How to remove "Your phone has been blocked up" Android infection.
The “FBI Department of Defense” warning message: “Attention, Your phone has been blocked up for safety reasons listed below. All The actions performed of this phone are fixed. All your files are encrypted. CONDUCTED AUDIO AND VIDEO.” is an Android ransomware virus belonging to the Koler Trojan family (Andr/Koler-A) , that claims that your phone is blocked because of law violations about “Copyright and Related rights Law” (downloading of piracy music, video or warez software” or because you have accessed pornographic material. The virus makes it impossible to access your phone, informs you that your phone is blocked and your files are encrypted and asks you to pay a fee of 300$ using MoneyPack, XpressPack or BitCoin untraceable money transfer services to unblock it within 48 hours, otherwise your phone will stay blocked and your files encrypted.
The good news of the “Attention, Your phone has been blocked” ransomware infection is that the virus doesn’t affect your files in any way but -the bad news- is that you cannot access them or use your phone, because the warning message stays in front of all phone applications and settings so it makes it impossible to access them.
The “Attention, Your phone has been blocked up for safety reasons” ransomware virus is a FAKE warning notice and may appear in different languages depending on the user’s location. The full FAKE warning message that appears on the phone’s screen is as follows:
“ FBI Department of Defense
Your phone has been blocked up for safety reasons listed below. All The actions performed of this phone are fixed. All your files are encrypted. CONDUCTED AUDIO AND VIDEO.
You are accused of viewing/storage and/or dissemination of banned pornography (child pornography/zoophilia/rape etc.) You have violated World Declaration on non-proliferation of child pornography. You are accused of committing the crime envisaged by Article 161 of United Stated of America criminal law.
Article 161 of United States of America criminal law provides for the punishment of deprivation of liberty for terms from 5 to 11 years.
Also, you are suspected of violation of “Copyright and Related rights Law” (downloading pof pirated music, video warez) and of use and/or dissemination of copyrighted content. Thus, you are suspected of violation of Article 148 of United States of America criminal law.
Article 148 of United States of America criminal law provides for the punishment of deprivation of liberty for terms from 3 to 7 years or 150 to 550 basic amounts fine.
It was from your phone, that unauthorized access had been stolen information of State importance and to data closed for public Internet access.
Unauthorized access could have been arranged by yourself purposely on mercenary…
The penalty set must be paid in course of 48 hours as of the breach. On expiration of the term, 48 hours that follow will be used for automatic collection of data on yourself and your misconduct, and criminal case will be opened against you.
…Amount of fine is 300$. You can settle the fine with MoneyPak xpress Packed vouchers.
As soon as the money arrives to Treasury account, you phone will be unblocked and all information will be decrypted in course of 24 hours. ‘
The “Attention, Your phone has been blocked up for safety reasons” ransomware virus infects your Android phone if you visit malicious websites or if you install a phone Application from an unknown source or from a legitimate site that has been hacked. Commonly this type of viruses tricks users to install malicious software on their phone in order to access a website or to watch video online. For that reason you must always pay attention and do not install applications from unknown sources.
In order to unblock your phone for this type of ransomware infection you have to start your Android device in “Safe Mode” in order to be able to uninstall the nasty application from your device.
In the following steps you can find detailed instructions on how to start your phone in “Safe Mode” and uninstall the malicious application that is responsible for the “Attention, Your phone has been blocked” ransomware infection:
How to unblock your Android phone and remove the “phone has been blocked’ (Andr/Koler-A) virus.
Step 1. Start your phone in “Safe Mode”
First of all, you have to start your Android phone in Safe Mode. The instructions below are different for each Android mobile. So, follow the given instructions according to your Android device model.
Google Android Devices & various Android Open Source Project, or AOSP, derivatives like CyanogenMod.
To enter into Safe Mode in various Android Devices, perform the following operation:
- Press and hold the power button like you want to power off or reboot your Android device.
- At the menu that comes up, tap and hold the "Power off" option. *
- Normally a new popup menu should appear on your screen that asks you to “Reboot to safe mode”. Answer “OK” at this point and let your phone to reboot in Safe Mode.
* Note: If nothing happens, try the same operation with the "Restart" option.
Samsung Galaxy S4 & Samsung Galaxy S5.
To enter Safe Mode in Galaxy S4 & Samsung Galaxy S5 mobile devices, perform the following operation:
- Turn off your Android phone.
- Turn on your phone and repeatedly tap the “Menu” button.
Alternate method for S4 & S5:
- Turn off your Android phone.
- Hold the "Power" button to turn on your phone.
- When the Galaxy logo appears on your screen, press and hold down the "Volume Down" button until you see the 'Safe Mode' appear on the lower left corner on the screen
Samsung Galaxy S3 and other mobile devices.
To enter Safe Mode in Galaxy S3 mobile & other devices, perform the following operation:
- Turn off your Android phone.
- Turn on your phone and – according to your phone model – immediately press and hold down the following key(s) :
- Volume Down (Samsung Galaxy S3 & other devices)
- Volume Up (HTC One and other devices)
- Volume Down + Volume Up – together – (Motorola devices)
Note: When you enter “Safe Mode” then you will see the text “Safe Mode” at the bottom left corner of your phone screen.
Step 2. Uninstall the malicious application (App) from your Android device.
When your enter in Safe Mode:
1. Open Application Manager. To do that:
- Go to Apps.
- Tap Settings.
- Tap to open Application Manager or Apps menu. *
* Note: In Samsung S3 and other devices, the Application Manager (Apps) can be found under the More menu (on the top).
2. When you enter Application Manager, find and uninstall* any of the following malware apps in the list below:
* Note 1: To Uninstall an app in Android: Tap on the app name and then tap in order: Clear cache, Clear Data and finally tap the Uninstall Button.
* Note 2 : If Uninstall option is grayed out then go to: Settings > Security > Device administrators. Tap the app that you cannot uninstall. Choose "Deactivate". (Then Uninstall the malicious app).
Malware Apps List (Name)
- BaDoink
- Browser Update
- Flash Player
- Malware App
- Porn Droid
- Porn-player
- Videos
- System Update
- Update Installer
- Choose “OK” to confirm your decision.
