Many American computer users are scared by messages from Computer Crime and Intellectual Property Section (United States Department of Justice) which asks the users to pay for a fine of $300 via Moneypak due to the violation of the federal laws of the United States of America. If you are one among them, please stay calm and don’t be fooled by the ransomware. What is the most urgent is that you have to remove Computer Crime and Intellectual Property Section virus immediately.
Computer Crime and Intellectual Property Section virus, or CCIPS Moenypak virus, is classified as ransomware which displays fake messages with the purpose of scaring computer users to pay for a fine to make illegal profits. Like Stop Online Piracy MoneyPak and FBI Online Agent virus, this ransomware locks your computer and shows a screen claiming that your IP dresses has been involved in illegal computer activities, such as visiting websites containing pornography, child pornography and other forbidden materials, distributing copyrighted works, send spam emails, etc. What makes it slightly different is that this virus targets computer users in United States.
A screenshot of the virus:
From the screenshot above, we can see that the ransomware uses a logo of the United States Department of Justice in order to make its messages convincing. Sometimes, it may take a picture of your room and attempt to trick you into thinking you are under surveillance by webcam. You will believe without a shadow of doubt. If you don’t know clearly about related laws and have no idea about this kind of computer virus, you may be taken in.
1) When you are surfing the Internet, a message from the ransomware will pop up and say your computer is doing illegal online activities such as watching child porn.
2) Every time Windows loads, the virus will lock the desktop and stop you from using.
3) Even you enter in Safe Mode, the virus still lock your PC.
Step1. Restart your computer and press F8 constantly before Windows loads. Choose Safe Mode with Command Prompt by using the up and down arrow keys. Then press Enter.
Step2. Remember to login as admin and type explorer in the pop-up Command Prompt quickly and then press Enter. Or the virus will control your PC again soon.
Step3. When Windows Explorer opens, locate to C:\windows\system32\restore\rstrui.exe (Windows XP) or C:\windows\system32\rstrui.exe (Windows7 or Vista) and then press Enter.
Step4. Follow the instructions prompted to restore your computer to an earlier time without being infected.
Step5. Delete the files and registry entries of the ransomware.
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableTaskMgr” = ’1?
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system “DisableTaskMgr” = ’1?
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “CheckExeSignatures” = ‘no’
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main “Use FormSuggest” = ‘yes’
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced “Hidden” = ’0?
%UserProfile%\Desktop\“Computer Crime & Intellectual Property Section, United States Department of Justice” Fake Alert.lnk
In addition to the steps above, there is another easier method for you. A professional removal tool can delete Computer Crime and Intellectual Property Section virus automatically and quickly.
Step1. Enter your computer in Safe Mode with Command Prompt and recover your PC to a restore point before infection (same with the step 1-step4mentioned).
Step2. Download and install a professional removal tool.
No comments yet.
Sorry, the comment form is closed at this time.