Computer Locked - MoneyPak Virus
Written by Tomas Meskauskas
Damage level: Severe
Computer Locked (MoneyPak Virus) - how to remove ransomware infections?
Messages that lock computer users' screens, demanding payment of a fine using MoneyPak for supposed law violations, are a scam. These messages are classed as ransomware infections and created by cyber criminals to trick unsuspecting PC users into paying bogus fines. To make their screen lockers appear authentic, these criminals exploit the names of authorities such as the FBI, the Department of Justice, the Internet Crime Complaint Center, etc. Ransomware infections are often localised and able to present computer users with deceptive messages as if sent from their local authorities. This localisation is possible, since ransomware infections are capable of detecting the IP addresses of PCs targeted for infiltration.
In fact, Green Dot MoneyPak is a legitimate pre-paid card service and in no way connected to cyber criminals, however, their service is exploited to collect bogus fines from computer users who fall for the trickery employed within deceptive ransomware infections. To scare PC users into paying the bogus fines, cyber criminals use statements within their messages claiming that PC users have downloaded illegal files, used copyrighted material, or have been watching pornography. These messages are false and used only to intimidate computer users. In fact, no international authorities use such methods (locking computer users' desktops) to collect fines for any law infringements. If you see a message blocking your screen and demanding payment of a fine for law violations, your PC is infected with ransomware, and it should be eliminated from your computer immediately.
Ransomware infections are commonly proliferated using Trojans and drive-by downloads. To avoid infiltrations by GreenDot MoneyPak viruses, PC users should express caution when downloading video codecs and software updates (only download from reputable sources). Cyber criminals often use these downloads to infect computers. Also, be sure to use legitimate antivirus and antispyware software. Other secure computing practices include updating your operating system and keeping all installed software up-to-date. If your computer is already infected with a message demanding payment of a fine using MoneyPak, do not pay it. Use the removal guide provided to eliminate this scam from your PC.
"Computer Locked - MoneyPak Virus" removal:
Start your computer in Safe Mode. Click Start, click Shut Down, click Restart, click OK. During your computer starting process press the F8 key on your keyboard multiple times until you see the Windows Advanced Option menu, then select Safe Mode with Networking from the list.
Video showing how to start Windows 7 in "Safe Mode with Networking":
Video showing how to start Windows 8 in "Safe Mode with Networking":
Log in to the accountinfected with MoneyPak virus. Start your Internet browser and download a legitimate anti-spyware program. Update the anti-spyware software and start a full system scan. Remove all entries detected.
After completing these steps, your computer should be clean. Reboot your computer in normal mode.
Notice that some ransomware infections are capable of encrypting files stored on an infected PC. If you are dealing with such an infection, use some of the tools listed below to decrypt your files.
To regain control of your files (decrypt) try using these tools:
Alternative MoneyPak virus removal guide:
Cannot boot in Safe Mode with Networking? (Computer Locked MoneyPak virus blocks Safe Mode with Networking)
If you cannot start your computer in Safe Mode with Networking, try performing a system restore.
Video showing how to remove ransomware virus using "Safe Mode with Command Prompt" and "System Restore":
1. During your computer starting process, press the F8 key on your keyboard multiple times until the Windows Advanced Options menu appears, and then select Safe Mode with Command Prompt from the list and press ENTER.
2. When Command Prompt Mode loads, enter the following line: cd restore and press ENTER.
3. Next, type this line: rstrui.exe and press ENTER.
4. In the opened window, click "Next".
5. Select one of the available restore points and click "Next" (this will restore your computer system to an earlier time and date, prior to the ransomware infiltrating your PC).
6. In the opened window, click "Yes".
7. After restoring your computer to a previous date, download and scan your PC with recommended malware removal software to eliminate any remnants of MoneyPak virus.
Other tools known to remove MoneyPak virus: