Skip to content
  • Active
  • Severity: High
  • Malware
  • Windows
  • Verified · Jan 2017

How to remove MoboPlay virus

A step-by-step removal guide for affected devices. Follow the verified procedure below — most readers complete it in under 10 minutes.

Lucia Danes · Virus researcher

How to recognize MoboPlay Tech Support Scam

Tech Support Scams are one of this year’s fastest growing cyber threats and MoboPlay virus is one of the newest addition to this virus family [1]. Thus, we think it would be useful to discuss this particular virus in more detail and raise awareness about such viruses among the Internet community. The initial thing we should point out is that technical support scams do not travel as individual viruses but are rather brought by other potentially unwanted programs [2]. We elaborate more on the virus distribution and infiltration issues later in the article. As for now, you may continue reading this article and find out about the working principles of this virus or skip straight to the last paragraph to find out about MoboPlay removal options. If you have tried manual elimination already and it did not bring any good results, you should not hesitate to employ professional malware removal utilities such as FortectIntego and remove the virus from your computer automatically.

image of mogoplay tech support scam virus

To classify MoboPlay to a more particular group of tech support viruses, we should note that it is a Microsoft support scam, similar to “Windows has detected some suspicious activity from your IP address” virus. This means that such infection is especially targeted at Windows OS users [3]. Imitating representatives from Microsoft, the hackers try to scare people into thinking their computers are in a critical state with the following message:

Microsoft has detected some suspicious activity on this computer. All access to this device has been revoked due to a network security breach. Attackers might attempt to steal personal information, banking details, emails, passwords and other files on this system.
Please contact a Microsoft certified technician on
1-800-603-5246

To make the message more believable, the scammers display it in a lock screen [4] which actually obstructs the user from accessing the data on their computers, creating an impression of a blocked device. From an empty box and the “Activate Now” button we can presume that the users are required a Windows License key in order to get back the access to their account. Nevertheless, none of the legitimate keys will work and another alert urging to purchase a new key will pop up. The trick here is that your Windows license key is not actually expired and the scammers simply want you to pay for a fake product. Since no computer files can be accessed while this lock screen is active, this virus surely deserves a name of a ransomware-like infection [5]. Luckily, unlike with most of the actual ransomware, you can remove MoboPlay and access your personal files again. To do that, look at the recommendations below.

How do tech support scam viruses infect computers?

As we have already stated previously, tech support scams travel as potentially unwanted programs and use various techniques to infect computers. Perhaps one of the most widespread ways the infiltration is achieved is with the use of deceptive software bundling. For instance, the hackers may take a random application, for instance, MoboPlay, and bind it together with potentially unwanted program such as our discussed tech support virus. While the users think they are installing a regular application management program, the virus can easily slither inside the system and start its malicious activity on it. Advanced software installation is one way to prevent undesirable programs from entering your computer. Just pick “Custom” or “Advanced” installation modes when setting up new software on your computer and pick out potentially unwanted applications manually.

How to remove MoboPlay lock screen virus and get back the access to your computer?

MoboPlay virus is an infection that is not that easy to remove. The infected computer users might need to go through several steps of elimination, first having to go past the lock screen and only then moving on to MoboPlay removal. Luckily, below this article, you will find quick instructions which should help you terminate the lock screen. After you overcome this obstacle, you should then remove MoboPlay from your computer using specialized malware removal tools.

Be the first to comment

Spyware news
Privacy preferences

We use cookies to improve your experience and analyze traffic. Some cookies enable embedded content like videos and social posts. Choose what you allow — you can change this anytime.