3. Reboot (Restart) your Android device normally and you ‘re done!
Update for anyone that cannot remove the Android FBI-Police virus using the steps described in this article:
I have written a new more detailed guide on how to remove Android viruses that can be found here: How to Scan and Clean your Android Device from Adware, Virus & Malicious Apps. The new article is based on the current article, but it contains some very important extra steps and details about the FBI-Police virus removal procedure.
We're hiring
We're looking for part-time or full-time technical writers to join our team! It's about a remote position that qualified tech writers from anywhere in the world can apply. Click here for more details.
- How to Disable Device Encryption in Windows 11. - April 17, 2024
- How to View Permissions on Shared Folders on Windows 10/11. - April 15, 2024
- FIX 0x80070643 error in KB5034441 update (Solved) - April 10, 2024
White
March 7, 2017 @ 5:09 am
THANK YOU SOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO much!!!!!!!!!!!!!!!!!!!!!!!
I don't even know how the app got installed on my phone
Nizam
September 16, 2016 @ 7:20 am
Thankyou soooooooooooooooooooooooooooooooooo much
Shelly
July 21, 2016 @ 1:29 am
Hi – I can't figure out which app it is.
How do I determine which app to try to install?
It isn't badoink.
lakonst
July 21, 2016 @ 11:26 am
@Shelly: Hi, Uninstall any of the following malicious apps: Browser Update , Flash Player, Malware App, Porn Droid, Porn-player, Videos, System Update, Update Installer (I updated the article too, thanks)
Andrew
July 12, 2016 @ 3:36 pm
I need help for my Android 5.0.2 I'm on Galaxy Tab A 9.7 with S pen SM-P550. I don't know how to boot into safe mode, and i never got it on this Android, it's my new Android, because the Android i had before has been infected with that virus then i turn off my Android, i try do turn on it but it's didn't turn on. Its why i bought my new Android. I want know how to boot into safe mode on this new samung to don't have this virus. Please answer me fast. Remembre: Samsung Galaxy Tab A 9.7 with S pen, SM-P550.
lakonst
July 12, 2016 @ 5:44 pm
@Andrew: I don't know how to boot your model into safe mode: Try this procedure:
1. Turn the device off.
2. Press and hold the Power key.
3. When 'Samsung' logo appears, release the Power key and
4. Immediately press and hold the Volume down key *
5. Continue to hold the Volume down key until the device finishes restarting.
* If this fails try to press and hold down the Volume Up key (4)
Good luck.
Mike
June 29, 2016 @ 10:29 am
Thank it really works on S3 thanks. I nearly bought a new phone.
ernie
May 5, 2016 @ 4:28 pm
i un installed system up date what now plz helpppppppppp!!!!!!!!!!!!!!!!!
lakonst
May 5, 2016 @ 4:53 pm
@ernie: Now scan and clean your android device by using this guide: https://www.wintips.org/android-malware-removal-and-protection-guide/
.:.
May 5, 2016 @ 4:19 pm
hello the police try to help but they didnt know any thing
brandon
May 4, 2016 @ 3:02 am
Thank you so much, a real life saver. i checked other websites but they didn't really help.
brandon
May 4, 2016 @ 3:06 am
now when i go into administrator, my phone locks and i cannot turn the screen back on for a few seconds.
DUKE
April 13, 2016 @ 12:54 am
im pretty sure the unknown app is "Porn Player" but it doesnt allow me to click uninstall and when i went to security to deactivate the administration it wont let me click "OK" then the screen goes black and it goes back to homepage.
how do i get this thing off!!!!???
Luck mofo
April 11, 2016 @ 11:51 pm
Thank u so f***ing much!!!!!!
Dabonii
March 17, 2016 @ 7:34 am
Thanks it works for the galaxy s5 .. I did exactly what you explain and it actually wrk. Thanks a million
James Green
January 1, 2016 @ 10:06 pm
WOW. I have used all the steps mentioned on all sites i found regarding this crappy ransomware, but noting is working. I initially tried manually finding the culprit in the form of running apps, downloaded and all apps but I couldn't find anything suspicious. I then used safe mode to install avast (which I have been using on my desktop for 8 years plus) and program would not show up in app screen. So then I took the second step of desktop avast removal tool via playstore after logging in. Still nothing!
So I have now installed avg as well. Both show up in the app screen (when i'm quick enough to scroll screens) a few seconds before the popup comes up. Managed to click avg for a scan just before the popup. Scan completed, and using my samsung s3 it was possible to pull down setting screen from top and avg said click here to see results. Of course I could not see results though! I reckon it's possible that this threat has evolved and is somehow blocking antivirus attempts and icons showing in safe mode. Looks like I have to do a factory reset!
TipToGuysIfThoseStepsWontWork
December 22, 2015 @ 2:36 pm
Try to Reboot your Android Device. I Rebooted 3minutes ago, working very well. ( I logged on my Google Account + SD Card all Games, Everyone Automaticly Downloaded on the Device ), Good Luck ! I Had A Lot pf problems with this. Dont panic too much..
Awpenheimer
December 19, 2015 @ 4:43 pm
to any one that cant find badoink it may also be system update.
nihalrahman
December 13, 2015 @ 12:00 am
when i went to safe mode the virus that downloaded itself was under xxx adult player and when i went to uninstall it on my samsung galaxy s2 : settings>applications>downloads>xxx adult player> the uninstall button was not highlighted therefore it wouldnt uninstall please help asap thank you
lakonst
December 13, 2015 @ 10:48 am
@nihalrahman: Go to Settings > Security > Device Administrators. Find the malicious App from the list and "Deactivate" it. Now return to downloaded apps and uninstall the malicious App.
ben
October 31, 2015 @ 12:48 am
thanks so much I realised it was an app that installed itself so I deleted it now its all working fine
Gene
October 8, 2015 @ 2:57 pm
Can anyone tell me if they have experience with this virus downloading images to your phone or does it just lock you phone? I have a friend who indicated that after getting the virus multiple webpages opened and then there were images in his phone
mendy
September 9, 2015 @ 5:54 pm
I had the same problem it worked .but for some strange reason all my photos in my gallery on my device not in my SD card' are blocked I can't view the picture it's blocked
lakonst
September 10, 2015 @ 9:05 am
@mendy: You can view your picture on your pc or not? If yes, backup your pictures and then reset your phone to factory settings.
Ambiikiins
August 31, 2015 @ 8:52 am
Hey just wondering if anyone knows whether or not the virus can effect iPhones?
