Somehow got the "FBI Moneypak Virus" After Downloading a Mod

[nativefoxtail]

Somehow I managed to get the FBI Moneypak virus after trying to download a mod [The Tribunal Armor Set, for Skyrim, to be specific]. I guess this serves me right because it's outdated, but it looked awesome. I'm taking my computer in tomorrow to see if it can be fixed, but hopefully someone can maybe look into this for the sake of anyone else mistakenly downloading that mod. There isn't any other way I could've gotten this virus, but Nexus has a reputation for being safe :/

[IsharaMeradin]

http://forums.nexusmods.com/index.php?/topic/947327-nmm-bug-fix-release-and-download-hacking-problems-fixed/

It is a known issue and was supposedly taken care of rather early yesterday (03-21-2013). Hope you are able to get your computer working again without too much loss.

[Georgiegril]

There seem to be quite a lot of people report that the problem has not been fixed, and continues to appear on downloads from various servers. I wonder that the servers are still up, considering.

[Subzero254]

I recently encountered this problem while trying to fix my game which is still experiencing CTD's atm in my other post. However i provided a simple fix for those who have the experience with these kind of issues.

 

Simple Fix:

Its a complete lock out kind of virus and to fix it i suggest you simply:

-enable BIOS and boot from a flashdrive or CD with windows on it

-Do a System Restore to roll back a day or two ago etc

-Load and Download Malwarebytes Anti-Malware program

-Run it and it will eliminate this virus at the cost of a revert OR it wont exist entirely however be sure

 

Advanced:

I've searched alternate sites to remove this virus, and most will indicate to you where it is likely hidden or in which files its hidden inside Given here:

http://botcrawl.com/how-to-remove-the-fbi-moneypak-ransomware-virus-fake-fbi-malware-removal/#options

 

Under 2.Manual Removal(Advanced), just after the "All FBI Moneypak Files:" is a list of the potential names for the virus.

Following the steps on the site you can use the CMD prompt and functions from its API to find the directory and remove them if they exist in yours.

 

I.e:

C:\ DIR (used to find a list of files in your C:\ drive and navigate from there using DIR to %appdata% etc wherever your file might be)

C:\Users\...\%Appdata%\Roaming\... etc until you find the FBI Moneypak Files and delete them manually

 

OR

 

Use the same CMD functions to run System Restore etc there are many fixes available on this site

 

Things to note:

1.) If your receiving "windows won't let you..." such and such errors when you try to restore because your running with more than one Harddrive like me and windows is on my C:\ while everything else is on my E:\ just simply ignore them and start BIOS again and boot from your Harddisk like you would normally would and it should have ran telling you windows has reverted etc.

 

2.) Chances of you being able to apply these fixes varies because in my case, the virus was not allowing me to enter safe mode, so i ran the CMD from my Flashdrive off of my windows install however couldn't find certain folders due to naming issues on my drives. After this i simply did a restore to the previous day and downloaded Malwarebytes detected and deleted the file before it could cause me harm.

 

I hope this helps I understand how stressful these situations can be and hope you fix your Computers, I'll try to help where i can incase anyone replies to this post for future reference. Have a nice day :smile:

 

EDIT: Ah i almost forgot if you continue to download mods off of the NM site just be sure after you have downloaded ALL of them to run Malwarebytes to be sure as its software is up to date with the most recent version of this virus and Microsoft Security Essentials is not (What i use).

Edited April 4, 2013 by Subzero254