Ransomware.FBI Moneypak

Posted: June 25, 2012

Threat Metric

The Threat Meter is a malware assessment that SpywareRemove.com's research team is able to give every identifiable malware threat. Our Threat Meter includes several criteria based off of specific malware threats to value their severity, reach and volume. The Threat Meter is able to give you a numerical breakdown of each threat's initial Threat Level, Detection Count, Volume Count, Trend Path and Percentage Impact. The overall ranking of each threat in the Threat Meter is a basic breakdown of how all threats are ranked within our own extensive malware database. The scoring for each specific malware threat can be easily compared to other emerging threats to draw a contrast in its particular severity. The Threat Meter is a useful tool in the endeavor of seeking a solution to remove a threat or pursue additional analytical research for all types of computer users.

The following fields listed on the Threat Meter containing a specific value, are explained in detail below:

Threat Level: The threat level scale goes from 1 to 10 where 10 is the highest level of severity and 1 is the lowest level of severity. Each specific level is relative to the threat's consistent assessed behaviors collected from SpyHunter's risk assessment model.

Detection Count: The collective number of confirmed and suspected cases of a particular malware threat. The detection count is calculated from infected PCs retrieved from diagnostic and scan log reports generated by SpyHunter.

Volume Count: Similar to the detection count, the Volume Count is specifically based on the number of confirmed and suspected threats infecting systems on a daily basis. High volume counts usually represent a popular threat but may or may not have infected a large number of systems. High detection count threats could lay dormant and have a low volume count. Criteria for Volume Count is relative to a daily detection count.

Trend Path: The Trend Path, utilizing an up arrow, down arrow or equal symbol, represents the level of recent movement of a particular threat. Up arrows represent an increase, down arrows represent a decline and the equal symbol represent no change to a threat's recent movement.

% Impact (Last 7 Days): This demonstrates a 7-day period change in the frequency of a malware threat infecting PCs. The percentage impact correlates directly to the current Trend Path to determine a rise or decline in the percentage.

Threat Level:	7/10
Infected PCs:	5,471

First Seen:	June 25, 2012
Last Seen:	August 30, 2020
OS(es) Affected:	Windows

FBI Moneypak ransomware is ransomware that displays a fraudulent FBI warning as part of its attempt to steal money from the victim via MoneyPak. As a close relative of the Gema 'Access to your computer was denied' Virus, Police Central e-crime Unit (PCEU) ransomware, and Buma Stemra Virus, FBI Moneypak Ransomware can be deleted safely by the same anti-malware programs that can remove the so-called Gema Virus, which employs similar tactics, albeit for German rather than US legal jurisdictions. Although the FBI Moneypak ransomware's pop-up alert proclaims that your PC has been locked in connection with intellectual property-based crimes (such as downloading illegal mp3s), SpywareRemove.com malware experts place heavy emphasis on FBI Moneypak ransomware being completely disassociated from the FBI and all supplementary legal enforcement agency. FBI Moneypak ransomware will attempt to block all major programs while FBI Moneypak ransomware is open, but an alternate boot method combined with an exacting anti-malware scan can remove FBI Moneypak ransomware, and with it, the blockade that FBI Moneypak ransomware causes.

Why You Shouldn't Hand Over Your Cash When FBI Moneypak Ransomware Comes A-Knocking

FBI Moneypak ransomware and similar PC threats are sometimes distributed by spam e-mail campaigns, as well as by malicious sites (which may use browser exploits to install FBI Moneypak ransomware directly, or include FBI Moneypak ransomware as a mislabeled download link). No matter how FBI Moneypak ransomware climbs onto your PC, its presence is always extremely noticeable, since FBI Moneypak ransomware's primary act of sabotage is to display a warning message that blocks your entire desktop (similar to the prolific ransomware Trojans known as Trojan:Win32/Reveton.A and Trojan:Win32/Ransom.DU). FBI Moneypak ransomware's pop-up alert claims that your PC has been locked for its association with IP crimes, such as illegal file-trafficking activities, and even makes the additional (and highly dubious) claim that your activities are being video-recorded.

The end to FBI Moneypak ransomware's hoax is identical to that of the Gema 'Access to your computer was denied' Virus: like its forebear, FBI Moneypak ransomware will ask you to send the money via MoneyPak, and even provides a few suggestions for retailers that support this service. Although FBI Moneypak ransomware informs its victims that this will end the blockade, SpywareRemove.com malware experts discourage handing money over to the FBI Moneypak ransomware's criminal friends, since this isn't guaranteed to save your PC and is unnecessary for removing FBI Moneypak ransomware safely.

Banishing This Fake Man in Black with Every Dollar Intact

If you're faced with an FBI Moneypak ransomware warning message at every login, SpywareRemove.com malware research team recommends that you use typical anti-malware strategies and software to remove FBI Moneypak ransomware without any need to pay its fraudulent fine. Deactivating FBI Moneypak ransomware should be considered a necessary step before you attempt to disinfect your PC, due to FBI Moneypak ransomware's ability to block unrelated programs. This can be accomplished by:

Booting your computer from a wireless drive or removable hard drive to avoid triggering malicious Registry entries.
If necessary, Safe Mode can also be used to minimize the potential of PC threats like FBI Moneypak ransomware that can launch with Windows.
Scanning your computer with dedicated anti-malware software that can remove all of FBI Moneypak ransomware's components safely and for free.

The FBI MonkeyPak Ransomware uses the following ransom note to scare PC users:

The FBI
Federal Bureau of Investigation

ATTENTION!
IP: XXX.XXX.XXX
Location: Your Country Here
IPS: Your ISP Here

Your PC is blocked due to at least one of the reasons specified below.

You have been violation Copyright and Related Rights Law (Video, Music, Software) and illegally using or distributing copyrighted content, thus infringing Article I, Section 8, Clause 8, also known as the Copyright of the Criminal Code of United States of America.

Article I, Section 8, Clause 8 of the Criminal Code provides for a fine of two to five hundred minimal wages or a deprivation of liberty for two to eight years.

You have been viewing or distributing prohibited Pornographic content (Child Porno, Zoofilia and etc). Thus violating article 202 of the Criminal Code of United States of America. Article 202 of the Criminal Code provides for a deprivation of liberty for four to twelve years.

Illegal access has been initiated from your PC without your knowledge or consent, your PC may be infected by malware, thus you are violating the law of Neglectful Use of Personal Computer. Article 210 of the Criminal Code provides for a fine of up to $100,000 and/or a deprivation of liberty for four to nine years.

Pursuant to the amendment to the Criminal Code of United States of America of May 28, 2011, this law infringement (if it is not repeated - first time) may be considered as conditional in case you pay the fine to the State.

Fines may be paid within 72 hours after the infringement. As soon as 72 hours elapse, the possibility to pay the fine expires, and a criminal case is initiated against you automatically within the next 72 hours!

To unblock the computer, you must pay the fine through MoneyPak of 100$.