Deanna
August 10, 2015 @ 3:01 pm
husband has Galaxy s5 and he got the fbi warning he cannot even do anything through safe mode it's asking for a pin. He went and logged into his Google play from a computer and downloaded the avant app it shows as download but don't know hat to do next please help
lakonst
August 15, 2015 @ 11:27 am
@Deanne: You have to install the AV app on your phone.
Maddie
August 6, 2015 @ 7:10 am
Hi!!
I have a Samsung Mini Galaxy S4. I had this notice want was only blocking the Google Chrome page I was at the moment. I was able to get rid of the "warning" by showing up all the tabs and close the current page. It didn't affect the other applications. Does this mean I'm ok? Thank you!
lakonst
August 6, 2015 @ 5:10 pm
@Maddie: Clear your cache and history.(see step 4 on this guide: https://www.wintips.org/android-malware-removal-and-protection-guide/)
KC
July 30, 2015 @ 1:28 pm
I put my phone in safe mode & did a factory reset. Simple as that. Didn't have to do anything els.
chan
July 29, 2015 @ 9:51 pm
I have a LG Optimus. And the fbi Virus is on it foe 500 dollars on my other phone it has blocked me and i can even get the power off and restart to come on and it has my picture and phone numbers of my grannie and stuff and im freaking oit it just downloaded itself to my phone and it wants money for animal porn o dont have someone please help im 15 and i dont jave any money
aaron96
July 29, 2015 @ 6:26 pm
okay i just got this poppong up on my chrome internet dashboard. it is tellin me my exact gps coordinates when my gps is off how is this?
Ali
July 26, 2015 @ 8:35 am
Hi, I did your guiding step by step . But the uninstall tab in my phone ( Galaxy S3 mini ) isn't active . :(
Please Guide me .
Thank You
I'm from Iran
lakonst
July 26, 2015 @ 11:18 am
@Ali: If Uninstall option is grayed out then go to: Settings > Security > Device administrators. Tap the app that you cannot uninstall. Choose “Deactivate“.
princess
July 25, 2015 @ 6:01 am
I have pressed and held the power button as normal but it will not even come up with the power off screen. To turn the phone off i have to take the battery out. please help, now what?
lakonst
July 25, 2015 @ 8:49 am
@princess: Please follow the steps from this guide.
Billie
July 24, 2015 @ 5:12 pm
hey, so i was on a website and all in the sudden my phone went crazy and told me that my phone had been bloocked due to saftey reasons, and wanted me to either click reload the page or not to reload the page. well i clicked not to reload the page but it wont exit out of the page, then it keeps saying a bunch of stuff about the FBI and articles and laws, but wont let me exit out and now i cant access the internet, it is on my galaxy s4. i started looking online on my computer about viruses and figured it was the FBI scam virus, but when i try and find it i cant figure out where it is. i couldnt find any mysterious Apps, so then i decided to look in my downloads, well come to find out something is downloading on my phone but then i decided to get AVAST and clean up my phone. even through the clean up process my phone still wont detect a virus or even let my on the internet and i dont know what to do.
lakonst
July 25, 2015 @ 8:47 am
@Billie: Please follow the steps from this guide.
Jimmy J
July 18, 2015 @ 8:11 pm
I got that same virus mentioned above on my android. So I had contracts, ect saved on my sd card. After that I rebooted my phone to factory settings, and all was good after.
L.L
June 4, 2015 @ 6:28 am
he easiest way to get rid of this is to while in safe mode go to settings, the go to more (if your hone has this option) then go to application manager. go to ruing apps. find factory mode click on factory mode then click on stop then go to whatever app that is blockig your phone and unistall. works like a charm
Njrm
May 31, 2015 @ 2:13 am
Alright, I am locked out of just my interenet. I have a Samsung galaxy s4. I was able to delete the BaDoink app and I download 3 different ransomware removers and none of them detected a problem but when I open my Internet app, the pop up shows up? All of my apps work perfectly. Help?!?
lakonst
May 31, 2015 @ 11:13 am
@Njrm: Clear your cache and history. If you don't know how to do that then follow these instructions.
mystery
May 12, 2015 @ 4:07 am
i need help i have an lg3 please help
lakonst
May 12, 2015 @ 10:04 am
@mystery: Turn off your phone and Power On it again. When you see the LG logo, press and hold down the Volume Down key until you see the "Safe Mode" indication in the lower left corner of your home screen. Then follow the steps in this post: How to Scan and Clean your Android Device from Adware, Virus & Malicious Apps
michael
May 5, 2015 @ 8:07 am
For anyone still having trouble go to your running apps stop them all. My phone attempted to download an upgrade for old software and my phone was not cleared of the virus until I uninstalled the "upgrade". Must be done in safe mode. Also go through all apps, running and downloaded, and look for any unrecognized apps and be sure that the app you are going to uninstall is the one that needs to be deleted. There may be more than one. Follow the link to the guide in iakonst comment above ^^^^^
michael
May 5, 2015 @ 6:55 am
It seemed to work the first time then when i restarted my phone to get out of safe mode it did it again. And I do not have any porn related apps. So I assume it came from a website i entered. I cleared all my history, cache, passwords everything . Could I just leave my phone in safe mode? Is there anything else I could do?
Would really appreciate some help
lakonst
May 5, 2015 @ 9:48 am
@michael: I'm sure that you have a malicious app running on your phone.
Kathy
May 3, 2015 @ 1:29 am
It won't allow me to uninstall the app, also, I can't get to settings. I have an htc thunderbolt, and it's not in service. I use it for music.
Haligo
April 9, 2015 @ 2:24 pm
I cant delete this virus( i followed your guide but it still doesnt work)….
But then i went to safe mode and setback my phone and then the virus was gone because i delete evertthing…
jeff
March 14, 2015 @ 6:00 pm
The way I managed to uninstall it on my LG was to follow above instructions thru security settings twice!(it will block and show the FBI page both times,) I had to power off and back on both times using safe mode procedure! Then on third time I went to apps downloaded and this time it gave me option to force stop and uninstall it!
