![\"Cloudeight](\"http:\/\/thundercloud.net\/infoave\/images\/2013\/fbi-moneypak.png\")
\nThe FBI MoneyPak Trojan is one of the worst and most widespread computer-locking Trojans that ever menaced internet users. The FBI MoneyPak is a Trojan often called RansomWare.<\/p>\n
\nThe FBI MoneyPak Trojan is one of the worst and most widespread computer-locking Trojans that ever menaced internet users. The FBI MoneyPak is a Trojan often called RansomWare.<\/p>\n
FBI MoneyPak comes bundled with applications that may look legitimate, but aren’t. Always be sure you download from well-known and well-respected sites. If you become infected, the FBI MoneyPak Trojan will lock down the computer and tell you that your computer was involved in viewing p\/\/ornography, downloading copyrighted materials or other illegal activities. And unless you pay $100 via MoneyPak payment system, your system will remain locked and you’ll be going to jail.<\/p>\n
The FBI MoneyPak ransomware is a scam. It locks your computer down and tries to scare you into sending $100 via MoneyPak to unlock your computer keep you out of jail.<\/p>\n
You won’t go to jail whether you pay the $100 or not. But you won’t be able to unlock your computer until you pay the ransom – unless you know the secret we’re going to teach you in a minute. It’s pretty easy to get rid of this RansomWare, but not if you panic and not if you don’t follow instructions carefully.<\/p>\n
And another thing you have to watch out for when dealing with this Trojan, are sites which offer FBI MoneyPak removers. Most of these are scams, and downloading them will only infect your computer with something else. Be careful of any program offered by off-the-wall sites which offer a download to help you remove the FBI MoneyPak Trojan.<\/p>\n
The FBI MoneyPak Scam uses a malicious program called WinLocker to lock your computer. You won’t be able to see your desktop, because the only thing you’ll see is the MoneyPak payment page. They want $100 to unlock your computer and keep you out of jail.<\/p>\n
Another thing in newer versions of the FBI MoneyPak Trojan is that if you have a Webcam on your computer, the Trojan has a code which will turn on your Webcam and you’ll see yourself on the screen with the message that the FBI is recording everything you do. Oh! No! Really, it’s a trick. The FBI is not recording anything; the FBI has nothing to do with this Trojan. But you can imagine that thousands of people have paid the ransom because they got scared and panicked. This scam has netted the perpetrators millions of dollars.<\/p>\n
We don’t want you to fall for this scam. Be careful where you download from. Stick with reputable sites. Don’t download “free” copyrighted songs or movies, unless you’re sure of the source. Don’t download Flash updates from off-the-wall sites. Don’t download codecs for you media players from shady sites.<\/p>\n
What to do if you do get the FBI MoneyPak Trojan<\/p>\n
1. Do not panic
\n2. Shut your computer off using the power switch – DO NOT REBOOT
\n3. Wait 2 minutes
\n4. Turn your computer back on using the power switch
\n5. Immediately after pressing the power switch, start pressing the F8 key continuously and rapidly until you see the Safe Mode boot menu
\n6. From the boot menu select “Safe Mode with command prompt” *** This is important *** if you choose any other version of safe mode, the FBI MoneyPak\u00a0\u00a0\u00a0 Trojan will load. Be sure to select SAFE MODE WITH COMMAND PROMPT
\n7. You will see Windows loading files – it may take a long time.
\n8. When everything is loaded, you’ll see a black screen with a command prompt which looks like this: >
\n9. At command prompt type RSTRUI.EXE (WINDOWS XP users see the note below)
\n10. Windows System Restore will load — but it may take a long time – don’t panic, be patient.
\n11. Select a restore point at least 2 days prior to the date you think you were infected
\n12. Run System Restore
\n13. Once System Restore is finished, you’ll boot into Windows and you’ll be back to normal.<\/p>\n
Windows XP users. At the command prompt type CD: C:\\Windows\\System32 (exactly like that) and press Enter. The command prompt will now look like this C:\\Windows\\System32> . At that prompt, type RSTRUI.EXE and press Enter. Then follow the instructions above starting with #10.<\/p>\n","protected":false},"excerpt":{"rendered":"
The FBI MoneyPak Trojan is one of the worst and most widespread computer-locking Trojans that ever menaced internet users. The FBI MoneyPak is a Trojan often called RansomWare. FBI MoneyPak comes bundled with applications that may look legitimate, but aren’t. Always be sure you download from well-known and well-respected sites. If you become infected, the FBI MoneyPak Trojan\u2026 Read More »<\/a><\/span><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[10],"tags":[],"_links":{"self":[{"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/posts\/5429"}],"collection":[{"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/comments?post=5429"}],"version-history":[{"count":1,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/posts\/5429\/revisions"}],"predecessor-version":[{"id":5430,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/posts\/5429\/revisions\/5430"}],"wp:attachment":[{"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/media?parent=5429"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/categories?post=5429"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/tags?post=5429"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}