Fbi Moneypak Virus

Hi!

I have Bitdefender Total Security 2012 running on Windows 7.

The FBI moneypak scam popped up on IE. Was able to restart the computer in normal mode. Never heard of this scam & looked this up online and saw the following posts:

How To Remove Ukash Fbi Anti-piracy Warning Moneypak Ransomware Infection (http://www.bitdefender.com/support/how-to-remove-fbi-ransomware-infection-1081.html)

and

Fbi Moneypak Virus (http://forum.bitdefender.com/index.php?showtopic=37422)

Rebooted computer in Safe Mode. I downloaded and ran CCleaner. I also downloaded and ran Bitdefender Trojan.Ransom.Ice Generic Removal Tool. The removal tool showed no infected files found/removed. I wanted to know if doing both those things is enough to remove the moneypak virus or if there is more I need to do. Thanks for your help!

Find more posts tagged with

Comments

Rampant

Try this utility MBAM.

nette22

Thanks for the help Rampant

I downloaded MBAM and it did find the virus on my computer. Only problem is the virus is still on my computer. I start my computer in Safe Mode, run MBAM, and after doing a Full Scan and rebooting my computer, I do another Full Scan and two infected registry values are repeatedly detected:

HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows|Load (PUM.UserWLoad)

HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows|Load (Trojan.Ransom)

I've done the full scan 8 tmes and those 2 registry values are always detected.

Any help on how to fix this would be appreciated

user53

Sounds like a rootkit.

Do a scan with this: http://support.kaspersky.com/faq/?qid=208283363 preferrably in Safe Mode

(Alternative download link: http://download.cnet.com/Kaspersky-TDSSKil...-75722087.html)

A more advanced rootkit detector can be found here: http://www.gmer.net/ but you have to be careful not to accidentally delete something you shouldn't.

nette22

Thanks for the tip user53

Downloaded & ran TDSSKiller, but nothing detected. I did download & run GMER, but that is far too advanced for me :huh:

Downloaded & ran Hitman Pro & EEK. Nothing detected by either of those. Ran MBAM & the same 2 registry values are detected. Gonna keep at this. If there is any other advice, all would be appreciated

nette22

Just wanted to give an update on my situation. Problem was resolved Got some great help from MBAM's malware removal team. Fixed my problem in a couple of hours. Grateful for their help and for the help I got here as well Rampant, thanks for pointing me toward MBAM

rootkit

Hello,

Thank you for your feedback!

Should you need any further assistance, please do not hesitate to contact us.

http://www.bitdefender.com/support/consumer.html

Happy New Years!