# Computer Virus Question

**URL:** <https://boards.straightdope.com/t/computer-virus-question/663494>\
**Category:** Factual Questions\
**Created:** [July 14, 2013, 5:58pm UTC](https://boards.straightdope.com/t/computer-virus-question/663494 "2013-07-14T17:58:49Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![GreenElf](https://avatars.discourse-cdn.com/v4/letter/g/9de053/32.png) [@GreenElf](https://boards.straightdope.com/u/GreenElf)\
**Post date:** [July 14, 2013, 5:58pm UTC](https://boards.straightdope.com/t/computer-virus-question/663494/1 "2013-07-14T17:58:49Z")

</div>

My computer has had a FBI Moneypak virus for awhile now. My temporary fix is to immediately go into task manager processes and delete buuso.exe whenever I boot the computer, and reset the computer to an earlier date if the virus still locks my computer.

The standard solution is to run anti-virus software such as Malwarebytes to remove it, but neither Malwarebytes or Spybot seem to detect it on my computer. Their displayed results always show nothing detected. Why don’t they detect the virus and is there any other software that will detect and remove it?

---

<div class="post-metadata">

**Author:** ![aNewLeaf](https://avatars.discourse-cdn.com/v4/letter/a/ac91a4/32.png) [@aNewLeaf](https://boards.straightdope.com/u/aNewLeaf)\
**Post date:** [July 14, 2013, 6:02pm UTC](https://boards.straightdope.com/t/computer-virus-question/663494/2 "2013-07-14T18:02:24Z")

</div>

You’ll want to make sure you have all the most current versions and data files.  
Viruses change all the time, anti-virus programs need to as well.

---

<div class="post-metadata">

**Author:** ![Fear\_Itself](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/fear_itself/32/19637_2.png) [@Fear\_Itself](https://boards.straightdope.com/u/Fear_Itself)\
**Post date:** [July 14, 2013, 8:24pm UTC](https://boards.straightdope.com/t/computer-virus-question/663494/3 "2013-07-14T20:24:25Z")

</div>

Because it probably installed a rootkit which is causing Windows to misreport the presence of files on the hard drive to any anti-virus that asks. You are going to need some assistance that goes beyond running a user-friendly scanner.

I highly recommend [bleepingcomputer.com](http://www.bleepingcomputer.com/forums/t/182397/am-i-infected-what-do-i-do-how-do-i-get-help-who-is-helping-me/)

Follow the instructions, submit the requested logs and someone will guide you through the process. Could take a couple of days.

---

<div class="post-metadata">

**Author:** ![ftg](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/ftg/32/2801_2.png) [@ftg](https://boards.straightdope.com/u/ftg)\
**Post date:** [July 15, 2013, 3:50pm UTC](https://boards.straightdope.com/t/computer-virus-question/663494/4 "2013-07-15T15:50:27Z")

</div>

In such situations, it’s best to use an AV boot disk to scan. I’ve had good luck with [Kaspersky Rescue Disk 10](http://support.kaspersky.com/viruses/rescuedisk#downloads) in recent years. (Note: the disc is “old” but it updates itself.)

Download and burn the file (it is an .iso file, you need software that burns that as a whole disc, not just save it to a CD). Preferably on a clean computer.

Insert disc into infected computer, boot it, making sure that it boots from CD. Follow the directions.

If that (or something similar from another vendor) doesn’t work: Save your files (which may be the biggest problem with that virus), wipe the disc as clean as possible, reinstall OS, apps, files, etc.

Another option is to remove the HD from the computer, install it as a 2nd drive on a good computer, and scan from there. Be sure to also scan the Registry on the other drive.

---

<div class="post-metadata">

**Author:** ![Quartz](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/quartz/32/267_2.png) [@Quartz](https://boards.straightdope.com/u/Quartz)\
**Post date:** [July 15, 2013, 6:56pm UTC](https://boards.straightdope.com/t/computer-virus-question/663494/5 "2013-07-15T18:56:07Z")

</div>

> [@GreenElf](#):
>
> The standard solution is to run anti-virus software such as Malwarebytes to remove it, but neither Malwarebytes or Spybot seem to detect it on my computer. Their displayed results always show nothing detected. Why don’t they detect the virus and is there any other software that will detect and remove it?

Are you running the tools in Safe Mode?

---

<div class="post-metadata">

**Author:** ![GreenElf](https://avatars.discourse-cdn.com/v4/letter/g/9de053/32.png) [@GreenElf](https://boards.straightdope.com/u/GreenElf)\
**Post date:** [July 17, 2013, 3:23am UTC](https://boards.straightdope.com/t/computer-virus-question/663494/6 "2013-07-17T03:23:38Z")

</div>

Thanks for the advice. I updated the software, ran it in safe mode, and it detected and removed a dozen threats.
