Remove U.S. Department of Homeland Security Virus (Moneypak Ransomware)

The PC lock screen of U.S. Department of Homeland Security is a ransomware virus that displays a fake alert that claims to have locked your PC’s desktop for viewing child pornography, downloading copyright-protected files and other Internet-based crimes. If you get a pc lock up screen as following message, you are supposed to get infected with the Trojan Urausy virus.
 

 

U.S. Department of Homeland Security virus takes the same tactics as FBI Moneypak ransomware to scam PC users. Once settled on the compromised computer, it begins to start the malicious program and write to Windows registry. In the following, it locks down the system and then displays a message that the computer was locked due to law violations and then asking to pay a fine of 300 USD.
 

Important Notice: The message from the claimed official organization is fake. When you get such kind of message on your computer, it indicates that your computer is getting infected with ransomware virus. Please do not pay any money with the hope to unlock your computer. The only method to recover your operating system is to remove the ransomware virus.
 

Damage or Symptoms of U.S. Department of Homeland Security ransomware:

  • You are not allowed to access the computer’s desktop for the screen was locked up by the ransomware virus.
  •  

  • You are unable to access the Internet.
  •  

  • Safe mode may also be disalbed by the U.S. Department of Homeland Security ransomware virus.
  •  

  • System Restore may be deleted by the the virus that you are unable to recover your computer via System Restore point.

 

How does U.S. Department of Homeland Security ransomware spread?

U.S. Department of Homeland Security is mainly spread by Trojan virus that come from the websites or domain hacked by cyber criminals. It also spread via infected download URL, hacked free program and many other ways.
 
To avoid possible Trojan virus infection, please take cautions when you get any attachments or link that come through in your email or popular social network sites; be carefully with the software you install on your computer. Install only that which you need, or is from a trusted source. Avoid software that is bundled with other pieces of software and download your programs from well-known sites. The bundled free software is always too good to have on your computer.
 

Similar Ransomware Infections:

PCeU virus (aka Metropolitan Police Ukash virus), Malex ransomware, Your computer is locked for violating the Law of Great Britain virus, DOJ virus, File Encryption Virus, SGAE virus, An Garda Síochána. Ireland’s National Police Service virus, ISCA 2012 virus, Automated Information Control System virus, ACCDFISA Protection Program ransomware, Celas ransomware, Votre ordinateur est bloque! Gendarmerie Ukash virus, Canadian Police Association Virus, Urausy virus/ransomware, Office Central de Lutte contre la Criminalité Virus, Bundesamt fur Polizei Virus, Canadian Police Cybercrime Investigation Department Virus, GEMA: Your computer has been locked virus, Den Syenska Polisen IT-Sakerhet Ransomware, Bundes Polizei Ukash virus,Australian Federal Police Ukash Virus, etc.
 

U.S. Department of Homeland Security Virus Removal Guide

Removal Option 1 Using Rescue Disk to recover your computer

Anvi Rescue Disk is a brand-new blockbuster developed by Anvisoft to help users remove ransomware infection. If your computer is locked up due to ransomware infection and even unable to boot into safe mode, then you may need this powerful ransomware killer–Anvi Rescue Disk to save your computer OS.
 

Anvi Rescue Disk Download:

 


 
(Note:rescueDisk.iso is a large file download; please be patient while downloading.)
 

step 1

Download the Anvi Rescue Disk iso image file Rescue.iso and the USB disk production tool BootUsb.exe from Anvisoft official site. (Direct download link)

Please note that Rescue.iso is a large file download; please be patient while it downloads.

step 2

Record Anvi Rescue Disk iso image to USB drive. You can also record the iso image to a CD/DVD, and the tutorial is included in the download file.

Connect USB to computer. You’d better backup your important data and format your USB drive before use it to record the iso image.

Locate your download folder and double-clicking on BootUsb.exe to start it. And then click “Choose File” button to browser into your download folder and select Rescue.iso file as your source file.

Select the path of USB drive, such as drive H:

Click “Start Burning” to start the burn of USB Rescue Disk boot drive.

Please close BootUsb.exe tool after you successfully burn the file to USB drive when you get following message.

Now, you have bootable Anvi Rescue Disk to repair your computer.

step 3

Start your infected computer and configure your computer to boot from USB drive/DV/DVD that recorded Anvi Rescue Disk. Basically, you can use F8 to load USB boot menu.

For different motherboard, you may need to use the Delete or F2, F11 keys, to load theBIOS menu. Normally, the information how to enter the BIOS menu is displayed on the screen at the start of the OS boot.

step 4

After you enter Anvisoft Rescue Disk menu, please selected your preferred language and press Enter to continue.

step 5

Now you are in the mini Operating system, please double click Rescue tool to start Anvi Rescue disk.

step 6

Please run a full scan by clicking the “Scan Computer” button in the middle of the program to detect and kill the PC lockup virus.

step 7

Clicking “Fix Now” to remove the detected threat by Anvi Rescue Disk.

step 8

Switch to Repair tab. Scan and fix the registry error with the “Repair” module of Anvi Rescue Disk.

Important Notice: You must repair the registry error after kill the virus. You are probably disabled to boot your Windows without fixing registry damaged by the virus. After you remove the virus and repair the registry errors, you should follow the tips and download Anvi Smart Defenderto full scan your PC to completely clean leftover of the virus infection.
 
Anvi Smart Defender direct download link: http://download.anvisoft.com/software/asdsetup.exe
 

You may need to upgrade to Pro version of Anvi Smart Defender to fix the registry error.
 

 

You may need to check the article about Tutorial on Network Configuration if you fail to connect to Internet cloud when you are using Anvi Rescue Disk to recover your computer.
 
For any question, please feel free to let us know. You can simply leave a reply or send us an email (support@anvisoft.com).

Ransomware Removal Guide video

Option 2 Safe Mode with Command Prompt Restore

In some case,when your computer is not severely infected, you can easily recover your computer with Windows restore point. For detail information , please read more on following steps.
 

step 1

Reboot your computer to Safe Mode with Command Prompt.

Unplug your Internet Cable and boot your computer into safe mode or normal mode. Please note that you should log in as administrator. By disconnecting your operating system from Internet, Korps Landelijke Politiediensten (klpd) Ransomware Virus will be disabled to run on your computer.
 

step 2

Once the Command Prompt appears you only have few seconds to type “explorer” and hit Enter. If you fail to do so within 2-3 seconds, the ransomware virus will not allow you to type anymore.

 

step 3

Once Windows Explorer shows up browse to:

Win XP: C:\windows\system32\restore\rstrui.exe and press Enter
Win Vista/Seven: C:\windows\system32\rstrui.exe and press Enter

step 4

Follow all steps to restore or recover your computer system to an earlier time and date (restore point), before infection.
 

step 5

Download and install Anvi Smart Defender to remove all threats detected and reboot your PC. A good antivirus program can prevent your computer from getting those similar infection in future.
 
We highly recommend you to install your computer with a legitimate antivirus/antimalware program. Anvi Smart Defender can provide computers with real-time, smart and powerful protection against viruses, Trojans, adware, spyware, ransomware, rogueware, bots and other online threats.
 

Anvi Smart Defender Download

 

 
We Anvisoft are devoted to develop most practical software and many other useful free tools to protect PC security as well as optimize computer for fast performance. Should you have any problem, please post your issue here. We will answer your question as soon as possible. Thank you for your support to Anvisoft.
 

Social Share Toolbar
Leave a comment

Comments

Leave a Reply

Your email address will not be published. Required fields are marked *

Are you human? Click the Grapes...