Virus that was not detected by Windows Defender Offline

Well while surfing the internet, suddenly I recieve giant ad type thing. It covered my entire screen, claiming to be FBI, locking my computer for 200$. Insane, so I downloaded Windows Defender Offline. Then the scanning showed nothing... I need a plan B guys.

windows virus help

asked Aug 06 '12 at 02:49

YumaSado
1●1●1●1

5 Answers:

oldest newest most voted

1	CTRL+ALT+DELETE then go to the Processes Tab, and close any suspicious processes as well As Flash Player and/or Java processes (that's what might be running the Ad). answered Aug 06 '12 at 06:44 Cameron 1.8k●103●127●134

Why would you download it, How did you download it if you're offline, and have you tried going into task manager, look for it in the process tab, open the file location for it, keep that window open, end the process and delete the executable behind the "virus" or at the same time or an alternate, use msconfig, or ccleaner's start up tab, and disable anything that looks suspicious, of course after ending the process, as that it won't rewrite itself into the boot list. But I'm sorry why would you download something claiming to be FBI, I mean come on now.

answered Aug 06 '12 at 03:09

pjob797
2.6k●38●49●82

You're mistaken. LEt me go into more detail then. I was literally surfing the web, then my screen went black, heres no exit button on ths ad thing. When I open task manager it just switches back to the weird ad. I cannot use my computer, so I went on my laptop to download an offline cleaner. I didn't download anything you fool.

(Aug 06 '12 at 05:31) YumaSado

then you should hit ctrl+alt+del and end any weird processes, and you downloaded it from another computer, that makes more sense

(Aug 06 '12 at 13:42) pjob797

You could try Kaspersky Tdsskiller or something similar. Another route would be to examine your processes and event logs and try to remove it yourself. You need to be careful with googleing your processes though because there's a lot of misinformation to be had and even malware can use a legitimate name. It's most likely something attached to a download; which could include an e-mail or anything else you allowed on your computer. Things like that generally need to be at least triangulated using two pieces of information or flags to locate them.

answered Aug 06 '12 at 03:24

ClosetFuturist
1.7k●6●14●27

I can't run a program like that because the virus "Locks" my computer. The strange ad just switches to the front of the screen making me unable to run or do anything else on the computer.

(Aug 06 '12 at 05:33) YumaSado

In that situation I would make a persistent Linux live USB drive with Knoppix and install ClamAV. It can be booted and run independently. You would need another machine to make the flash drive with though.

(Aug 06 '12 at 08:08) ClosetFuturist

how to rid your computer of the FBI money pack malware..

read carefully fallow the direction :) http://www.zimbio.com/Remove+Malware/articles/txSxhsDtXLo/How+Remove+FBI+MoneyPak+Virus+Malware+Ransomware

this is malware the FBI i was hopeing it had done away with already it was (is a ransom maleware that got on computers long ago and was set to active in july ..

most people didnt take this malware warning serious ..

i know I posted about this virus a few times on this site and several others and no one was interested other then to dismiss it , in fact was around the time of the DNS changer the FBI had a website set up to test if your computer had this malware and shut it down before it took over I dont know if it is still running or not but millions of computer were siad to be infected world wide ..

answered Aug 06 '12 at 08:29

jadtechnic
2.0k●5●18

edited Aug 06 '12 at 09:40

just thought I would toss in this secondary warning to others this may apply to..

if you have daul boot machines like windows linux and you have not use window in many months keep in mind windows partition could be infected with this virus and you wouldnt know it is set to go off about 72 hours after its activated ..

i dont remember all the details right off but the site I copied here will help you find and remove the two files to unlock the computer ..

(Aug 06 '12 at 09:02) jadtechnic

Here's something interesting. I've been googleing around and I can't find a single post anywhere of anyone claiming to have been infected with DNSChanger. Very curious to say the least.

(Aug 06 '12 at 10:55) ClosetFuturist

naa DNS changer fizzled turned out be be a lota to do over nothing this FBI MoneyPak malware is ..

it locks your computer with a phony notice that your computer is locked by the FBI for copywrite infringment and you are under investiagtion request you pay $200 or something they are calling it ransom ware or some such thing ..

(Aug 06 '12 at 11:09) jadtechnic

I'm not trying to speculate anything I'm just saying; out of the projected 300000 no one posts anything. I think that's odd.

(Aug 06 '12 at 11:29) ClosetFuturist

If you have system restore, roll it back.

answered Aug 12 '12 at 22:47

gnomie1
26●1

system restore wont work 2 reasons one virues infect the restore files too if there is a restore point left today most have some sort of a virus scan program they will turn off and delete all restore points to prevent silly things like trying to roll back from a virus which just infects you more and more over and over :)

even when updates on windows claim to be setting a restore point Nope they are not it is blocked by your virus scanner ..

(Aug 12 '12 at 22:53) jadtechnic

Your answer

toggle preview

community wiki

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

*italic* or __italic__
**bold** or __bold__
link:[text](http://url.com/ "title")
image?![alt text](/path/img.jpg "title")
numbered list: 1. Foo 2. Bar
to add a line break simply add two spaces to where you would like the new line to be.
basic HTML tags are also supported

learn more about Markdown