Do I still have a virus? [Moneypak scam]

Avatar image for metatron_da_don
Metatron_Da_Don

21

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

#1  Edited By Metatron_Da_Don

The moneypak virus is the trojan that says the FBI is investigating your PC and to gives you instructions to deposit $200 via a Moneypak card to access your PC again (for 24 hours).

I think I got rid of it by going to safe mode (no internet connection) and only having 1 account I transferred my small # of files to a flash drive, and created a brand new account in Safe Mode and deleted the old one.

I'm 30 min in on this new account and no f### screen has popped up.So do I still have the virus? And if so how do I get rid of it?

Avatar image for tycobb
TyCobb

2036

Forum Posts

90

Wiki Points

0

Followers

Reviews: 1

User Lists: 0

#2  Edited By TyCobb

Removing a user account does not mean you cleaned your machine of a virus. Download an antivirus. There's plenty of free ones out there.

Avatar image for iam3green
iam3green

14368

Forum Posts

350

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

#3  Edited By iam3green

virus scan your computer.

Avatar image for thunderslash
ThunderSlash

2606

Forum Posts

630

Wiki Points

0

Followers

Reviews: 0

User Lists: 2

#4  Edited By ThunderSlash

You should probably reformat.

Avatar image for bicycleham
bicycleham

1493

Forum Posts

362

Wiki Points

0

Followers

Reviews: 1

User Lists: 0

#5  Edited By bicycleham

Malewarebytes

Avatar image for xdaknightx69
xdaknightx69

480

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 1

#6  Edited By xdaknightx69

@ThunderSlash said:

You should probably reformat.

Avatar image for ravenlight
Ravenlight

8057

Forum Posts

12306

Wiki Points

0

Followers

Reviews: 0

User Lists: 2

#7  Edited By Ravenlight

@xdaknightx69 said:

@ThunderSlash said:

You should probably reformat.

This is the equivalent of nuking it from orbit. (It's the only way to be sure).

Avatar image for spydrmrphy
SpydrMrphy

92

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 1

#8  Edited By SpydrMrphy

You actually may have eliminated this specific one. Apparently it's easy to remove. However, you will want to get your self some anti-virus/anti-spyware software. If you don't have one right now, and don't want to pay there are many, many good freeware solutions.

I found some information on it, and found this video hopefully this will help others with avoiding this scam and removing this crap.

Avatar image for bravetoaster
BraveToaster

12636

Forum Posts

250

Wiki Points

0

Followers

Reviews: 0

User Lists: 1

#9  Edited By BraveToaster

Lol, switching user accounts doesn't trick a virus into submission. Here's some security software you can download for free.

http://windows.microsoft.com/en-US/windows/products/security-essentials

http://www.malwarebytes.org/

Avatar image for metatron_da_don
Metatron_Da_Don

21

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

#10  Edited By Metatron_Da_Don

Thanks guys much appreciated.

Avatar image for i_stay_puft
I_Stay_Puft

5581

Forum Posts

1879

Wiki Points

0

Followers

Reviews: 0

User Lists: 5

#11  Edited By I_Stay_Puft

Another thing you can try doing is if you have a previous restore point roll back your machine to a point before the time you may have got the trojan. If you don't have a previous restore point do what other people have suggested and run malwarebytes full scan in safe mode. If you check online their are some sites that will show you what .exe you need to delete and what registry lines you need to erase from your computer in order to get rid of it completely. Only do the latter if you have a good understanding of computers.

- Do not reformat your harddrive, unless its your last resort. I got the same trojan and the rolling back to a previous system restore point along with running malewarebytes in safe mode worked for me.