Hi, My name is Tim, You might see the title and just ignore it because a lot of people have solutions to this, But for some reason, mine is a different version. My MoneyPak Fake FBI Virus is different from most. It wont let me go into any type of safe mode, any type! No command prompt safe mode, no networking safe mode, no regular safe mode! i have no other user accounts, i’ve tried using kick start… didn’t work. I got this on December 2nd 2012, And i haven’t seen any pictures of my type, so i think its a new version. If someone can figure this out i’d be greatful, and if you don’t know completely, can i get a way of restoring my hardrive to factory settings, Oh and one more thing, No i cannot load to a time before i got the virus.
It seems that FBI virus is improving as it was expected and it's almost clear that there are several versions of this virus that haven't been discovered yet.
If you are completely disabled by this ransomware, try attaching your PC's hard drive to another PC. Additionally, do a full system scan with anti-malware programs, like FortectIntego or Spyware Doctor. If you can't launch these programs, use alternative scanners, such as Norton Power Eraser or similar.
Feel free to contact us again and let us know if this method was sucessful.
I would appreciate your suggestion.
The easiest way to do that is to make the clean hard drive, with anti-spyware installed, an "external drive". You can buy external drive casing, put your hard drive into it and make it a USB compatible external drive.
However, if you are infected with FBI virus, you can also follow this removal guide:
1. Reboot into safe mode with command prompt.
2. Run regedit and look for Winlogon.
3. Find a key named by Shell under Winlogon. It should refer to Explorer.exe or be blank. If there is something that is not explorer.exe or blank, replace it/them with explorer.exe.
4. Save the changes and reboot to Safe Mode with Networking.
5. Run msconfig and disable suspiciously-looking startup entries.
6. Reboot and run a full system scan with updated version of FortectIntego to remove the remaining virus executables and files from the system.
Let us know how it worked for you!
2spyware team