Home Malware Programs Ransomware ‘Warning! Piracy Detected!’ Fake Alert

‘Warning! Piracy Detected!’ Fake Alert

Posted: May 21, 2011

Screenshot'Warning! Piracy detected!' is a fake alert used by a ransomware Trojan as part of a scam that locks down your computer. 'Warning! Piracy detected!' ransomware infections will claim to be notifications from a fake organization that monitors illegal file transactions. Although 'Warning! Piracy detected!' Trojans insist that you must pay a large fine to regain the use of your PC, the supposed organization that is being represented doesn't exist, and the 'Warning! Piracy detected!' Trojan has no legal authority. You can delete 'Warning! Piracy detected!' Trojans and restore your computer by using appropriate anti-malware programs in combination with Safe Mode or another secure boot method.

The Fraudulent Nature of 'Warning! Piracy detected!' Warnings

'Warning! Piracy detected!' Trojans use a noticeably official-looking error window to make it look like your PC is being warned by an official source. In addition to various official-seeming seals related to the RIAA and other media entities, 'Warning! Piracy detected!' ransomware will claim to be from the ICPP, a fake organization with its own fake website at icpp-online.com. This website is maintained by an entity using the email address of ovenersbox@yahoo.com, an address which has prior links to Koobface and Zeus-related scams. The 'Warning! Piracy detected!' ICPP website's contact information, such as its Italian phone number, are merely visual placeholders that lead to dead-ends if you try to use them.

Unlike most ransomware warning screens, 'Warning! Piracy detected!' will go so far as to detect torrents on your PC. 'Warning! Piracy detected!' warning screens also offer other types of detailed information that are not usually used by ransomware Trojans, like 'lawsuit preview' documentation, logged IP addresses and general lists of evidence of copyright violations. 'Warning! Piracy detected!' states the following:

Warning! Piracy detected!
Pirated content was detected on your PC!
You are seriously violating copyright by:
- Media files downloaded from torrents
- Pirated movies from peer-to-peer networks
- Cracked software from file-sharing services

Copyright fund has received report and has started an investigation. You'll receive subopena in a week

'Warning! Piracy detected!' warnings will re-occur even if you ignore them, constantly requesting that you pay a $400.00 settlement fee to avoid more serious legal penalties. Since the fake organization linked to 'Warning! Piracy detected!' ransomware Trojans have no legal authority and offers no protection for your credit card during transactions, paying that high fee is self-destructive at best.

How to Yank 'Warning! Piracy detected!' Warnings Off Your Machine

Multiple versions of 'Warning! Piracy detected!' Trojans have been reported, so keeping your security applications updated for the very latest threats is necessary to insure adequate protection against this Trojan. Most versions of 'Warning! Piracy detected!' Trojans will hide in subfolders of your Documents and Settings folder and use the file name 'jqmanager.exe.'

'Warning! Piracy detected!' Trojans have been reported to attack different applications to prevent you from uninstalling the 'Warning! Piracy detected!' ransomware; this can include altering the interface of Task Manager, as well as blocking most websites or disabling your Internet connection.

Despite these problems, the 'Warning! Piracy detected!' Trojan hasn't been reported to cause permanent harm to infected computers; the greatest danger in a 'Warning! Piracy detected!' problem lies in your accidentally giving away your credit card number or your money. If you switch to Safe Mode, reboot to a different operating system, or boot Windows from an external source, 'Warning! Piracy detected!' should refrain from running.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



iqmanager.exe File name: iqmanager.exe
File type: Executable File
Mime Type: unknown/exe

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\..\..{Subkeys}C:\Documents and Settings\[USERNAME]\Application Data\IQManager\iqmanager.exe
Loading...