Tuesday, March 26, 2013

Homeland Security Virus: How to Unlock Computer from U.S Department of Homeland Security MoneyPak Virus?

Why Am I Locked by U.S Department of Homeland Security MoneyPak Virus?



According to the content of homeland security lock down message, your computer is locked because it has been used to visit/save/deliver prohibited content. As a matter of fact, it is not the case. Even though you’ve done so, you don’t deserve penalty like this. Homeland security virus pilfers the official interface and copies some Articles stated in law books to make people believe and fall into the trap. By doing so, the hacker behind homeland security moneypak virus manages to get large amount of money within a very short time. Here’s the screenshot of U.S Department of Homeland Security moneyPak virus:





What’s worse, department of homeland security is supported by Trojan which is prone to backdoor completion. With the desktop is completely locked down, there’s no interference when tracking cookies are loaded down, additional fake anti-spyware program and junks are installed into the system for information theft. By reselling the stolen information, hacker behind dept homeland security scam is able to generate a lot more income by reselling it to spammers in case you refuse to give in money and seize time to shake homeland security ukash virus off the computer.


How Homeland Security Virus Slip Past Anti-virus Program?



People are astounded by its ability to infiltrate the whole system without any notification. Lock down virus like dept homeland security virus are programmed to bypass most of anti-virus programs by given a lot of executable files resembling legit ones. When in, some registry values referencing critical services like security defense, installed security utility will be compelled to be changed, leading to an impaired system with inability to catch dept homeland security virus. Then what should be the effective way towards homeland security virus remove? You are welcome to look at the steps below before you resort to Tee Support technicians 24/7 online here.




Steps Show You How to Unlock Your Computer from Dept. Homeland Security MoneyPak Virus Fast




SITUATION 1: able to enter into safe mode with networking

Step1:Reboot your computer and log into Safe Mode with Networking.
As the computer is booting but before Windows launches, tap the "F8 key" continuously which should bring up the "Windows Advanced Options Menu" as shown below. Use your arrow keys to highlight "Safe Mode with Networking" option and press Enter key.

 

Step2: Launch msconfig. and disable startup items rundll32 

 Click "start" —> put msconfig. in "search box" —> press Enter —> disable rundll32

 

   

Step3: Reboot your system one more time and enter into Safe Mode with Networking.

Step4: Run regedit. Search for Winlogon.

Click "start" —> put regedit in "search box" —> press Enter —> press and hold Ctrl+F to search for Winlogon

 
Step5:There will be a key labeled Shell in the right pane. It should reference Explorer.exe or be blank. If not, right click it and replace it with explorer.exe.

Note: if you cannot load explorer.exe, and cannot see Windows Task Manager or desktop, follow the steps below:

1. start explorer.exe

a) Press "Alt+Ctrl+Del".
b) Click "Task manager"
c) Click "New Task".

 

 d) Type "explorer.exe" and press "Ok"




Now explorer.exe will load and you can see your Desktop and all your files .

Step6: Save changes, reboot to safe mode with networking.
Step7: Run msconfig and disable all unnecessary startup entries including those of  Homeland Security virus:

a) Related files and folders

%AppData%\NPSWF32.dll
%AppData%\random.exe
%AppData%\result.db

b) Associated registry entries

HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Inspector %AppData%\random.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\WarnOnHTTPSToHTTPRedirect 0
HKCU\Software\Microsoft\Windows\CurrentVersion\Settings\ID 4
HKCU\Software\Microsoft\Windows\CurrentVersion\Settings\UID [rnd]
HKCU\Software\Microsoft\Windows\CurrentVersion\Settings\net [date of installation]
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\ConsentPromptBehaviorAdmin 0
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\ConsentPromptBehaviorUser 0
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\EnableLUA 0
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AAWTray.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AAWTray.exe\Debugger svchost.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVCare.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVCare.exe\Debugger svchost.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVENGINE.EXE
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVENGINE.EXE\Debugger svchost.exe




SITUATION 2: able to enter into safe mode with Command prompt

Step1.:Reboot your computer and log into safe mode with Command prompt.
As the computer is booting but before Windows launches, tap the "F8 key" continuously which should bring up the "Windows Advanced Options Menu" as shown below. Use your arrow keys to highlight "safe mode with Command prompt" option and press Enter key.

Step2.: type 'explore' and hit Enter key to see if you are able to see the desktop
then follow steps 8 depicted above.


SITUATION 3: unable to enter into any safe mode

Step1.:Reboot your computer and log into 'Repair Your PC'
As the computer is booting but before Windows launches, tap the "F8 key" continuously which should bring up the "Windows Advanced Options Menu" as shown below. Use your arrow keys to highlight 'Repair Your PC' option and press Enter key.

Step2.:follow steps 8 depicted above.

 

 

Detailed Video Shows How to Unlock Your PC

 




Kind Reminder:
  1. if you are not satisfied with the fact that installed anti-virus program doesn’t help to find anything when you are really irritated by some sort of virus, you are welcome to download SpyHunter or Malwarebyte by clicking open any blog articles listed on http://blog.teesupport.com/ and scrolling down till the end of the article.     
  2. If you unluckily to have all forms of modes disabled, you ‘d better get a blank CD/ USB flash drive and a clean computer ready and find Tee Support experts 24/7 online here for professional help.

No comments:

Post a Comment