Welcome to Gaia! ::

mikeplusplus's avatar

Codebreaking Genius

6,850 Points
  • Nerd 50
  • Invisibility 100
  • Tycoon 200
While browsing the internet a couple nights ago, I got the FBI Moneypak virus, which makes a screen-sized popup appear (picture below), and, in short, says you need to pay $100 to unlock your computer.

User Image - Blocked by "Display Image" Settings. Click to show.

The first thing I did was try to open my task manager. However, although ctrl+alt+delete worked, the virus makes itself the top window, so task manager was not accessible. I tried pressing alt+f4, and the screen went black for a few seconds before coming back up, again with the virus on top. Finally, I restarted, and the virus went away, so when the "force restart" thing came up, I pressed cancel, and everything worked well.

However, when I boot my computer up the next day, the virus was back, so I used the restart trick again to get around it, and I have done that again today.

There are various step-by-step instructions for removing this virus, and I've tried many of them, only to find that the files mentioned in all of them do not appear to be on my computer. I thought that this virus might be using rootkits, so I used the GMER rootkit detector (http://www.gmer.net/), and it found nothing.

My computer is running Windows 7, and uses Microsoft Security Essentials (which could not find the virus either). Any assistance you may be able to provide would be appreciated, and any further questions you have will be answered to the best of my ability.

Step-by-step removals I have tried:
http://guides.yoosecurity.com/how-remove-fbi-moneypak-virus-malware-that-blocked-pc-asks-for-payment-100-dollars/
http://www.zimbio.com/Latest+Computer+Threats/articles/yuaiypcnmeB/How+Remove+FBI+Ransomware+Delete+FBI+Moneypak
http://cleanallvirus.blogspot.com/2012/06/remove-fbi-moneypak-virus-that-asks-for.html
http://fixpcissueseasily.blogspot.com/2012/06/completely-remove-fbi-moneypak-virus.html
http://removevirushelp.com/how-to-remove-fbi-moneypak-virus.html

EDIT:

I have also tried much of what is in the sticked thread Spyware/Adware/Virus/Trojan/Rootkit/Keylogger Removal Guide. I have not tried Step 3 of the Advanced Removal yet (and I am about to), nor have I tried the Live CD option yet.

ANOTHER EDIT:

I think I found it a while ago XD I deleted a shady-looking exe before posting this, and after restarting, instead of the virus popping up, an error window saying that the program (named jork_0_typ_col.exe on my computer, and possibly other ones, could not be found. Now I just need to figure out how to make my computer not want to run the program at startup so the error message doesn't pop up every time I turn my computer on.
Sonic Offline's avatar

Dedicated Man-Lover

9,250 Points
  • Elocutionist 200
  • Perfect Attendance 400
  • Millionaire 200
Try the steps you didn't do yet and get back to us. They're more or less what we'd tell you to try anyway.
hi i have the same problem i just got it today but i cant seem to find the virus on my computer. i also tried all the same steps but they just dont show up. if you found a solution i will greatly appreciate it thank you
mikeplusplus's avatar

Codebreaking Genius

6,850 Points
  • Nerd 50
  • Invisibility 100
  • Tycoon 200
lhb0007
hi i have the same problem i just got it today but i cant seem to find the virus on my computer. i also tried all the same steps but they just dont show up. if you found a solution i will greatly appreciate it thank you

first i will have to warn you that this may not entirely remove the virus. It will stop the part that gives you the popup when you start your computer. Go into % temp % (dont use any spaces, i used them so it would output looking normally), and click "Date Modified" so the newest files are on top. You should see an exe file, possibly with the name "jork_0_typ_col.exe", but it may be different. Delete this file and restart. (I recommend looking up the file you plan to delete first to make sure that it isn't actually an important file that looks like the virus).

If this doesn't work, then try everything that's in the stickied thread.

Quick Reply

Submit
Manage Your Items
Other Stuff
Get Items
Get Gaia Cash
Where Everyone Hangs Out
Other Community Areas
Virtual Spaces
Fun Stuff
Gaia's Games