Computer Locked - MoneyPak Virus

Also Known As: MoneyPak Ransomware
Distribution: Low
Damage level: Severe

Computer Locked (MoneyPak Virus) - how to remove ransomware infections?

What is Computer Locked - MoneyPak?

Messages that lock computer users' screens, demanding payment of a fine using MoneyPak for supposed law violations, are a scam. These messages are classed as  ransomware infections and created by cyber criminals to trick unsuspecting PC users into paying bogus fines. To make their screen lockers appear authentic, these criminals exploit the names of authorities such as the FBI, the Department of Justice, the Internet Crime Complaint Center, etc.  Ransomware infections are often localised and able to present computer users with deceptive messages as if sent from their local authorities. This localisation is possible, since ransomware infections are capable of detecting the IP addresses of PCs targeted for infiltration.

moneypak virus

In fact, Green Dot MoneyPak is a legitimate pre-paid card service and in no way connected to cyber criminals, however, their service is exploited to collect bogus fines from computer users who fall for the trickery employed within deceptive ransomware infections. To scare PC users into paying the bogus fines, cyber criminals use statements within their messages claiming that PC users have downloaded illegal files, used copyrighted material, or have been watching pornography. These messages are false and used only to intimidate computer users. In fact, no international authorities use such methods (locking computer users' desktops) to collect fines for any law infringements. If you see a message blocking your screen and demanding payment of a fine for law violations, your PC is infected with ransomware, and it should be eliminated from your computer immediately.

Ransomware infections are commonly proliferated using Trojans and drive-by downloads. To avoid infiltrations by GreenDot MoneyPak viruses, PC users should express caution when downloading video codecs and software updates (only download from reputable sources). Cyber criminals often use these downloads to infect computers. Also, be sure to use legitimate antivirus and antispyware software. Other secure computing practices include updating your operating system and keeping all installed software up-to-date. If your computer is already infected with a message demanding payment of a fine using MoneyPak, do not pay it. Use the removal guide provided to eliminate this scam from your PC.

Instant automatic malware removal: Manual threat removal might be a lengthy and complicated process that requires advanced computer skills. Malwarebytes is a professional automatic malware removal tool that is recommended to get rid of malware. Download it by clicking the button below:
▼ DOWNLOAD Malwarebytes By downloading any software listed on this website you agree to our Privacy Policy and Terms of Use. To use full-featured product, you have to purchase a license for Malwarebytes. 14 days free trial available.

Quick menu:

"Computer Locked - MoneyPak Virus" removal:

Step 1

Start your computer in Safe Mode. Click Start, click Shut Down, click Restart, click OK. During your computer starting process press the F8 key on your keyboard multiple times until you see the Windows Advanced Option menu, then select Safe Mode with Networking from the list.


Video showing how to start Windows 7 in "Safe Mode with Networking":

Video showing how to start Windows 8 in "Safe Mode with Networking":

Step 2

Log in to the accountinfected with MoneyPak virus. Start your Internet browser and download a legitimate anti-spyware program. Update the anti-spyware software and start a full system scan. Remove all entries detected.

After completing these steps, your computer should be clean. Reboot your computer in normal mode.

Notice that some ransomware infections are capable of encrypting files stored on an infected PC. If you are dealing with such an infection, use some of the tools listed below to decrypt your files.

To regain control of your files (decrypt) try using these tools:

RannohDecryptor (Kaspersky)

XoristDecryptor (Kaspersky)

RectorDecryptor (Kaspersky)

Trojan.Winlock decoding utility (Dr.Web)

Alternative MoneyPak virus removal guide:

Cannot boot in Safe Mode with Networking? (Computer Locked MoneyPak virus blocks Safe Mode with Networking)

If you cannot start your computer in Safe Mode with Networking, try performing a system restore.

Video showing how to remove ransomware virus using "Safe Mode with Command Prompt" and "System Restore":

1. During your computer starting process, press the F8 key on your keyboard multiple times until the Windows Advanced Options menu appears, and then select Safe Mode with Command Prompt from the list and press ENTER.

Boot your computer in Safe Mode with Command Prompt

2. When Command Prompt Mode loads, enter the following line: cd restore and press ENTER.

system restore using command prompt type cd restore

3. Next, type this line: rstrui.exe and press ENTER.

system restore using command prompt rstrui.exe

4. In the opened window, click "Next".

restore system files and settings

5. Select one of the available restore points and click "Next" (this will restore your computer system to an earlier time and date, prior to the ransomware infiltrating your PC).

select a restore point

6. In the opened window, click "Yes".

run system restore

7. After restoring your computer to a previous date, download and scan your PC with recommended malware removal software to eliminate any remnants of MoneyPak virus.

Other tools known to remove MoneyPak virus:

About the author:

Tomas Meskauskas

Tomas Meskauskas - expert security researcher, professional malware analyst.

I am passionate about computer security and technology. I have an experience of over 10 years working in various companies related to computer technical issue solving and Internet security. I have been working as an author and editor for since 2010. Follow me on Twitter and LinkedIn to stay informed about the latest online security threats. Contact Tomas Meskauskas.

PCrisk security portal is brought by a company RCS LT. Joined forces of security researchers help educate computer users about the latest online security threats. More information about the company RCS LT.

Our malware removal guides are free. However, if you want to support us you can send us a donation.

Malware activity

Global malware activity level today:

Medium threat activity

Increased attack rate of infections detected within the last 24 hours.

QR Code
MoneyPak Ransomware QR code
A QR code (Quick Response Code) is a machine-readable code which stores URLs and other information. This code can be read using a camera on a smartphone or a tablet. Scan this QR code to have an easy access removal guide of MoneyPak Ransomware on your mobile device.
We Recommend:

Get rid of Windows malware infections today:

Download Malwarebytes

Platform: Windows

Editors' Rating for Malwarebytes:
Editors ratingOutstanding!

[Back to Top]

To use full-featured product, you have to purchase a license for Malwarebytes. 14 days free trial available.