Matt
March 7, 2015 @ 3:09 pm
OK so I'm not a tech genius. But I'm not a tech illiterate. I followed all of the steps accordingly. I have an lg optimus g pro. I get to the phone administrators click the check box on "porn app" and I click deactivate and BOOM overlay virus takes over and I can't uninstall it. I reset back into safe mode and ding. Its check in phone administrators again. Uncheck, deactivated ding overlay virus yay. Reset in safe mode…. You get the picture. Now what? It'd taking over safe mode when I unchecked it. HELP!!!
lakonst
March 9, 2015 @ 12:16 pm
@Matt: Please follow this guide and tell me the results.
Rafael
March 1, 2015 @ 3:55 am
i have the Pornplayer fbi virus and when i try to deactivate on security it turns the virus on. i try both ways and i cant get the virus off please help.
Ramel Harper
March 1, 2015 @ 12:53 am
And it dwnloaded the app it dwnloaded was pornplayer nd it wont uninstall I ddnt even install this
lakonst
March 9, 2015 @ 12:17 pm
Please follow this guide and tell me the results.
Ramel Harper
March 1, 2015 @ 12:52 am
I tried to uninstall and it wont let me … I dwnloaded the avast anti virus thing and did everything like it said bt the uninstall on the box wont become available and wen I try.to deactivate it on the device administration it goes automatically to the screen wit the fake fbi stuff
joe
February 22, 2015 @ 8:26 pm
@ADRIAN: Exact same problem here!!! The viral app is called browser update 1.0 and it is a device admin and cant be erased or uninstalled
carlos
February 22, 2015 @ 5:51 pm
It also says I have to pay a 500$ fine with paypal
carlos
February 22, 2015 @ 5:48 pm
I was looking for mods for mine craft then something downloaded and when I clicked on it it locked my phone and can't turn it on to safe mode on my s4
john
February 21, 2015 @ 10:27 pm
thanks for the help it was so simply you have saved me few quid very handy indeed
Adrian
February 21, 2015 @ 8:43 pm
Please help I try uninstalling it and it is called "browser update" and it says "cannot uninstall:this package is an active device administrator." When I click on device administration settings it says "no device administrators available"
bmikami
February 17, 2015 @ 9:55 am
I had this happen to me on my galaxy not 4 , but it only infected the Internet browser app. I can use the Google Chrome app just fine and access the rest of my phone , but its blocking the internet app. How do I get rid of this? I didn't download or watch anything ! I don't have any new apps and I even checked in safe mode!
Amanda
February 13, 2015 @ 8:34 am
Anyone know how to decrypt/unlock the files and photos after removing FBI virus? All of my pictures of my daughter and my fiancé on Christmas and my daughter's 9th birthday the day after that. Very important and sentimental photos. Also, all of my pictures of my grandfather who passed away a year ago. Please, please, please HELP ME! Email me with instructions achvz4611@gmail.com
Livia
February 10, 2015 @ 1:12 pm
Super really works,my handy is like new
Livia
February 10, 2015 @ 1:12 pm
Super tare, de o saptamana nu îmi mai merge Samsungul s 5 acum funcționează din nou cu ajutorul instructiunilor d aici very good instructions, try it all it really works thank you all
Abby Wightman
February 7, 2015 @ 10:40 pm
I don't know what to do I'm really destraught I only got my phone on sunday and it was my dads old one and I don't know how to tell him . the phone is a Samsung galaxy s2 please help.
Troy
February 2, 2015 @ 10:57 am
If nothing else will work remove the battery for 24 to 48 hours then within a few minutes delete the porn player app.
shay
January 31, 2015 @ 10:00 pm
My son did this to his phone and thank God for you posting this! Its now gone!!!! Thank you so much!!!
Mks
January 22, 2015 @ 12:55 am
I have a Samsung Galaxy relay
Mks
January 22, 2015 @ 12:54 am
It's not working! It says the app is a device administrator but when I go to device administrator, it's not there!?!
ali sheikhpour
January 16, 2015 @ 7:59 am
thanks for your assistance. it was profitable
Matt
January 15, 2015 @ 8:49 pm
Aaaaah….I go to disable in the device administrators and it just pops up with the fake warning…so then it's blocking my phone in safe mode??? Help! Galaxy mega
fandi
January 15, 2015 @ 5:36 am
I have samsung galaxy tab 3 and I have tried your way but it doesn't work in my device. When i want to uncheck the app in device administrator, the malware lock my screen again while i'm in the safe mode. When i want to use avast i cannot use it in safe mode.. in normal mode i just have a time about 10 second to see my home and then malware lock my screen.. please help me, i'm so confused
brotherhood
January 14, 2015 @ 7:33 pm
Still doesn't work, none of the malware removers detect the malware. Can't uninstall or uncheck the box. Lg volt. Porn player app
Manny
January 14, 2015 @ 5:27 am
I also get it today and find it hard just to stop the warning in the beginning, then it stopped and did not show again but the 3 viruses been self-download as the phone said at the beginning, had disabled my internet in the phone. I spend the whole day off/ on trying to fix the problem by follow the steps with the Safe mode but no result because I didn't see a virus named (Badoink) and I couldn't download Avast thru the Apps. Then I started the checked every suspect Apps in my phone and search the name using my Computer if it is a virus plus I disabled few specious or unknown apps till it start to respond and download the Android Antivirus who catch it and the I disables and also avast Mobil security and then it and back to work FINALLY after I was almost to reload the whole system thru the corporate store and to loss my info. the virus, malware or spyware apps that I found name was (PHOTO EDITOR) not BaDoink. thanks for info..was really usefully……..
lee
January 10, 2015 @ 6:39 pm
I have a galaxy note 4. My trojan is under video. I went to safe mode and deactivated/deleted it but when I restarted it, the fbi crap popped back up. Help me
lakonst
January 11, 2015 @ 11:19 am
Install & run Malwarebytes & Avast.
tim
January 9, 2015 @ 1:24 pm
I have this virus. I cant find the app. Tryed looking in safe mode. Nothjng shows up.any help would be great. Thanks
love Jones
January 9, 2015 @ 5:25 am
I uninstalled all apps as well as deleted downloads i am using my Alcatel one touch phone In safe mode FBI blocker is still up when I check what should I do?
lakonst
January 9, 2015 @ 8:46 am
@lovejones: Install Malwarebytes-Antimalware or Avast's Antinirus from Google Play store to remove the infection.
(https://play.google.com/store/apps/details?id=org.malwarebytes.antimalware)
(https://play.google.com/store/apps/details?id=com.avast.android.mobilesecurity)
yoooo
January 6, 2015 @ 8:12 pm
mine was under videos works great now.
gavin
January 1, 2015 @ 4:30 pm
I can do everything put deactivate it and when I try to it takes me to the lock page. WHAT DO I DO NOW I'M 14 AND SCARED AS CRAP PLEASE HELP ME.
diego
December 31, 2014 @ 2:44 pm
Just to be clear there is no official warning from the FBI at all?
lakonst
January 2, 2015 @ 11:05 am
No, there is not.
deggsy
December 29, 2014 @ 2:25 pm
My son (12) woke me up in the early this morning in tears as his phone had woken him up with an alert, when he he opened his phone he was confronted with the warning after a pop up had appeared on his phone, the pop up was some porn video player which then lead to the warning appearing.
Anyway the file was in his download file not installed as an app, I followed the advice above deleted the download, couldn't see the app in the app manager but it hadn't installed anyway, the challenge was getting the browser window to close, finally managed to close the window, installed malware bytes & avast and his phone is back to normal.
What concerns me is he is adamant he wasn't looking at porn sites, he's a very immature 12 year old and I believe him, so not sure why this happened to him, anyway those of you saying you can't find the app, simply check the download files and delete it from there, close the browser window and the message should disappear.
Kevin
December 29, 2014 @ 7:16 am
If it is no longer blocking me from using the internet and the message is not popping up when I use the internet anymore does that mean that it was successfully removed?
Kevin
December 29, 2014 @ 6:52 am
I am in safe mode, but there is no badoink in my apps. I have an HTC one M8 is there another name that it would be under?
Caleb
December 28, 2014 @ 4:40 pm
I got a Samsung note 2. And when I try to deactivate it, it sends me right back to the virus. Please help….
Danny
December 28, 2014 @ 11:30 am
I prasie you… seriously im so thankful. just thank you man
Kirito .-.
December 27, 2014 @ 4:29 pm
please help im pretty sure the unknown app is "Porn Player" but it doesnt allow me to click uninstall and when i went to security to deactivate the administration it sends me back idk what to do even in safe mode
shabseta
January 12, 2015 @ 1:49 pm
I have the same problem but i don't know how to get rid of it.
tom
December 26, 2014 @ 6:26 pm
I cannot get rid of it the only administrator on my Lg Optimus Us780 is my phone
lexxi
December 26, 2014 @ 3:48 pm
Omg thank you
flameme
December 26, 2014 @ 11:37 am
my alcatel is not responding
flameme
December 26, 2014 @ 11:39 am
alcatel 991
Blank
December 25, 2014 @ 7:36 am
It Won't let me turn off the app
Blank
December 25, 2014 @ 7:39 am
every time i try to deactivate it takes me to the FBI page
Jacob
December 24, 2014 @ 12:39 am
I am using an older android device. I believe it is a motorola droid 3 and its volume button is broken. is there any way bither than with the volume buton that i can enter safe mode
lakonst
December 24, 2014 @ 8:51 am
@jacob: Take a look here: http://www.verizonwireless.com/support/knowledge-base-27713/
Ray
December 23, 2014 @ 12:18 am
My galaxy exhibit encounter this virus and i cant get my phone to work help please.
Xnuc
December 22, 2014 @ 3:22 pm
Thanks for the reply lakonst, I had tried that in safe mode but because of the administrator privileges it still wouldn't delete.
Eventually I backuped my phone using Samsung's Kies 3 (making sure the offending Malware wasn't selected) and did a factory reset my phone.
Not everything restored, but all the important stuff did. Still, killing the virus took up the better part of two days.
Xnuc
December 19, 2014 @ 10:04 pm
I have an ATT Galaxy S4 and I got the virus.
I can go into same Mode but when i try to deactivate the Flash Update it starts the virus.
I installed both Malwarebytes-Antimalware and Avast's Ransomware removal tool, they installed don't don't run. I can't get them to run in safe mode.
any help would be much appreciated.
lakonst
December 20, 2014 @ 1:04 pm
@ Xnuc: (I don't know for sure if this works): In Safe Mode: Tap "My Files" app, and tap "All Files". Now tap the Menu button and tap "Search". Type the name of the nasty app & then tap the "Search icon". Now tap & hold at the nasty's app folder name and choose "Delete". Then restart your phone.
Good luck and tell us the results.
Kaitlin
December 12, 2014 @ 1:49 pm
Thank you so so so so so much for writing this article! It's 3:48am, and I was freaking out because of that dang pop up screen. I thought I was going to have to pay a $500 fine or whatever it was. I've been up since 2, trying to figure out what was going on. I'm so glad I saw this article!
don
December 9, 2014 @ 11:36 pm
How do I remove this shot off of a lg3
lakonst
December 10, 2014 @ 10:19 am
@don: 1. Turn off your phone. Turn on and when you see the LG logo, press and hold the Volume Down key until you see Safe Mode (at lower left) at the home screen.
2. Go to Apps > Settings > Applications > Application Manager. Tap & Uninstall the nasty App.
3. (To Restart in Normal Mode again) Press & Hold the Power button. Tap Power Off & Restart.
jonathan
December 7, 2014 @ 7:17 am
O nd by the way, i was able to take screenshots of the really good work them fuckers did, if anything just let me know. Oo nd they misspelled washington wrong they put (whashington) so people take good look for minor errors, dont think the fbi doesnt know how to spell xD
jonathan
December 7, 2014 @ 7:13 am
Dude u fuckin saved me $500!!!i was really going to pay them assholes that money!! I found it wierd that they told me i could pay off my "mistake" so i found u guys (or girls..or both) u dont even imagine wath i did to get that money but u guys are the best.. dont have a creditcard but ill sure remember u guys when i do ;) peace!!
Legacy
December 6, 2014 @ 7:59 am
I have a LG-LS970 version 4.1.2 and ive tried everything i searched…. NONE has worked…. specifically my options are "System Settings > Security > Phone administrators
And even if i UNcheck the box, then check to see if i could uninstall "Porn Droid XXX video" it just stays grey the entire time. I feel the hack is slowly killing my phone WHILE in Safe Mode. I just witnessed a few good apps of my favorite disappear out of no where and i have no way to get them to open from "Apps" nor get them reinstalled due to Safe Mode effects…. I need desperate help.
lakonst
December 6, 2014 @ 1:27 pm
@Legacy: Install Malwarebytes-Antimalware or Avast's Antinirus from Google Play store to remove the infection.
