Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


FBI Money Pak Virus causing problems

  • Please log in to reply
1 reply to this topic

#1 jeffw11


  • Members
  • 127 posts
  • Local time:03:07 AM

Posted 19 February 2014 - 07:48 AM

My sister dropped off her computer and told me that the FBI Moneypak virus got her computer. She ran a virus scan right away and the virus has not shown up again. Problem is, here doc files and picture files are messed up.


I ran malwarebytes and is cleaned up a few things. I then ran eset online scanner and it found 1697 infected files but it freezes at 99 percent. I've run it 2 times and the same thing. When I cancel eset,  it has not cleaned up any of the infected files.


The picture folders have a yellow lock placemat in them. When I open the folder, there are 3 HOWDECRYPT files. GIF, HTM, TXT.


The Doc files do not open at all.


Any help would be appreciated.



BC AdBot (Login to Remove)


#2 xXToffeeXx


    Bleepin' Polar Bear

  • Malware Response Instructor
  • 6,086 posts
  • Gender:Female
  • Location:The Arctic Circle
  • Local time:09:07 AM

Posted 21 February 2014 - 12:37 PM



A repository of all current knowledge regarding CryptorBit and HowDecrypt is provided by Grinler (aka Lawrence Abrams), in this tutorial: CryptorBit and HowDecrypt Information Guide and FAQ

Reading that Guide will help you understand what CryptorBit and HowDecrypt Ransomware does and provide information for how to deal with it and possibly recover your data.

There is also a lengthy ongoing discussion in this topic: HowDecrypt or CryptorBit Encrypting Ransomware - $500 USD Ransom Topic. Since this infection is so widespread, it would be best (and more manageable for staff) if you posted any more questions or comments in that topic discussion.



~If I am helping you and you have not had a reply from me in two days, please send me a PM~


logo-25.pngID Ransomware - Identify What Ransomware Encrypted Your Files [Support Topic] - If we have helped you out and you want to support what we do, you can do so here


 ~Twitter~ | ~Malware Analyst at Emsisoft~

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users