[28009] in resnet
Re: FBI Moneypak ramsonware
daemon@ATHENA.MIT.EDU (Derek Buchanan)
Mon Oct 8 09:37:07 2012
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 8bit
Message-ID: <CA+jTDn9jZw0Obna7_B2S8a27ce0sobfHC9KJY8zJzwxRHK=7cw@mail.gmail.com>
Date: Mon, 8 Oct 2012 09:34:38 -0400
Reply-To: Resnet Forum <RESNET-L@listserv.nd.edu>
From: Derek Buchanan <buchands@gmail.com>
To: RESNET-L@listserv.nd.edu
In-Reply-To: <9AF279DD359BD14DA5F7B23E04570DE029DAC0@exch-mbx01.exchange.upenn.edu>
Caroline,
Have you tried the instructions using the Emsisoft Emergency Kit?
The information and directions can be found here.
http://www.bleepingcomputer.com/virus-removal/remove-fbi-monkeypak-ransomware
Derek
MBC IT
On Mon, Oct 8, 2012 at 9:24 AM, Caroline Couture
<caroline@pobox.upenn.edu> wrote:
> Hi Folks!
>
> I knew such things existed but I've never seen this in person until now.
>
> We tried using some of the various "typical" tools for removal, SuperAntiSpyware and the AVG boot disk, had no luck, and the manual removal instructions don't match up with what we are seeing but this may be because we tried removing it with anti-virus applications first.
>
> Has anyone successfully cleaned a machine with this ransomware? Or should I not waste my time and just reformat. (Which will be painful since the student probably doesn't have her software since the computer is two year old.)
>
> Thanks!
> Caroline
>
> "We're all going to die, all of us, what a circus! That alone should make us love each other but it doesn't. We are terrorized and flattened by trivialities, we are eaten up by nothing." - Charles Bukowski
>
> Caroline Couture
> College House Computing
> 3702 Spruce Street
> 215.573.3887
>
> ___________________________________________________
> You are subscribed to the ResNet-L mailing list.
>
> To subscribe, unsubscribe or search the archives,
> go to http://LISTSERV.ND.EDU/archives/resnet-l.html
> ___________________________________________________
___________________________________________________
You are subscribed to the ResNet-L mailing list.
To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________
