FBI/Interpol Paypack virus

Discussion in 'Malware Help (A Specialist Will Reply)' started by Moirayne, Oct 18, 2013.

  1. Moirayne

    Moirayne Private E-2

    Hi, I'm also having similar issues as others but I've run into a few snags while trying to access the computer. The only user account is locked out because of the lockout screen holding the computer hostage. I did set up a second admin account on the computer and was able to get the main user account to let me in finally after many hours of frustration and threats against it's power supply.

    So far I've used MS tools to remove the threats but it wasn't picking everything up. So I followed the thread about removing malware. I've downloaded all of the programs listed except hitman pro (had a nasty experience with it in the past with this computer), I used OTL instead.

    I've also attached the log files, any recommended fixes would be greatly appreciated at this point, as my husband would be very happy to end the evil glares. lol
     

    Attached Files:

  2. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Please do the below so that we can boot to System Recovery Options to run a scan. There will be two options to choose from. One if you do not have your Windows 7 boot DVD and another when you have your DVD.

    For x32 (x86) bit systems download Farbar Recovery Scan Tool and save it to a flash drive.
    For x64 bit systems download Farbar Recovery Scan Tool x64 and save it to a flash drive.

    Plug the flashdrive into the infected PC.

    Option1: Enter System Recovery Options from the Advanced Boot Options:

    • Restart the computer.
    • As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.
    • Use the arrow keys to select the Repair your computer menu item.
    • Select US as the keyboard language settings, and then click Next.
    • Select the operating system you want to repair, and then click Next.
    • Select your user account an click Next.

    Option2: Enter System Recovery Options by using Windows installation disc:

    • Insert the installation disc.
    • Restart your computer.
    • If prompted, press any key to start Windows from the installation disc. If your computer is not configured to start from a CD or DVD, check your BIOS settings.
    • Click Repair your computer.
    • Select US as the keyboard language settings, and then click Next.
    • Select the operating system you want to repair, and then click Next.
    • Select your user account and click Next.

    On the System Recovery Options menu you will get the following options:
    • Select Command Prompt
    • In the command window type in notepad and press Enter.
    • The notepad opens. Under File menu select Open.
    • Select "Computer" and find your flash drive letter and close the notepad.
    • In the command window type e:\frst.exe (for x64 bit version type e:\frst64) and press Enter
      Note: Replace letter e with the drive letter of your flash drive.
    • The tool will start to run.
    • When the tool opens click Yes to disclaimer.
    • Press Scan button.
    • It will make a log (FRST.txt) on the flash drive. Please attach this file to your next reply. (See: How to attach)
     
  3. Moirayne

    Moirayne Private E-2

    Hello again, here is the log you reqested.
     

    Attached Files:

  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    OTL and Hitman Pro are totally different applications. OTL is not a malware scanner. It is a tool use to help us remove malware by creating scripts to run with it. It also does list out quite a few registry keys and files and folders but it make no decisions on malware and it only scans some locations not all. Hitman Pro is a malware scanner. You really should run a scan with it and attach the log we request. When you follow our instructions, you will notice that we tell you NOT to fix anything. We just want the results of a scan.

    FRST really did not show anything of significance. Just the below folder:
    C:\Windows\SysWOW64\bnbnxbqc

    Do you know what the files in this folder are for? They are new and show in your OTL log too because they are new.

    Did you fix what MBAM detected? Your logs shows you took no action.

    Are you actually still having problems?
     
    Last edited: Oct 20, 2013
  5. Moirayne

    Moirayne Private E-2

    No I did not do any of the requested fixes for each of the scans I ran. I just got the logs from each and posted here. Btw this computer is not my personal computer it is my husbands. I have no idea what that file could be, especially if it's new. I know he was doing some beta testing stuff for a video game he likes but that's about it.
     
  6. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You need to fix everything Malwarebytes detects. Then save a new log after fixing. Attach the new log.

    Then you need to ask him. It looks very suspicious.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds