[FBI Moneypak Virus]

MrC,

Here is the log of the cleaner after the restart,

AdwCleanerS1.txt

And here is the copy/paste from the other file:

Results of screen317's Security Check version 0.99.63

Windows 7 Service Pack 1 x64 (UAC is enabled)

Internet Explorer 8 Out of date!

``````````````Antivirus/Firewall Check:``````````````

Windows Security Center service is not running! This report may not be accurate!

Windows Firewall Disabled!

AVG Internet Security 2013

Microsoft Security Essentials

Antivirus up to date!

`````````Anti-malware/Other Utilities Check:`````````

Malwarebytes Anti-Malware version 1.75.0.1300

AVG PC TuneUp

AVG PC TuneUp Language Pack (en-US)

Java™ 6 Update 29

Java 7 Update 17

Java version out of Date!

Adobe Flash Player 11.6.602.180

Adobe Reader 9 Adobe Reader out of Date!

Mozilla Firefox (20.0.1)

````````Process Check: objlist.exe by Laurent````````

Microsoft Security Essentials MSMpEng.exe

Microsoft Security Essentials msseces.exe

Malwarebytes Anti-Malware mbamservice.exe

Malwarebytes Anti-Malware mbamgui.exe

AVG avgwdsvc.exe

Malwarebytes' Anti-Malware mbamscheduler.exe

`````````````````System Health check`````````````````

Total Fragmentation on Drive C: 2%

````````````````````End of Log``````````````````````

[FBI Moneypak Virus]

MrC,

Here is the AdwCleaner file that you needed.

AdwCleanerR1.txt

[FBI Moneypak Virus]

MrC,

Here is the log when she scanned.

mbam-log-2013-04-26 (20-48-12) full.txt

[Pintrest... A new way to spread Malware?]

Hello Folks!

So my Fiancee was browsing around on Pintrest the other night, and she clicked a pin to show it in a bigger view. Then after you have the option to click the pin again and it will take you to the website associated with that pin. As soon as she clicked and her computer navigated to that website she saw a quick download flash across her screen and then it went black. When it came back on a moment later she had the FBI Moneypak Virus and she wasn't able to go into any recovery or safemode with the exception of the command prompt.

Really just be careful with what you see posted and what you're clicking. If possible try and have some sort of virus protection that can scan the webpages you're about to visit and give you a heads up.

-David

[FBI Moneypak Virus]

MrC,

Here is the ComboFix log that you needed!

combofixlog.txt

[FBI Moneypak Virus]

MrC,

Here is the report that you needed.

RKreport1_S_04262013_02d1918.txt

[FBI Moneypak Virus]

Dear MrC,

The computer has booted and no Moneypak stuff is coming up! Thank you!

Here is the attachment you requested

Fixlog.txt

[Help with EXE]

You could also try to edit the registry as well to fix the problem.

Click Start, In the search box type "Command Prompt" and run it.

• Type the following commands one by one:

cd\windows

regedit

• If Registry Editor opens successfully, then navigate to the following key:

HKEY_CLASSES_ROOT \ exefile \ shell \ open \ command

• Double-click the (Default) value in the right pane

• Delete the current value data, and then type:

"%1" %*

(ie., quote-percent-one-quote-space-percent-asterisk.)

• Navigate to:

HKEY_CLASSES_ROOT\.exe

• In the right-pane, set (default) to exefile

• Exit the Registry Editor.

Hope this helps

[FBI Moneypak Virus]

Mr C,

Here is the file that you requested.

FRST.txt

[FBI Moneypak Virus]

Oh, you might need this too. It is a Dell Inspiron running Windows 7 64bit.

[FBI Moneypak Virus]

Hello everyone,

My Fiancee just recently got the FBI Moneypak virus on her laptop and it wont let her boot to anything but to windows with command prompt unless she logs into the Admin account (password unknown and is not blank). Is there anyone who can help me with this?