(https://play.google.com/store/apps/details?id=org.malwarebytes.antimalware)
(https://play.google.com/store/apps/details?id=com.avast.android.mobilesecurity)
Sejour
December 17, 2014 @ 5:35 am
When I go to device admin the only thing it lets me deactive is phone info and when I click thsg it doesnt even work. I did and tried EVERYTHING.
Basheer
December 5, 2014 @ 8:33 am
Thanks…with your detailed illustration i could easily get rid of the malware software
chynaDoll
December 3, 2014 @ 7:00 am
This helped us out a lot. But I found out that after the device administrator you deactivate it there but go back to app manager and remove it there to.
My 13 year old daughter was so scared because child pornography popped up all on her screen. Again thank you.
Rico Sauvey
December 1, 2014 @ 12:53 am
I have a LG Optimus and got the virus from a porn site the only difference was first they wanted 500$ and it wasn't called "badoink" it was called "Porn droid XXX" so after I got it into safe mode ;by restarting and holding down the volume key and went to apps it was in the downloaded coulmn under Porn droid XXX it was greyed out so then I tried the device administrators way in found it deleated it restarted the phone but FBI page came back so this time after restarting again in safe mode I went to download apps and this time it wasn't greyed out so I uninstalled it restarted the phone and BAM !! phone fixed. Thanks
matt
November 30, 2014 @ 5:46 am
I also have the porn droid xxx video app virus and can't uninstall it. When I go under device administrators, the app isn't listed there. I am doing all of this in safe mode and cannot run any of the virus scans cuz I can't launch them. This sucks. Wtf can I do?
lakonst
November 30, 2014 @ 10:05 am
@matt: Download and install Malwarebytes Antimalware (from Safe Mode) & then try to clean your phone.
Richard
December 4, 2014 @ 1:03 am
I have a samsung galaxy s5 and repeatedly tapping the menu button does absolutely nothing but show no recent apps? Any help?
lakonst
December 4, 2014 @ 10:39 am
@ Richard: Turn off your Android phone.Hold the "Power" button to turn on your phone. When the Galaxy S5 logo appears on your screen, press and hold down the "Volume Down" button until you see the 'Safe Mode' appear on the lower left corner on the screen
Tiger
November 30, 2014 @ 2:34 am
none of these options work for alcatel phones, all you can do with them is either have them professionally wiped or buy a new one…. sorry all i just had that same problem and have searched for hours on a way to fix it and no one has any clue wht to do with the alcatel phone…. my tech says thats all you can do for them…. good luck and if anyone ever does find a way to fix the alcatel please let me know. thanks
steek
November 29, 2014 @ 10:34 pm
the program that make the problem in my phone is not on the Device administrators how can i remove it if it not there
norbert
November 29, 2014 @ 5:25 am
I have an LG intuition phone, ive followed all the steps but in wont let me forced stop or uninstall.
lakonst
November 29, 2014 @ 9:54 am
@norbert: Go to Settings > Security > Device administrators & tap the app that you cannot uninstall. Choose "Deactivate". Now go back to Application Manager & Uninstall it.
corbin H.
November 29, 2014 @ 3:42 am
OK I've tried all the steps and i still cant uninstall it i am in safe mode and in the app manager my file is called xxx video and all the buttons are greyed out what do i do i installed avast and i can not open it up in safe mode and when i reboot my phone and try i cant get avast opened before the FBI bull shit pops up i have a Galaxy s3
lakonst
November 29, 2014 @ 9:52 am
@corbin: Go to Settings > Security > Device administrators & tap the app that you cannot uninstall. Choose "Deactivate". Now go back to Application Manager & Uninstall it.
Chigo
November 29, 2014 @ 8:30 pm
There arent any apps listed to deactivate. The when i turn off safe mode i try to do all that really fast but the FBI shit beats me to it. SO FRUSTRATING
jhon
December 3, 2014 @ 4:04 am
Im doing that but it still won't work
Edward
November 27, 2014 @ 3:15 pm
i cant see my photos and my music file after successfully removing this virus…. plz help me….!!!
lakonst
November 27, 2014 @ 5:12 pm
@Edward. You cannot open them or you cannot list them? Also have you try to transfer the files into a computer?
Matheus
November 22, 2014 @ 8:29 pm
Excellent. Great Tutorial and very easy to understand.
ladarius
November 19, 2014 @ 3:57 am
I have a Samsung galaxy s ,someone please help me ..i have the same problem
rubber duck 0124
November 19, 2014 @ 12:22 am
help galaxy s3 cant find any thing out of ordiary no bdoink app or anything help please
Joe
November 18, 2014 @ 5:59 am
I was able to get rid of it by going to app manager and uninstalling the app that i last downloaded simply called "videos". it was a fake video player that i downloaded unintentionally.
MikalOdom
November 17, 2014 @ 6:31 am
I removed it the hard way.
Restarted my phone and before it could start up again, went to my app manager and removed it.
The only bad thing is, that my files are still encrypted. I don't know how or what to do to fix it. But the malware is gone.
Please email me at mikalodomii@Gmail.com if you can help.
MikalOdom
November 17, 2014 @ 6:33 am
Also note I have an HTC Desire.
Reda
November 14, 2014 @ 10:11 am
hello,
Guys i need help in these virus it blocked my phone and keep giving me the fbi page, i cant even use my phone, i tried to restart it and to turn it to safe mode but nothing work, i have samsung s4 pls help
lakonst
November 14, 2014 @ 6:26 pm
Reda, to edit in Safe Mode in Samsung Galaxy S4.
1. Power the phone Off.
2. Hold the Power button to turn on your phone.
3. When the Galaxy S4 logo appears on your screen, press and hold down the Volume Down button until you see the 'Safe Mode' appear on the lower left corner on the screen.
To exit safe mode:
1. Power the phone Off. (DO NOT RESTART)
2. Power On your phone again.
Michael
December 26, 2014 @ 2:00 pm
Get rid of it. Return it to the manufacture get a New. One e
Steven H
November 14, 2014 @ 8:40 am
my htc 1 got this virus and I cant get it to reboot in safe mode. Is there any other way to do this?
lakonst
November 14, 2014 @ 6:36 pm
Steven, to edit Safe Mode in HTC 1
1. Press and hold down the 'Power' button.
2. On the screen, touch and hold at 'Power Off' under Phone Options.
2. When the 'Reboot to safe mode' message appears, tap 'Restart' to enter Safe Mode.
To exit from Safe Mode:
1. Press and hold down the 'Power' button.
2. On the screen, touch and hold at 'Restart' under Phone Options.
2. When the 'Restart Phone' message appears, tap 'Restart' to exit Safe Mode.
Eric
April 10, 2015 @ 1:38 pm
My htc one doesnt have that option, it just says hold for 3 more seconds to restart and when i try to start it in safe mode with the volume button that doesnt work either. Tried a hard reset too but that didnt work either. Is there any other way to start in safe made or do a hard reset??
lakonst
April 11, 2015 @ 9:10 am
@Eric: According to HTC this is the way to perform a hard reset on HTC one.
p.s. Have you tried the steps in this article?
scott
November 12, 2014 @ 5:02 pm
Thank you for your advice. This was very helpful.
jon
November 11, 2014 @ 1:59 am
It wont let me uninstall
Nic
November 4, 2014 @ 1:09 pm
Thank you so much!!! It worked perfectly! And if anyone is having trouble, and you don't see the 'Badoink' app, it's something like 'Videos' or anything like that… Uninstall it! Once that is done, go to 'Settings' and go to 'Security' then click the box where it says 'Allow installation of apps from any source other than Google Play Store, if it's checked, uncheck it. Once that is done, go to your home screen and restore, or restart, you phone and you're done!
bRyAn
October 27, 2014 @ 3:04 pm
I have a note 3 and I've done everything there is no debonk app in the fine I've put the anti virus on here too what am I doing wrong
lakonst
October 27, 2014 @ 3:35 pm
Probably the malicious app has a different name, so remove any unknown app listed in application list.
Ned
October 31, 2014 @ 4:57 am
Hold down the Volume down button,Power and the Menue button together at the same time until it turns off then when u feel it vibrate let go and it will take you to a screen where it will ask u to push up to continue or down to cancel just push up to continue and wait till the process is done.
tb
October 27, 2014 @ 1:39 pm
Id liek to say thanks man, yoi saved my ass. Ill et you a nice donate ion whne I can
Will
October 27, 2014 @ 12:38 pm
Thank you very much this Site saved my life. I first knew something was up when everyone on line was saying 300 because my phone was saying 150. I went through the steps and it worked first try, it started in an anti virus app and it's like it spread to the flash player.
eulices pineda
October 12, 2014 @ 2:58 am
Help me please, I have a galaxy s4 and I have tried everything…and every time I turn my phone back on it would send me straight to that federal FBI page, and I can't get out of it…and it says that if I don't pay the fee is going to send a message to all of my contacts
FANCHY DEJESUS
September 23, 2014 @ 8:55 am
Thanks for help. It didn't say badoink but I seen an app that wasn't suppose to be there and I deleted it and restarted phone and it works perfect.
gerardo
September 7, 2014 @ 9:24 am
Wasuup guys…for me it was fake adobe. ..I tried everything you have mentioned….but not succeed…..so finally I enter safe mode navigate to menu….storage…and perform a factory reset….lost a few stuff but have to do what I have to do….hope it works for you guys….
Mohammad Istiyaque Alam
August 27, 2014 @ 5:44 pm
thnks thnks thnks thnks
brother
ann
August 27, 2014 @ 3:06 am
It doesnt do anything when i hold the power button
kevin
August 26, 2014 @ 11:45 am
I tried these steps and it worked…this virus was under flash app. Thank you for this tip.
Preston hart
December 19, 2014 @ 4:09 am
Hey kevin what steps did you take? I also have the virus because of the fake adobe flash player!
anele
December 8, 2015 @ 2:18 am
l have a huawei and its blocked
Aa
August 22, 2014 @ 2:15 pm
i first learned of this virus from a youtube video…and i have to battle it..*ahem* had… thanks to this article its clear and free… im not letting anything suspicious in my phone again…
annamarie
August 19, 2014 @ 10:23 pm
what if u didnt download any porno app then how do u get rid of it
The silent fool
August 17, 2014 @ 5:17 pm
i forgot to mention for me it wasnt badoink but something else called private video so if yours happens to be because of porn then you should look for that app or maybe they are catching on and want to throw us off anyways THANK YOU SO SO MUCH
The silent fool
August 17, 2014 @ 5:13 pm
than you god okay definently done with porn @.@ like fuck man i almost went to say fuck it and destroyed the phone like umm hello no 300$ and then the fbi? yeah right they would have been done got me i knew this shit was a scam soemthing needs to be done
umarshah89
August 17, 2014 @ 2:45 pm
Thank u very much………………………………..Thanks a lot
Doc M.C.
August 17, 2014 @ 3:54 am
Thanks, I almost went to spend that $300. Sobered up real fast. Geeeeeeezzzzz!!!!!!!
steve
August 12, 2014 @ 10:23 pm
i had the same problem freaked me out never heard of this
i found out if u just keep restarting your phone be fast before the pop up comes up
hurry to factory rest an do that it takes it right out
i got an anti virus from my phone company an i put my phone is safe mode.
it fixed the problem an phone is working fine
just make sure you have an sd card an you had your pics number etc backe up or
on the cloud with your phone servies
shaquille
August 11, 2014 @ 4:43 pm
ive tried everything and it wont let me do anything. HELP ME!! I have a Galaxy AMP
Samuel
July 28, 2014 @ 9:42 pm
can you erase your phone and get rid of this virus, because I've tried them all it none have worked
andrew
July 25, 2014 @ 3:58 am
can't use google play!!! Any other location I can download Avast's ransomware removal app?
Jason
July 24, 2014 @ 11:38 pm
Hi everyone I'm having a similar case as well but mine was under the guise of Norton Security. Now I did all the steps that it suggest here but like the others when in safe mode it won't let me and when I went to remove it through security it kicks up the screen. I downloaded Avast and started it up like normal but as I get the app started the virus kicks me back to the Fake screen. Any tips on how to fix this?
Nik
July 22, 2014 @ 7:53 pm
Hi! Just got encountered with this myself (my dad + new smartphone= mayhem) None of this was working for me also because of the latest malware, so what I did was went into safe mode like instructed, and accessed the Google Play Store. I downloaded this free antivirus called "Avast" and once it installed, restarted the phone in normal mode.
