FBI MoneyPak Virus

[donald]

Has anyone here (TPFC) had any experience with this problem the "FBI MoneyPak Virus".

I have been helping a computer Illiterate relative over the phone and so far nothing I talked them through worked.

The free anti-virus, anti-malware, etc that I have tried have failed me so far.

[guinness]

What about MS Security Essentials?

[donald]

Already installed and up to date unless it is compromised.

[Napiophelios]

Try booting a Live rescue disc
and use an AV scanner in that environment

[donald]

Any specific recommendations?

My relative will be doing the actual work so simple is best.

I can mail discs to them.

[Midas]

I haven't checked detection capabilities for this particular viral strain, but for general use I'd recommend YUMI'ng Dr.Web (for quick checking) and Kaspersky (for deep analysis, may require online access for definition updating) ISO images to make a bootable USB -- if the end machine supports it... In case it does not, a Dr.Web livecd is still one of the easiest ways to do it.

http://www.pendrivelinux.com/yumi-multi ... b-creator/
http://www.freedrweb.com/livecd/?lng=en
http://rescuedisk.kaspersky-labs.com/re ... cue_10.iso

[Wolfghost]

Maybe this will help out: http://forums.anvisoft.com/viewtopic-45-1312-0.html

[dmg]

[stupid question removed]

Edit:
These link might be helpful.
https://community.mcafee.com/thread/46894
http://www.youtube.com/watch?v=VYjKMA9gprM
http://www.youtube.com/watch?v=_gILhDFqm4I
The vids appear to be almost identical.

[donald]

Thanks For your replies.

(If all goes well I will not need to go in person.)

(If it does not go well I may talk them into a dual booting Net-Top with Browser Linux as second boot.)

[I am Baas]

@donald

Did you manage to resolve this?

Saw it mentioned on another blog... links to removal instructions:
http://www.threatlevel.com/malware/how- ... pak-virus/
http://www.bleepingcomputer.com/virus-r ... ransomware

[donald]

I will be going in person next monday.

It probably is obvious that you can never phone in computer advise ...

[SYSTEM]

This worm attacked my employer's computer this week. I got it removed by booting the computer to GNU/Linux from my external hard drive.

[albert_clemens]

tried Safe Mode, not working.
tried Hitman Pro, Malwarebytes, SpyBot and free versions of AVIRA, Avast, McAfee... Only MBAM works.
tried System Restore...
I found it + manual removal http://fbi-moneypak.com/manual-removal-directions/ to be most effective.

[I am Baas]

^This site has a 26 Jun 2013 creation date... be cautious.

[Knuutr]

Yes, a lot of people are trying to earn money by following computer virus trends and creating websites to address specific search requests targeting specific virus names. They usually advise to use some software removal tools that they are affiliated with and get commissions per sale In this case it is Stopzilla software.