
The FBI MoneyPak Trojan is one of the worst and most widespread computer-locking Trojans that ever menaced internet users. The FBI MoneyPak is a Trojan often called RansomWare.
FBI MoneyPak comes bundled with applications that may look legitimate, but aren’t. Always be sure you download from well-known and well-respected sites. If you become infected, the FBI MoneyPak Trojan will lock down the computer and tell you that your computer was involved in viewing p//ornography, downloading copyrighted materials or other illegal activities. And unless you pay $100 via MoneyPak payment system, your system will remain locked and you’ll be going to jail.
The FBI MoneyPak ransomware is a scam. It locks your computer down and tries to scare you into sending $100 via MoneyPak to unlock your computer keep you out of jail.
You won’t go to jail whether you pay the $100 or not. But you won’t be able to unlock your computer until you pay the ransom – unless you know the secret we’re going to teach you in a minute. It’s pretty easy to get rid of this RansomWare, but not if you panic and not if you don’t follow instructions carefully.
And another thing you have to watch out for when dealing with this Trojan, are sites which offer FBI MoneyPak removers. Most of these are scams, and downloading them will only infect your computer with something else. Be careful of any program offered by off-the-wall sites which offer a download to help you remove the FBI MoneyPak Trojan.
The FBI MoneyPak Scam uses a malicious program called WinLocker to lock your computer. You won’t be able to see your desktop, because the only thing you’ll see is the MoneyPak payment page. They want $100 to unlock your computer and keep you out of jail.
Another thing in newer versions of the FBI MoneyPak Trojan is that if you have a Webcam on your computer, the Trojan has a code which will turn on your Webcam and you’ll see yourself on the screen with the message that the FBI is recording everything you do. Oh! No! Really, it’s a trick. The FBI is not recording anything; the FBI has nothing to do with this Trojan. But you can imagine that thousands of people have paid the ransom because they got scared and panicked. This scam has netted the perpetrators millions of dollars.
We don’t want you to fall for this scam. Be careful where you download from. Stick with reputable sites. Don’t download “free” copyrighted songs or movies, unless you’re sure of the source. Don’t download Flash updates from off-the-wall sites. Don’t download codecs for you media players from shady sites.
What to do if you do get the FBI MoneyPak Trojan
1. Do not panic
2. Shut your computer off using the power switch – DO NOT REBOOT
3. Wait 2 minutes
4. Turn your computer back on using the power switch
5. Immediately after pressing the power switch, start pressing the F8 key continuously and rapidly until you see the Safe Mode boot menu
6. From the boot menu select “Safe Mode with command prompt” *** This is important *** if you choose any other version of safe mode, the FBI MoneyPak Trojan will load. Be sure to select SAFE MODE WITH COMMAND PROMPT
7. You will see Windows loading files – it may take a long time.
8. When everything is loaded, you’ll see a black screen with a command prompt which looks like this: >
9. At command prompt type RSTRUI.EXE (WINDOWS XP users see the note below)
10. Windows System Restore will load — but it may take a long time – don’t panic, be patient.
11. Select a restore point at least 2 days prior to the date you think you were infected
12. Run System Restore
13. Once System Restore is finished, you’ll boot into Windows and you’ll be back to normal.
Windows XP users. At the command prompt type CD: C:\Windows\System32 (exactly like that) and press Enter. The command prompt will now look like this C:\Windows\System32> . At that prompt, type RSTRUI.EXE and press Enter. Then follow the instructions above starting with #10.

Bless Your Sweet Hearts!
You both continue to share your vast knowledge and educate all of us. I’m soooooooooooooooo thankful that you’re on the web to keep us informed and SAFE! Since reading this tonight, IF this Trojan would happen to hit me (tho I use only reputable sites), I won’t panic, I’ll just follow your instructions to the letter!
Thanks once again!
Jan
Thank you, this happened to someone I know. He needed help to get rid of it…Phew
You should mention that you still need a Restore Point for this to work!
Thank you! You have been a lifesavor for over 10 years to me on many issues, I’m so very appreciative.
Holy cow! And again, ‘thank you.’ I would for sure be a multimillionaire by now for every written and silent “thank you” as I mentioned to you just recently.
I do have a question about this. Are the primary instructions for Windows 7 and 8, and XP only. I have XP and 7 but I just wondered if this also applies to those who do use programs other than these three. Thank you.
Never thought this would happen in this household but some friends brought their late teen aged sons to visit the other night. While we talked, I let their sons use our computer. Bad mistake! Never did I think something like this would happen in our house on our computers. Thanks heavens I remembered about reading this and was able to get rid of this trojan. Thank you, thank you, thank you!!!!
Thanks again for warning us about these +f#*g%h low-life crooks….AND especially for the same kind of low-lifes who “offer” the phony “cures”. Ironically, whaddaya suppose was in the google ad (which I know you have no control over) on this same C8 page..and in LARGE print?
Yep! One of those “remove FBI moneypak virus” ads. I certainly hope by now, everyone realizes that you have nothing to do with the content or websites promoted in these ads.
I fell foul to this a few days ago. The UK has Metropolitain Police and accuses you of watching child porn with the threat of ‘Illegal Activity’ with a fine of £75 to unlock the computer. They also took a photo of me from my webcam which really spooked me!