Once I restarted and it got to the where the FBI screen were to be, Avast caught the malware (in my case, a fake Norton Internet Security) and FINALLY allowed me to uninstall successfully. I restarted the phone again just to be certain it worked, checked settings and the virus was gone!
I told myself if I figured something out, I'd share this on all of the sites I used trying to find a way out of this mess, so I hope this works for you!!
Jason
July 25, 2014 @ 5:39 am
I had a similar problem myself with a fake Norton. I've done everything in these steps and the Virus is still on there. When I tried to remove it in safe mode it wouldn't let me nor would it transfer over to SD to be deleted. When I tried to uncheck it and then it kicked me to the lock page again. When I tried to useAvast or the other AntiMalware it started looking for it but a few seconds into it and it kicked me back to the lock screen. Anyone know how to fix that or delete it?
fwoosh
July 26, 2014 @ 1:54 am
Which Avast application?
Fwoosh
July 26, 2014 @ 7:54 pm
The ransomware comes back right after I uninstalled the "avast! Ransomware removal" app like it told me to.
Dan
July 27, 2014 @ 7:59 pm
This worked for me too……also a fake Norton Internet Security…took several attempts tho…..but did work..Thanx
Dan
July 27, 2014 @ 9:55 pm
It was gone cleaned and said was safe….but came back a few minutes later….can not remove it as admin and the avast does not see it
Edward
July 9, 2014 @ 7:04 pm
The fake adobe file is in the Device Administrator section with the box checked but it wont let me uncheck it.It says, "System application could not be removed" in a window and kicks me all the way to my home screen. What do I try now?
lakonst
July 10, 2014 @ 12:10 pm
@Edward: Install Malwarebytes-Antimalware or Avast's Antinirus from Google Play store to remove the infection.
(https://play.google.com/store/apps/details?id=org.malwarebytes.antimalware)
(https://play.google.com/store/apps/details?id=com.avast.android.mobilesecurity)
erin
July 9, 2014 @ 4:08 am
I got that damn game adobe version. It doesn't show up in administrative privileges but it has them and I have no idea how to deactivate them please help
lakonst
July 9, 2014 @ 10:32 am
@erin: Install Malwarebytes-Antimalware or Avast's Antinirus from Google Play store to remove the infection.
(https://play.google.com/store/apps/details?id=org.malwarebytes.antimalware)
(https://play.google.com/store/apps/details?id=com.avast.android.mobilesecurity)
reggie
July 3, 2014 @ 3:21 am
having the same issue…its greyed out…i cant force stop it…not allowing me to uncheck box by fake adobe…sends me to deactivate screen but still wont deactivate
James
July 1, 2014 @ 12:56 am
I have an Alcatel and cannot get it to start in safe mode.
Tiimothy Sa
August 24, 2014 @ 4:15 am
The Badoink App isn't listed in my apps
Sandro
November 24, 2014 @ 3:02 am
The Badoink app isn't listed on my apps either. Did you figure it out? Thank you.
Rhondalyn Archie
October 28, 2014 @ 10:00 am
Thanks this really helped and was able to uninstall
JTom
June 25, 2014 @ 9:56 pm
it isnt working for me…i cannot uninstall it while in safe mode, and even while not in safe mode, the unistall option is greyed out…what do i do?
lakonst
June 26, 2014 @ 10:58 am
Hello JTom. 1. Go to Settings > Security (or "Location and Security") > Device Administrators & Uncheck the box next to BaDoink. 2. Then try to Uninstall the nasty App again.
p.s. 'Force Stop' the "BaDoink" App before taping the 'Uninstall' button.
coolbik
February 7, 2015 @ 4:23 pm
what if it wont deactivate still and starts to pop up in the safe made
jdog
March 1, 2015 @ 5:02 am
i get that as well coolbik
Guill
March 7, 2015 @ 12:45 am
I get the same as coolbik, too what do i do?
lakonst
March 9, 2015 @ 12:17 pm
Please follow this guide and tell me the results.
marijn
March 28, 2015 @ 10:37 am
the guide still doesnt work, when i want to deactivate the app, it will pop-up again and block my Phone again, help plz
lakonst
March 28, 2015 @ 11:34 am
@margin: After 'Deactivate' immediately shutdown (or remove the battery from) your device. Then power on your device again and uninstall the app.
steven evans
January 24, 2016 @ 1:14 pm
my galaxy s2 has this government block virus only its named as system update even with a lil android man pic posing legit. only thing is i've gone onto safe mode, into app manager found it (as i said posing as "system update") and clicked onto it and uninstall wasnt highlighted so gone into security and into device administrators but i havent got a list of my apps only a android device manager an tick box i've tryd both ticked an unticked and the uninstall button is still not highlight. so i thought of a different way i could possibly do it, i held down my menu button an opened task manager, over to downloaded and found it with this time highlighted uninstall but once clicked it comes up, cannot uninstall this package is a active device administrator with a manage device admins button which takes me back to the android device manager screen which once again ticked and unticked doesnt work. could any1 help plzzzz
jaspreet singh
May 5, 2015 @ 4:25 pm
i am trying to remove the virus by your guide but i am not able to. I deactivated the app and removed my battery. but after that the same thing is popping up. please help
lakonst
May 6, 2015 @ 9:11 am
@jaspreet singh: Please follow all the steps fromn this guide and tell me the results.
Eric
November 20, 2015 @ 3:45 am
Thanks that was a ton of help
anna
July 31, 2015 @ 11:40 pm
I have galaxy Samsung S do I use the same method as the s5 ands s3
david
January 24, 2016 @ 4:16 pm
When i go to settings it just says android system updating try again later and it still doesn't let me fo in settings later what do i do
r
April 12, 2016 @ 12:28 am
I have a Galaxy Grand Prime, The was no BaDoink icon app anywhere. I removed the sim card from my phone, powered up the phone closed all the internet tabs reinserted the sim card everything worked fine.
Michael R
May 7, 2016 @ 6:08 pm
I have a galaxy s2 and got the cyper police virus locked me out. Went into safe mode and under settings- app manager- download, found a file called settings. Even with the widget graphic looked the same as androids.Seemed odd so deleted it and all is well. So cyber police virus is now called settings.