Jump to content



Photo

FBI Moneypak Virus


  • Please log in to reply
3 replies to this topic

#1 SuperJediMedia

SuperJediMedia

    Neowinian Senior

  • Joined: 03-December 01
  • Location: USA

Posted 02 October 2012 - 02:39

WOW I got infected with this virus. I used Malwarebyte to remove it, but now Microsoft Security Essentials won't update, and Windows Firewall won't load.

It's a nasty virus, but are these solutions to fix this, besides go for the easy 'restore' option which I am not usually fond of doing too much?


#2 +warwagon

warwagon

    Only you can prevent forest fires.

  • Tech Issues Solved: 2
  • Joined: 30-November 01
  • Location: Iowa

Posted 02 October 2012 - 20:05

Posted Image


Because you were infected it's a pretty good guess you have some vulnerability lurking on your system, whether via Java, Flash, Adobe reader Windows and the list goes on, although my money is on Java. I'd format and then just remember to do your updates and keep your 3rd party up to date as well.

I would personally recommend patchmypc. Set it up in the task scheduler with the patchmypc.exe /s option. This way every day patchmypc will run and keep your 3rd party application current and safe. That's how I have mine setup.

I would also recommended keeping your internet activity sandboxed using sandboxie, this is something I also use. .

#3 +goretsky

goretsky

    Neowinian Senior

  • Tech Issues Solved: 3
  • Joined: 12-March 04
  • Location: Southern California

Posted 03 October 2012 - 03:47

Hello,

The symptoms you report sound similar to a Win32.Daonol infection. Perhaps you had more than one infection? Here is a free standalone cleaner that removes the malware/repairs some of the damage caused by it: http://kb.eset.com/e...EN&option=en_EN

Regards,

Aryeh Goretsky

#4 gdodson

gdodson

    Neowinian Senior

  • Tech Issues Solved: 1
  • Joined: 03-October 04

Posted 03 October 2012 - 04:28

Which version of Windows are you running? If you open Windows Update (Vista or 7) and it says "(null)" at the bottom you can run this Windows Update Fixit and select aggressive repair. If some programs will not run there are likely Image File Execution Options (IFEOs) that have been set. To remove these, open regedit and navigate to "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options" and delete the subkeys found there. More info on IFEOs here. If you go to start > run and enter services.msc and scroll down to "Windows Firewall," you can right click it and attempt to start the service. If you receive error code 5 then the MpsSvc key in the registry has incorrect permissions and will need to be replaced.



Click here to login or here to register to remove this ad, it's free!