Windows Program How-to Uninstall Guides.» Remove Ransomware » How Can You Remove Computer Crime and Intellectual Property Section Virus (CCIPS Moneypak Virus)?

How Can You Remove Computer Crime and Intellectual Property Section Virus (CCIPS Moneypak Virus)?

Many American computer users are scared by messages from Computer Crime and Intellectual Property Section (United States Department of Justice) which asks the users to pay for a fine of $300 via Moneypak due to the violation of the federal laws of the United States of America. If you are one among them, please stay calm and don’t be fooled by the ransomware. What is the most urgent is that you have to remove Computer Crime and Intellectual Property Section virus immediately.


Computer Crime and Intellectual Property Section virus, or CCIPS Moenypak virus, is classified as ransomware which displays fake messages with the purpose of scaring computer users to pay for a fine to make illegal profits. Like Stop Online Piracy MoneyPak and FBI Online Agent virus, this ransomware locks your computer and shows a screen claiming that your IP dresses has been involved in illegal computer activities, such as visiting websites containing pornography, child pornography and other forbidden materials, distributing copyrighted works, send spam emails, etc. What makes it slightly different is that this virus targets computer users in United States.

A screenshot of the virus:

From the screenshot above, we can see that the ransomware uses a logo of the United States Department of Justice in order to make its messages convincing. Sometimes, it may take a picture of your room and attempt to trick you into thinking you are under surveillance by webcam. You will believe without a shadow of doubt. If you don’t know clearly about related laws and have no idea about this kind of computer virus, you may be taken in.

Symptoms of being attacked by Computer Crime and Intellectual Property Section virus

1)    When you are surfing the Internet, a message from the ransomware will pop up and say your computer is doing illegal online activities such as watching child porn.

2)    Every time Windows loads, the virus will lock the desktop and stop you from using.

3)    Even you enter in Safe Mode, the virus still lock your PC.

How to get rid of Computer Crime and Intellectual Property Section virus manually?

Step1. Restart your computer and press F8 constantly before Windows loads. Choose Safe Mode with Command Prompt by using the up and down arrow keys. Then press Enter.

Step2. Remember to login as admin and type explorer in the pop-up Command Prompt quickly and then press Enter. Or the virus will control your PC again soon.

Step3. When Windows Explorer opens, locate to C:\windows\system32\restore\rstrui.exe (Windows XP) or C:\windows\system32\rstrui.exe (Windows7 or Vista) and then press Enter.

Step4. Follow the instructions prompted to restore your computer to an earlier time without being infected.

Step5. Delete the files and registry entries of the ransomware.

  1. Click Start > Run, type regedit in the box and click OK.

    Search for the registry below and erase them all.

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableTaskMgr” = ’1?

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system “DisableTaskMgr” = ’1?

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “CheckExeSignatures” = ‘no’

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main “Use FormSuggest” = ‘yes’

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced “Hidden” = ’0?


  1. Find the files below and eliminate them.

%AllUsersProfile%\Application Data\.exe

%UserProfile%\Desktop\“Computer Crime & Intellectual Property Section, United States Department of Justice” Fake Alert.lnk

Remove the virus automatically

In addition to the steps above, there is another easier method for you. A professional removal tool can delete Computer Crime and Intellectual Property Section virus automatically and quickly.

Step1. Enter your computer in Safe Mode with Command Prompt and recover your PC to a restore point before infection (same with the step 1-step4mentioned).

Step2. Download and install a professional removal tool.

Step3. Run the tool and remove all the infected files detected within minutes.

Posted by admin in Blog Remove Ransomware
on August 27th, 2013 | Comments Off

No Comments

No comments yet.

RSS feed for comments on this post.

Sorry, the comment form is closed at this time.

Recent Posts