Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

I have Virus - I think classed as Ransom-ware?


  • Please log in to reply
11 replies to this topic

#1 ronno21

ronno21

  • Members
  • 62 posts
  • OFFLINE
  •  
  • Local time:12:05 PM

Posted 12 September 2013 - 10:43 AM

Hi,

 

I definitely have a virus - the computer will start up - but I cannot open

files, desktop - nothing at all.

 

When computer opens - a box appears - some kind of movie

program.

 

When you close it - takes you thru to message page - computer is

locked - will only be unlocked by paying $100 etc.

 

I read an earlier thread that said that you may be able to get

a virus-fix by downloading it onto a jump-stick - then hit F8 (from memory)

during start up.

 

Post also mentioned you would need the Windows discs (which I don't have)

but may be able to access.

 

I also have a SEAGATE hard drive back-up, which I backed up today -

before I got the virus.

 

I am now on another laptop - would it be SAFE to download my current files

from the SEAGATE back-up disc - with risking infection? I have work to complete...

 

My computer with the Virus - is a HP Laptop - with Windows 7 Home Premium,

 

Any help to get rid of this virus would be greatly appreciated....

 

ronno21



BC AdBot (Login to Remove)

 


#2 bory504

bory504

  • Members
  • 224 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:New Orleans
  • Local time:12:05 AM

Posted 12 September 2013 - 10:50 AM

This is called a rougue security infection. Pretty much it doesnt let you do anything and they try to trick you into purchasing fake software. If it is only personal files that you backed up, you should be ok. Infections attack mainly system files, not really and personal files like pictures or music. It definately is possible to transfer a virus, but if you only transfer personal documents, you are probably good. As far as getting the computer back up and running, I understand you dont have the recovery cds. Depending on what Operation System you have, it may have a "recovery partition" on it. Most computers vista and later should have a recovery partition which you can use to restore the system. Doing this, you will lose EVERYTHING, but its the fastest and easiest way to get this taken care of. Other than that it would be going to safe mode and run some scans with different programs like Malwarebytes and ComboFix.


Sincerely, Blake.

7 year Computer Hardware + Software Technician.

Operations Technician at a retail company.

Rhythm guitarist for the band Headspill.

:guitar: 


#3 ronno21

ronno21
  • Topic Starter

  • Members
  • 62 posts
  • OFFLINE
  •  
  • Local time:12:05 PM

Posted 12 September 2013 - 11:02 AM

Hi bory504,

 

Thanks for info above...

I am not very good technically with computers - so will wait to see

what a moderator suggests...

 

I can get the Windows discs - but sounds like to get rid of this

virus there is a good chance I will lose everything...

don't know if that includes all systems as well...

 

Again, thanks for info...hope there is a fix (fingers crossed)

 

ronno21



#4 bory504

bory504

  • Members
  • 224 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:New Orleans
  • Local time:12:05 AM

Posted 12 September 2013 - 11:05 AM

I mean there are other ways to get rid of a rogue security like that, but you need a MRI type disk. The only other suggestion that I have is to restore your computer to a previous date before you got the infection. Then you wouldnt lose anything. Im trying to think of the easiest ways for you to fix it.


Sincerely, Blake.

7 year Computer Hardware + Software Technician.

Operations Technician at a retail company.

Rhythm guitarist for the band Headspill.

:guitar: 


#5 ronno21

ronno21
  • Topic Starter

  • Members
  • 62 posts
  • OFFLINE
  •  
  • Local time:12:05 PM

Posted 13 September 2013 - 05:40 PM

thanks bory504,

I will still need help and detailed instructions - will look forward

to further info

 

ronno21



#6 bory504

bory504

  • Members
  • 224 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:New Orleans
  • Local time:12:05 AM

Posted 16 September 2013 - 08:32 AM

Here is a link for system restore if you want to try that first. http://windows.microsoft.com/en-us/windows-vista/turn-back-time-on-your-pc-undo-system-changes-with-system-restore.


Edited by bory504, 16 September 2013 - 08:33 AM.

Sincerely, Blake.

7 year Computer Hardware + Software Technician.

Operations Technician at a retail company.

Rhythm guitarist for the band Headspill.

:guitar: 


#7 ronno21

ronno21
  • Topic Starter

  • Members
  • 62 posts
  • OFFLINE
  •  
  • Local time:12:05 PM

Posted 16 September 2013 - 05:26 PM

Hi bory504,

 

Followed link, article and instructions were good - only thing

I didn't quite follow was "if computer was in safe mode" - what is safe

mode? should you use it when fixing a problem like virus repair.

 

Also, I cannot use the computer - except to start up - as the

Virus takes over - locking every function.

 

I need a moderator to give me instructions on what virus fix is

available - and what steps I take (earlier post suggested using

a jumpstick with anti-ransom ware loaded - and tap F8 immediately

on start up - that is from memory...?

