Question

All > Apps, Gadgets, Computers & Games

shijin: 4 months ago

Which is the most powerful virus so far which cannot be removed easily with the help of antiviruses..?

Answer This Question

Report as

Answer 1

cyber0: 4 months ago | Last edited at 9:40AM on 2/21/2013

With the help of a Trojan dubbed WinLocker, the FBI Moneypak virus literally locks your computer. Your desktop, programs and documents become completely inaccessible to you. You can not even run Task Manager, which has the ability to kill running processes. You just remain with an FBI Moneypak page, extorting you to pay the $100 get-out-of-the-jail fee ASAP. The things are becoming even worse the latest FBI Moneypak version. Two weeks ago it was possible to break this ransom-ware by booting the machine in Safe Mode. Then you could launch everything needed to gather Moneypack’s executables and to clean the registry from its malicious entries. Unfortunately, the latest Moneypak scam runs in Safe Mode too, thus making it impossible for anyone to disable it.

Helpful (3) Fun Thanks for voting Comments (4)

Report as

Eleksis666: 4 months ago

This is not strictly true. You can run the Task Manager manually, just not with the built in mechanisms to launch it.

It's also not impossible to remove by any stretch. Solution to remove (Using a different computer of course):
Download a boot CD that has antimalware software.
Update the software's malware definitions
burn the CD
restart your PC with the CD in the tray and boot from it
launch the antimalware software and scan the infected hard drive.
remove all the detected hidden files.
reboot windows (normal or safe mode. whichever)
It should boot normally but scan your PC again to remove the last of the registry traces.

Report as

Eleksis666: 4 months ago

Some examples of such boot CDs would be Avast Recue CD, Avira AntiVir Rescue System, or Bitdefender rescue disk. The first one is a paid solution ($19.99 USD if I remember correctly) but the second and third are free and work just as well. Just posting them for reference.

Report as

cyber0: 4 months ago

Although the internet is full of supposed fixes for this ingenious piece of malware, once a machine becomes infected it is extremely difficult to remove all of the hidden files, any of which can regenerate the entire FBI money pack extortion even with the remedies that you suggest. When launched on an infected computer, Trojan.Winlock.7372 registers itself in the system registry branch responsible for start-up programs, and then runs an endless loop to search and stop a number of applications and system utilities. These include the Task Manager, Notepad, Registry Editor, Command Prompt, System Configuration, Microsoft Internet Explorer, Google Chrome, Firefox, Opera, ProcessHacker and Process Monitor. The Trojan also utilizes a rarely used routine to disable the firewall.

Report as

Eleksis666: 4 months ago

My solution does not boot the infected OS though. You're right. You can't remove the infection from the OS from inside the OS, but it INCREADIBLY easy to remove the infection from outside the OS via a boot CD or a linux install. Because the moneypack virus makes use of heuristically unsafe functions it can be detected by any modern heuristic analysis tool and can be removed. The registry keys will still exist but since they no longer point to anything they can be safely removed on the next boot.

The only issue whatsoever is if the infection has proceded to the state where system files have been infected. Then when the boot CD quarantines/deletes them it will render the system unbootable. This is quickly solved by restoring these files using the windows install DVD.

Report as

Add a comment...

Answer 2

xxMalvinGonzalezxx: 4 months ago | Last edited at 9:39AM on 2/21/2013

flame virus

Helpful Fun Thanks for voting Comments (2)

Report as

rustyboilerz: 4 months ago via Android

Venom isn't a virus.

Report as

xxMalvinGonzalezxx: 4 months ago

i miss read i thought he meaqnt human virus

Report as

Add a comment...

Answer 3

rustyboilerz: 4 months ago via Android

Ebola! They still can't find anything that helps.

Helpful (1) Fun (2) Thanks for voting Comments (0)

Report as

Add a comment...

Answer 4

lilith777: 4 months ago via iPhone

Hmm if your talking about people & diseases i think its the black mamba's venom and itd your talking about computers then its some virus where it shuts your pc and when you try to turn it on its a black screen asking for a password and you have to call the people who did that and pay them thousands of dollars for the password to fix it

Helpful Fun (1) Thanks for voting Comments (0)

Report as

Add a comment...