“Your computer has been locked!” virus is a ransomware scam designed by cyber criminals. Malicious message that you see on the locked screen says “Your computer has been locked due to suspicious of illegal content downloading and distribution”. The bunch of seals from Department of Justice and other federal law agencies of the United States are looking scary to the victim, and here the whole point is. “Your computer has been locked!” virus scam is designed to scare you and make you ransom quickly collected by cyber criminals. They want you believe that you get in trouble and willing to easily get out before more serious punishment can be applied in accordance with the United States Law. “Your computer has been locked!” virus is installed with Trojans that come from malicious and infected websites. After it is installed, it locks victim’s access to the infected computer and displays the message. As it is common with ransomware spread in United States, payment is requested to be made with MoneyPak payment system. Scared people have a lesser chance to find out that U.S. government never uses this payment systems for collecting fines and barely would lock your computer for such a small legal matter. Do not be scared of a criminal proposal and remove “Your computer has been locked!” virus from your computer as soon as possible.
This removal guide will help you to remove Your computer has been locked! Virus either manually or with a help of Your computer has been locked! Virus Removal Tool that comes with “Free online support” and “Free one-year-long protection” against stubborn malicious programs.
What is Your computer has been locked! Virus?
Your computer has been locked! Virus is a ransomware scam similar to Department of Justice virus ran by cyber criminals for money extortion. This scam is designed to scare victims with fake accusations in a crime and quickly collect ransom as a fine paid by people that prefer this easy way of false trouble with the law. Removing Your computer has been locked! Virus is quite complicated since victim’s computer is locked and antivirus software is not working. Since Your computer has been locked! Virus uses Trojans spread over the Internet for infecting computer, you need to be very careful while browsing. Payment requested to be made made with MoneyPak is a clear sign of this online scam. The message displayed by Your computer has been locked! Virus is a fake. It is not related to governmental agencies in any way.
You can get your computer infected with Your computer has been locked! Virus after visiting websites or downloading some free content used as a disguise. A letter in your email might also come with a link to Your computer has been locked! Virus downloader. Be careful with clicking suspicious links and buttons. Avoid websites with adult content that are commonly used for spreading the infection, and protect your computer with decent security tools that are able to prevent infecting your computer.
Your computer has been locked! Virus Removal Tool
Your computer has been locked! Virus is protected against removal with victim’s locked access to controls and blocked antivirus software. It is difficult for an average computer user to remove Your computer has been locked! Virus manually. Some of manual removal procedures are potentially dangerous for your computer. Unless you understand what you need to do clearly, it is better to use Your computer has been locked! Virus Removal Tool . It comes with a free online assistance for resolving any complicated cases and with a free antispyware program that will help you to protect your computer from well hidden threats.
Remove Your computer has been locked! Virus Manually
You need to start your computer in Safe Mode and try to access Windows System Restore . You need to find the restore point set before your computer was infected with Your computer has been locked! Virus and restore your system to previous. System Restore will undo all the changes made by this virus, and you can restart your computer as normal and run a full scan with your security program to remove malicious files installed onto your PC.
If the System Restore is not available or there is no a restore point that you can use, then, do the following:
1. First, you need to check proxy settings and repair them to prevent hijacking that might link your computer to a malicious website that spread this infection.
2. Start your computer in a Safe Mode and log as a system administrator. Then access Startup folder. For this click Start, select All Programs and find Startup folder. Look at the startup folder and remove suspicious program that you cannot identify. Your computer has been locked! Virus uses a random name consist of characters and numbers, and some variations might use startup for blocking your computer. Disable suspicious items, restart your computer, and see if it helps.
3. If disabling suspicious files in Windows Startup list doesn’t help to prevent blocking your PC, than you need to fix registry keys used for blocking.
Click Start and type regedit in the search field below. Then press Enter. (On windows XP you need to click Run in the menu and type the command in the input field of the Run utility.
Press OK button, or Enter key, when done.)
In Registry Editor Look for the key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\
Double click on this key and find Shell in the right pane. It should be set to “Explorer.exe”. If there is something different or an addition to it after coma, right click this line and modify the value to “Explorer.exe” only.
Note: If you see path related to the name that you remove, write it down. It points to the program that runs Your computer has been locked! Virus, and you need to find and remove it.
VERY IMPORTANT: Before you make changes to your system registry database, make a backup file for the keys being changed or removed in your system registry. You can do this by opening File menu in the Registry Editor and clicking Export. Then follow instructions on the screen. If something goes wrong, you can restore this key by double clicking the saved registry backup file. If no problem is noticed, then you can just discard this file later. Unless you do the backup, you might end with inoperable machine that requires expensive professional attention.
Kill Your computer has been locked! Virus malicious processes
Note: The file is located in either %AppData% or %Temp% directory in the current user profile.
Remove Your computer has been locked! Virus entries from system registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell [random chars].exe
Delete Your computer has been locked! Virus files and folders:
%userprofile%\Local Settings\Application Data\Microsoft\Windows\ [random chars and numbers]
%userprofile%\Local Settings\Application Data\Microsoft\Windows\[random chars ] \ [random name].exe
Note: Better check for location in your system registry as described above since the path might be different.
If manual removal is difficult and confusing to you, then use removal tool and get a free assistance for removing Your computer has been locked! Virus and free antispyware program that will protect your computer against spyware for a full year.
Complete Your computer has been locked! Virus Removal
Your computer has been locked! Virus often comes with other malicious programs. After you remove this virus, you need to make an update to your antivirus software and scan your system. Use free anti-spyware scanner to make sure that no hidden threat are left. Then you need to scan your system for spyware with some anti-spyware program like one coming with offered Your computer has been locked! Virus Removal Tool since a normal antivirus software wouldn’t remove legitimate spyware used with malicious purpose by cyber criminals.
Find more about prevention computer infections and protection against malicious programs.