FBI wants money Virus

June 21, 2012 at 19:34:58
Specs: Windows 7, Intel Atom N450
I have a friend's daughter who downloaded a Jpeg from Google images. Right after, she had a message appear from the "FBI" that she tried to download something not permitted and to go to a store they had listed and buy a card. Enter the number to remove, kind of like a ticket.

As soon as the computer has access to the internet, it comes up with that page and you can't get around it.

See More: FBI wants money Virus

Report •

June 22, 2012 at 09:17:39
Clearly a scam.

Try MalwareBytes freebie - it is often good at finding and fixing these sort of things.

If you can't download it, get the download on another computer, then put it on a flash drive and install it on this computer.

If it won't let you run it try changing the download extension from EXE to either CMD or BAT. This also applies to the installed program file (mbam.exe).

Always pop back and let us know the outcome - thanks

Report •

June 24, 2012 at 07:29:30
The easiest solution is to tap f8 on bootup...select safe mode with networking and then run rkill.exe
and then run malwarebytes. That should clean up the problem for you.

Some HELP in posting on Computing.net plus free progs and instructions 7 Golds

Report •

October 17, 2012 at 05:03:13

To remove FBI Moneypak infection you need to start the computer in safe mode.
and Delete the FBI MoneyPack Virus Files

Windows Vista/ 7

C:\Users\{User Profile}\AppData\Local\Microsoft\Windows\[Random]\ [Random.exe]
C:\Users\{User Profile}\AppData\Local\Microsoft\Windows\ [Random]
C:\Program Data\lsass.exe
C:\Program Data\[Random.exe]
C:\Program Data\csrss.exe
C:\Users\{Your User Name}\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ctfmon.exe

Windows Xp

C:\Documents and Settings\ {User Profile} \Local Settings\Application Data\Microsoft\Windows\[Random.exe]
C:\Documents and Settings\ {User Profile} \Local Settings\Application Data\Microsoft\Windows\[Random]
C:\Documents and Settings\{Your User Name}\Start Menu\Programs\Startup\ctfmon.exe
C:\Windows\[Random.exe](eg. Pmfjyiaj.exe)

Step by Step removal Instructions:


Report •
Related Solutions

Ask Question