Hack Forums
FBI Virus - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Keyloggers (https://hackforums.net/forumdisplay.php?fid=113)
+---- Thread: FBI Virus (/showthread.php?tid=3759538)



FBI Virus - Cytoplasm - Sep 17, 2013

Anyone know of a hotfix for the most recent FBI virus? Disables safe mode, eset\sdbot\combofix\malwarebytes\tdss\SAS don't pick it up.

FBI virus = http://botcrawl.com/wp-content/uploads/2012/07/New-FBI-Moneypak.png

Just wondering if anyone has a good method of removing this without doing a complete reinstall

For the moment we have to slave the HDD and scan it, no AV's have been detecting it with the newest batch of this virus.


Thanks for the help,


Cytoplasm


* - Remote Administration - Sep 17, 2013

Yeah, Its easy, Burn your laptop/Desktop DONE! jk

But if MB cant pick it up your screwed.


* - phybeя - Sep 18, 2013

I've heard Hitman pro can remove it quite easily.


* - Dr41DeY - Sep 18, 2013

Well look at this guy his YouTube Channel: http://www.youtube.com/channel/UC_M-iWYpQbgo4rK1YfewI5w
He make's A LOT of usefull video's on how to remove police, fbi, malware...

Hope you enjoy! :)


* - TheAngryhobo - Sep 19, 2013

Malware bytes and AVG and CCleaner got rid of it for me. That was 2 months ago though, the signature may be FUD ATM, if it is wait a few weeks and scan again.

I was able to boot safe mode, just do a chkdsk. It fucks up a few file indexes so you can't access safe mode.

Hope I helped!

This virus is so gay.


* - Dr. Business - Sep 21, 2013

My dad had the same issue, Malware bytes got rid of it; nothing else would


* - ultrakd001 - Sep 22, 2013

Malware Bytes works , you can also use Hitman Pro it is a nice and quick way , you can use rescue live CDs too if you are familiar with Linux.Finally I 'm 99% positive that you can also use the System Restore of the Windows Installation disk


* - Marquess - Sep 22, 2013

Just use System Restore bro and you should be good .


* - Mr Kindly Wolf - Sep 22, 2013

(Sep 17, 2013 11:41 PM)Dustin9099 Wrote:  Yeah, Its easy, Burn your laptop/Desktop DONE! jk

But if MB cant pick it up your screwed.

lo, that is what i think but so far that i know if you will need to format the harddrive with Hiren's BootCD 15.2 and do a 35 ddos on the harddrive that is what i do with my Clients


* - Mаtt - Sep 23, 2013

There's a lot of ways to remove it manually actually. I got rid of it that way, then cleaned it out with Malwarebytes and CCleaner. I wasn't able to access Safe Mode or Safe Mode with Networking on the multiple machines I've encountered with this virus. I was able to boot into Safe Mode with Command Prompt and remove it that way.