Malware adept: Your Computer is Inactive -System Cleaner is in Progress’ virus removal

Your Computer is Inactive -System Cleaner is in Progress' is a fake warning generated by ransomware virus. The computer infections of this kind use the specific tactic: they hijack the desktop with the notification that allegedly some illegal actions were noticed on the computer and now the fine in amount of $200 should be paid within 48 hours. PC owner is prevented from running any of installed programs and finds all his important doc, txt, pdf files blocked from the access because this huge alert. See the screenshot below:

Your Computer is Inactive System Cleaner is in ProgressYou have violated federal law of the United States of America: (Article 1, Section 8, Clause 8; Article 202; Article 210 of the Criminal Code of USA which provides for a deprivation of liberty for four to twelve years.) Your computer was recently used to visit websites prohibited on the territory of USA: to download mp3 files, child pornography, torrents, gambling, illegal drugs or other illegal activity. As a result System Cleaner was launched on your computer. System Cleaner is a program developed by the special Department of US government aimed to prevent crime and illegal activity on the Internet. All your files are encrypted. In case you fail to pay $200 fine all your files will be permanently deleted and prohibited files will be sent to the Department with logged IP-addresses used for illegal activity.1.To unlock your computer you are obliged to pay a fine of $200 within 48 hours.2. The fine must be paid with the help of MoneyPak system.3. To pay the fine you should enter digital code which is located on the back of your MoneyPak card in the payment form and press OK (if you have several codes, enter them one after the other and press OK). You can buy MoneyPak card at the nearest stores: Walgreens, Kmart, Walmart, CVS/pharmacy, SevenEleven, Rite Aid and etc. Once you have entered your MoneyPak code you must not use it anywhere else. If your MoneyPak code is invalid or it doesn't have the necessary amount the payment will not be processed. Don't try to deceive System Cleaner or delete it from your computer. It is the newest version of System Cleaner 9.11 and it doesn't give any analogues. If the program spots any attempts to deceive the system it will delete all files (photos, video, audio, documents, passwords, etc.) When your MoneyPak code is confirmed all your files will be unblocked but you will have to delete all illegal data from your computer immediately!

[caption id="attachment_1864" align="aligncenter" width="550"]

your computer is inactive system cleaner is in progress [/caption]

This post is aimed to shed the light to the fact that this message is falsified and should not treat seriously. If you see such notification locking your screen it means that your PC is badly infected by ransomware but not that some crimes were committed via your PC. If you fall for this alert and believe what it says, you will lose your money and won't have your PC unblocked.

To unblock your PC the next steps are strongly recommended to be performed:

Go to your friend, relative or anybody else who has computer with Internet connection.
Take your USB flash drive / Memory Stick with you.
Download GridinSoft Trojan Killer installation file from this site http://remove-trojans.com/trojankiller.php and save it to your USB flash drive / Memory Stick.
Get back to your infected PC and insert the USB Drive / Memory Stick into the respective USB slot.
Perform hard reset (press reset button on your computer) if your infected PC has been on with ransomware background. If not, then simply turn your PC on.
Before the very boot process begins keep repeatedly hitting “F8” button on your keyboard.
In the window that appeared select “Safe mode with command prompt” option and press Enter.
Choose your operating system and user account which was infected with ransomware virus.
In the cmd.exe window type “explorer” and press “Enter” button on your keyboard.
Select “My Computer” and choose your USB flash drive / Memory Stick.
Run the installation file of GridinSoft Trojan Killer. Install the program and run scan with it. (update of the program will not work for “Safe mode with command prompt” option)
When the hijackers are successfully disabled (fixed) by GridinSoft Trojan Killer you may close GridinSoft Trojan Killer application.
In the cmd.exe window type “shutdown /r /t 0” and press “Enter” button on your keyboard.
Upon system reboot your PC will be unlocked and you will be able to use it just as before the infection took pace.
However, it is recommended that you now update GridinSoft Trojan Killer and run the scan with it again to remove the source of the infections causing ransomware virus to infect your PC.