful. Many users have recently contacted us with regards to a email blackmailing scare, which is going around the mailboxes of thousands of people worldwide. The gist of the scam is a scary message from a self-proclaimed hacker sent to the users, which states that the hacker has compromised their victims’ passwords and computer through a malware infection. The crook then asks for a ransom payment in bitcoins so as not to make public the acquired sensitive data found on their victims’ computers. Once such a message appears, there is no way not to ask yourself whether you really have security issues with your PC? While in most of the cases this could be just a scam, sometimes, it could also indicate that a Trojan Horse might have sneaked inside the machine and might have secretly provided its creators with unauthorized access. In order to rule out the second possibility, we suggest you scan your system with a reliable anti-malware tool (such as the one on this page) and acquaint yourself with the characteristics of the Trojan Horse infections so you could better protect your system from any potential malware attacks.

The email states:
Hello! I’m a programmer who cracked your email account and device about half year ago. You entered a password on one of the insecure site you visited, and I catched it. Your password from <emailremoved> on moment of crack: <fakepassword removed> Please don’t try to contact me or find me, it is impossible, since I sent you an email from your email account. Through your e-mail, I uploaded malicious code to your Operation System. I saved all of your contacts with friends, colleagues, relatives and a complete history of visits to the Internet resources. Also I installed a rat software on your device and long tome spying for you. You are not my only victim, I usually lock devices and ask for a ransom. But I was struck by the sites of intimate content that you very often visit. I will not do this if you pay me a little amount. I think $871 is a nice price for it! I accept only Bitcoins. My BTC wallet:

Remove “Programmer who cracked your email”

If you have a Windows virus, continue with the guide below.

If you have a Mac virus, please use our How to remove Ads on Mac guide.

If you have an Android virus, please use our Android Malware Removal guide.

If you have an iPhone virus, please use our iPhone Virus Removal guide


Step1

Some of the steps will likely require you to exit the page. Bookmark it for later reference.

Reboot in Safe Mode (use this guide if you don’t know how to do it).

Step2

WARNING! READ CAREFULLY BEFORE PROCEEDING!

Press CTRL + SHIFT + ESC at the same time and go to the Processes Tab. Try to determine which processes are dangerous. 

malware-start-taskbar

Right click on each of them and select Open File Location. Then scan the files with our free online virus scanner:

Drag and Drop Files Here to Scan
Maximum file size: 128MB.

This scanner is free and will always remain free for our website's users. You can find its full-page version at: https://howtoremove.guide/online-virus-scanner/




Scan Results


Virus Scanner Result
ClamAV
AVG AV
Maldet


After you open their folder, end the processes that are infected, then delete their folders. 

Note: If you are sure something is part of the infection – delete it, even if the scanner doesn’t flag it. No anti-virus program can detect all infections. 

Step3

Hold together the Start Key and R. Type appwiz.cpl –> OK.

appwiz

You are now in the Control Panel. Look for suspicious entries. Uninstall it/them. If you see a screen like this when you click Uninstall, choose NO:

virus-removal1

Step4

Type msconfig in the search field and hit enter. A window will pop-up:

msconfig_opt

Startup —> Uncheck entries that have “Unknown” as Manufacturer or otherwise look suspicious.

  • Remember this step – if you have reason to believe a bigger threat (like ransomware) is on your PC, check everything here.

Hold the Start Key and R –  copy + paste the following and click OK:

notepad %windir%/system32/Drivers/etc/hosts

A new file will open. If you are hacked, there will be a bunch of other IPs connected to you at the bottom. Look at the image below:

hosts_opt (1)

If there are suspicious IPs below “Localhost” – write to us in the comments.

Step5

Type Regedit in the windows search field and press Enter.

Once inside, press CTRL and F together and type the virus’s Name. Right click and delete any entries you find with a similar name. If they don’t show up this way, go manually to these directories and delete/uninstall them:

  • HKEY_CURRENT_USER—-Software—–Random Directory. It could be any one of them – ask us if you can’t discern which ones are malicious.
    HKEY_CURRENT_USER—-Software—Microsoft—-Windows—CurrentVersion—Run– Random
    HKEY_CURRENT_USER—-Software—Microsoft—Internet Explorer—-Main—- Random

Representatives of the Trojan Horse malware category can be found everywhere and if you don’t know how to avoid them, you might face a lot of serious system issues in the future. A recently released malware named “Programmer who cracked your email” is one particularly dangerous Trojan Horse that might be linked to this whole phishing spam scheme. This Trojan-based virus is capable of performing actions of fraud, blackmailing, spam distribution, theft of passwords and credentials as well as serious system corruption and data destruction without showing any visible symptoms during the time it operates.

Not showing symptoms makes it very stealthy and difficult to detect “Programmer who cracked your email” which is why the best way to catch it on time and before it manages to cause any harm is to scan your computer with a good antivirus software tool. In case that the scan detects it, you are advised to immediately take the necessary steps to remove the Trojan. Keep in mind though, that such an advanced and sophisticated malware may block your security tool in order to prevent its removal. Because of this, we have also prepared a step-by-step removal guide, which contains instructions on how to manually deal with the nasty infection. Anyone who needs to remove “Programmer who cracked your email” can scroll up and take a look at the said instructions or ask us to further explain the guide or provide additional help in the comments section at the end of the page.

The timely elimination of “Programmer who cracked your email” in a fast and safe manner is crucial if you want to avoid serious and sometimes even irreparable damage. As a typical Trojan, this threat can execute different tasks, which entirely depend on what the hackers want to achieve. If the crooks want to steal your passwords or hack into your accounts, they can program the malware for that. They can even set it to hack into your webcam and mic and to secretly spy on you in order to further involve you in their blackmailing schemes. What is more, with the help of such a malware they can insert other viruses into your machine and infect you with nastier threats like Ransomware or Rootkits. Note, however, that you should still not trust the phishing e-mails or fullfill their requests – even if there’s malware on your PC, it’s better to take care of it yourself!

SUMMARY:

Name “Programmer who cracked your email”
Type Trojan
Danger Level  High (Trojans are often used as a backdoor for Ransomware)
Symptoms  There may be no particular symptoms, which can indicate the presence of an infection. 
Distribution Method  Various transmitters such as infected emails and attachments, misleading links, fake ads, illegal websites, torrents, pirated content. 
Detection Tool

If the guide doesn’t help, download the anti-virus program we recommended or try our free online virus scanner. Also, you can always ask us in the comments for help!


Leave a Comment