Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

FBI ransomware, can I delete HELLOMOTO folder?


  • Please log in to reply
4 replies to this topic

#1 GradyBoleyn

GradyBoleyn

  • Members
  • 23 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Midwest
  • Local time:05:48 PM

Posted 17 September 2012 - 12:19 AM

I had the FBI virus lock-out screen and ran MB in Safe Mode and it told me to restart so I did. Now I'm on (not in Safe Mode) and the FBI screen has not popped up yet but I ran MB again and the the 3 viruses are still there.

The MBAM log has this

Folders Detected: 1
C:\Users\GradyBoleyn\AppData\Roaming\hellomoto (Trojan.Ransom.FGen) -> No action taken.

Files Detected: 2
C:\Users\GradyBoleyn\AppData\Roaming\hellomoto\TujP.dat (Trojan.Ransom.FGen) -> No action taken.
C:\Users\GradyBoleyn\AppData\Roaming\hellomoto\BukF.dat (Trojan.Ransom.FGen) -> No action taken.

Can I just delete the hellomoto folder to be rid of this?

BC AdBot (Login to Remove)

 


#2 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:06:48 PM

Posted 17 September 2012 - 06:12 AM

Remove them.

#3 edinho1

edinho1

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:06:48 PM

Posted 17 September 2012 - 10:19 AM

I have the same trouble with this virus.

Spent many frustrating hours following various advice on the internet with no success.

Malwarebytes finds these same virus/folder but when i delete them / remove on malwarebytes they return as soon as im out of safe mode. Therefore hey presto within a minute or so the ukash police screen is back.

Any advice would be appreciated.

#4 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:06:48 PM

Posted 17 September 2012 - 10:20 AM

edinho1

Create a new topic here so that we can assist you

http://www.bleepingcomputer.com/forums/forum103.html

Thanks

#5 GradyBoleyn

GradyBoleyn
  • Topic Starter

  • Members
  • 23 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Midwest
  • Local time:05:48 PM

Posted 18 September 2012 - 12:31 AM

I did a restore point thing and it seems to have deleted those files and my computer is coming up clean now and it's been a whole day. I also just got AVG and Spybot and TDSSKiller, so I feel better...




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users