Homeland Security Virus: How to Unlock Computer from U.S Department of Homeland Security MoneyPak Virus?

Why Am I Locked by U.S Department of Homeland Security MoneyPak Virus?

According to the content of homeland security lock down message, your computer is locked because it has been used to visit/save/deliver prohibited content. As a matter of fact, it is not the case. Even though you’ve done so, you don’t deserve penalty like this. Homeland security virus pilfers the official interface and copies some Articles stated in law books to make people believe and fall into the trap. By doing so, the hacker behind homeland security moneypak virus manages to get large amount of money within a very short time. Here’s the screenshot of U.S Department of Homeland Security moneyPak virus:





What’s worse, department of homeland security is supported by Trojan which is prone to backdoor completion. With the desktop is completely locked down, there’s no interference when tracking cookies are loaded down, additional fake anti-spyware program and junks are installed into the system for information theft. By reselling the stolen information, hacker behind dept homeland security scam is able to generate a lot more income by reselling it to spammers in case you refuse to give in money and seize time to shake homeland security ukash virus off the computer.

Steps Show You How to Unlock Your Computer from Dept. Homeland Security MoneyPak Virus Fast

Solution 1: Remove U.S Department of Homeland Security MoneyPak Manually

SITUATION 1: able to enter into safe mode with networking

Step1:Reboot your computer and log into Safe Mode with Networking.
As the computer is booting but before Windows launches, tap the "F8 key" continuously which should bring up the "Windows Advanced Options Menu" as shown below. Use your arrow keys to highlight "Safe Mode with Networking" option and press Enter key.

 

Step2: Launch msconfig. and disable startup items rundll32 

 Click "start" —> put msconfig. in "search box" —> press Enter —> disable rundll32

 

   

Step3: Reboot your system one more time and enter into Safe Mode with Networking.

Step4: Run regedit. Search for Winlogon.

Click "start" —> put regedit in "search box" —> press Enter —> press and hold Ctrl+F to search for Winlogon

 

Step5:There will be a key labeled Shell in the right pane. It should reference Explorer.exe or be blank. If not, right click it and replace it with explorer.exe.

Note: if you cannot load explorer.exe, and cannot see Windows Task Manager or desktop, follow the steps below:

1. start explorer.exe

a) Press "Alt+Ctrl+Del".
b) Click "Task manager"
c) Click "New Task".

 

 d) Type "explorer.exe" and press "Ok"




Now explorer.exe will load and you can see your Desktop and all your files .

Step6: Save changes, reboot to safe mode with networking.

Step7: Run msconfig and disable all unnecessary startup entries including those of  Homeland Security virus:

a) Related files and folders

%AppData%\NPSWF32.dll
%AppData%\random.exe
%AppData%\result.db

b) Associated registry entries

HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Inspector %AppData%\random.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\WarnOnHTTPSToHTTPRedirect 0
HKCU\Software\Microsoft\Windows\CurrentVersion\Settings\ID 4
HKCU\Software\Microsoft\Windows\CurrentVersion\Settings\UID [rnd]
HKCU\Software\Microsoft\Windows\CurrentVersion\Settings\net [date of installation]
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\ConsentPromptBehaviorAdmin 0
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\ConsentPromptBehaviorUser 0
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\EnableLUA 0
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AAWTray.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AAWTray.exe\Debugger svchost.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVCare.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVCare.exe\Debugger svchost.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVENGINE.EXE
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVENGINE.EXE\Debugger svchost.exe

Solution 2: Remove U.S Department of Homeland Security MoneyPak automatically (with SpyHunter)

Step A. Download removal tool SpyHunter
1) Click here or the icon below to download SpyHunter automatically.

 

2) Follow the instructions to install SpyHunter
 





Step B. Run SpyHunter to block U.S Department of Homeland Security MoneyPak

Run SpyHunter and click "Malware Scan" button to scan your computer, after detect this unwanted program, clean up relevant files and entries completely.

 

(You may also be supposed to optimize your computer with RegCure Pro which can deeply figure out and fix various windows registry errors so as to avoid potential risk, as well as to ensure your computer security.)

Step C. Download PC optimizer RegCure Pro

1) Click here or the icon to download RegCure Pro



2) Follow the instructions to install RegCure Pro

 

 

Step D. Run RegCure Pro to optimize your PC

In conclusion :

Since U.S Department of Homeland Security MoneyPak coming secretly, may open doors for other computer threats, you are advised to manually get rid of U.S Department of Homeland Security MoneyPak timely to avoid unwanted issues. If the manual solution is kinda complicated for you, you could download automatic removal tool SpyHunter to stop U.S Department of Homeland Security MoneyPak effectively!