The FBI MoneyPak warning users get when surfing the web is a scam. This kind of practice is known as scareware. The purpose of the scam is to scare and trick the user into making a purchase of the program.
In many cases this kind of scam can work on people because many will believe that maybe they or someone else on the computer did something wrong.
The FBI MoneyPak will state “Your PC is Blocked due to at least one of the reasons specified below.”
If the below guide is too hard to follow for you then check out this other one at http://www.removevirus.org/fbi-moneypak-2
What FBI MoneyPak is Doing
This malware threat will turn on your webcam and block internet pages via a proxy setting. this is done to basically hold your computer for ransom till you pay to get access again. The messages given off are false messages and should not be trusted.
The warning message this program gives off threatens users with jail time if they do not pay. It’s one of the most blatant scams I have seen in a while. They are assuming you or someone on your computer did something illegal and are trying to take advantage of this fact.
How to remove FBI MoneyPak
To remove this threat we need to focus on stopping a single process on your computer from running. Once done you will be able to download and install and antivurs client and run a full virus scan.
Quick Tip: If you want the quieckest way to remove this threat you should consider purchasing antivirus software. We know Spyhunter works to remove the FBI MoneyPak. The cost is 40 dollars for the software. You can install it while in safe mode with networking.
Onto the manual removal process
The file you want to kill off will be similar to “0_0u_l.exe”. Every file trace of this is different. Yours will be different as well. However it will look similar.
The file will be located in the %AppData%\ folder. This is a hidden folder on your computer. You will need to first show hidden files and folders. Then browse to the path of C:\Users\YOUR USER NAME\AppData\ . Now look for the above file name. Again it will be different but similar in what it’s named.
To help locate the file you can sort the files by date. From this point you will only have a few files that match the date of the infection and should easily be able to pick out the virus.
You can not delete a file while it is in use. If you are in safe mode you can just delete the file. Other wise you will need to re-name the file and then turn off your computer and turn it back on. Now the virus will no longer be running and you can delete the file.
You now need to run a full virus scan to ensure you have no other viruses on your computer. Don’t skip this step. We recommend you download the free trail of Spyhunter here. The trial will not remove virus threats but it will let you know if any traces are left over. We also like malwarebytes.