CIA Special Agent 767 Screen Locker virus removal



The subject of our discussion today is CIA Special Agent 767 Screen Locker that tries to pass himself off as a dangerous virus. Typically, viruses pretend to be legitimate programs to convince user to download them to his computer, but in recent months we are witnessing the opposite tendency. Instead of creating ransomware, fraudsters have decided that it is much easier to create a garbage program that scares inexperienced users. This allows fraudsters to save a lot of money and time. Firstly, the creation of a program which is able to cover the desktop with terrible picture is much cheaper than building a program that can block access to the hard drive, implement encryption of any file on your computer and send encryption keys to swindlers so that the recipient cannot be traced. In addition, most of the programs such as "ransomware" (except for few the most complex) are quickly getting hacked by employees of large IT-companies. In such circumstances, the hackers have decided not to spend time and energy, and created another screen locker, which frightens the user, and requires to pay $100 (as in the case of late payment - 250 or 500) for decrypting the data, which were not even encrypted.



As you can see, CIA Special Agent 767 Screen Locker doesn’t pose a danger to your computer or to your data. The entire program consists of a simple script which puts the banner with CIA badge on the computer screen. Banner contains a statement that the data are encrypted, the demands of ransom and information on the methods of payment. On the banner there are two windows, in one of which there is pre-entered ID of Bitcoin wallet, and the other one is dedicated for a secret password for the "data recovery". This group of swindlers had recently established a similar virus, called M4N1F3ST0, and argued that user data are deleted, demanding money for their restoration. The most interesting is the fact that the passwords that disable banner are the same for both programs. In addition to the use of a password, the banner can be easily disabled by running the system in safe mode, and scanning it using a reliable antivirus program.

How to delete CIA Special Agent 767 Screen Locker

Step 1. Boot the system into safe mode

  • Press Start
  • Type Msconfig and press Enter

Safe mode. Step 1


  • Select Boot tab

Safe mode. Step 2



  • Select Safe boot and press Ok

More information about Safe mode: What is Safe Mode and how to boot computer in Safe Mode


Step 2. Scan the system with decent antivirus


CIA Special Agent 767 Screen Locker is not a serious virus, and all you need to remove it is to go into Safe mode, in which the banner will not block the Windows functionality and remove it with the help of anti-virus. We have created detailed instructions on how to remove the CIA Special Agent 767 Screen Locker out of the system, and encourage you to stick to them.


Special Offer

Download Spyhunter - Anti-malware scanner

We advise downloading SpyHunter to see, if it can detect malware for you.

Spyhunter has a biggest malware database

It protects the system against all kinds of threats: Trojans, adware and hijackers

24/7 Free Support Team

SpyHunter scanner detects threats and malware for free, but to remove infected elements you need to purchase a full version of program for 39.99$. More information about Spyhunter, EULA and Privacy policy.


Step 3. Disable Safe Mode and restart computer

  • Press Start
  • Type Msconfig and press Enter
  • Select Boot tab
  • Remove the check near Safe boot





Share your feedback to help other people
1 1 1 1 1 1 1 1 1 1 Rating 5.00 [1 Vote]

Add comment

Security code



Acronis suggestion to CrashPlans users

Around a month ago, there was an accident with CrashPlans backup software.

What is MicTrayDebugger and is it dangerous

This is a brief entry about MicTrayDebugger: what is it, how it appeared in the system, is it dangerous and how to get rid of it.

What is HoeflerText and is it dangerous?


This article is dedicated to the fraud scheme that is called HoeflerText font wasn't found. We will explain you what is this scheme and how to avoid it.

What is Wpad.dat virus and how it is used

The topic of our today's article is a script that had been unjustly called a virus. It’s Wpad.dat, and it is not a virus. We will explain what is Wpad.dat and how to prevent fraudsters to deceive yourself with its help.


Cancer virus trollware

This is an article about crazy Cancer virus and the madness that it brings to victim's computer.

This website uses cookies to improve your experience