 

I spoke to a tech computer shop - they said they can get rid of

virus - download all personal files - then wipe harddrive clean - then

reload system files - and reload my own personal files - reload windows etc...

cost $150 AUD...

 

So thanks for advice - but I still need input from a Moderator - and some

idea of success rate if I try to fix it with Bleepeping Computer guidance...

 

It is now 5 days since I first listed this Post - I don't know what Protocol

to follow - start a new post? ...As no moderator has responded tro date...

perhaps you could advise if I should re-Post and start again?

 

Thanks for your interest and advice

 

Best regards

 

ronno21



#8 bory504

bory504

  • Members
  • 224 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:New Orleans
  • Local time:12:05 AM

Posted 17 September 2013 - 08:51 AM

You can use safe mode to remove infections. When you first boot the computer keep hitting "F8" and you can choose to boot into safe mode. As far as paying for it to get fixed, $150 for a one time repair to me is expensive. If you are willing to pay that much, go to Geek Squad and get 1 year Tech Support for $200. However it is still unecessary to pay that much. If you boot into safe mode, Id try to run a scan with malwarebytes or try a couple other things that the link said.


Sincerely, Blake.

7 year Computer Hardware + Software Technician.

Operations Technician at a retail company.

Rhythm guitarist for the band Headspill.

:guitar: 


#9 ronno21

ronno21
  • Topic Starter

  • Members
  • 62 posts
  • OFFLINE
  •  
  • Local time:12:05 PM

Posted 18 September 2013 - 04:30 PM

Hi bory504,

Thanks for feedback and advice...

I re-visited the link you gave me...

 

I tried starting the computer - tapping F8 - and selected "start in safe mode"...

I did this twice...

 

The computer goes through various start up functions - then finally

just goes to blank White screen...

 

I know sometimes you have to allow time - but I think the computer is

just being blocked by the malware-ransom-ware...

 

I will leave computer on - going to bed now...

 

-----

One post I read mentioned using an ant-ransomware fix - on a jumpstick...

 

I think I really need help from a moderator who can give me specific instructions

on what to do...

 

I looked and found list of moderators who help on malware - viruses etc (one

had a message that the virus forums were very busy etc...)

 

I first posted my request for help on 12th Sept...

 

I am unsure what the protocol on the Forum is to get some further help for a moderator...

 

Could you please advise on these specific questions...

 

1. Do I close this post and start again?

 

2. Do I contact Admin - see if they can help?

 

3. Do I send a PM to one of the moderators specialising in malware - viruses etc?

 

As I am a pensioner with limited funds - I really don't want to go to Tech service and pay $150...

 

I also want to follow form rules - I just know what the rules are to flag attention

after 7 days and no contact by a moderator (perhaps just so many viruses to help fix)...?

 

Thanks again...I do appreciate you giving good advice - but computer is not

opening for me to run malwares scan - or System Repair...

 

Best regards

 

ronno21



#10 bory504

bory504

  • Members
  • 224 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:New Orleans
  • Local time:12:05 AM

Posted 23 September 2013 - 08:38 AM

Im surprised you cant even access safe mode... not being able to access safe mode could possibly decrease your options of fixing your computer. Those rogue security infections can be pretty tough.. If nobody else posts on this forum with any suggestions on what to do, Id say the next easiest thing to do is to save everything important you have and wipe the system with recovery cds. Sometimes thats the best thing to do anyway.


Sincerely, Blake.

7 year Computer Hardware + Software Technician.

Operations Technician at a retail company.

Rhythm guitarist for the band Headspill.

:guitar: 


#11 ronno21

ronno21
  • Topic Starter

  • Members
  • 62 posts
  • OFFLINE
  •  
  • Local time:12:05 PM

Posted 23 September 2013 - 09:07 AM

Hi bory504,

Thanks for you interest in this problem...

 

The good news is that I looked on the "Virus Section" and found the

virus - plus instructions to remove it - which involved downloading

HitmanPro - Kickstart

 

I followed the instructions - which involved getting a clean USB Jumpstick -

and was able to remove the Virus successfully...

 

The instructions were very good - as I am not very literate with computers

but after a couple of tries everything went perfectly...

 

Just one thing that wasn't made clear in the instructions to use the

HitmanPro - Kickstart...was that I needed to be connected to the

Internet for the anti-ransom-ware program to run the fix successfully...

 

OK...thanks again for you interest - and to the Admin who runs the

Bleeping Computer site - you are all doing a fantastic service for people

like myself who have limited resources to fix our computers for

very little cost - and get very sound advice...

 

I will close this post now - best wishes to all at Bleeping Computer...

 

Best regards

 

ronno21



#12 bory504

bory504

  • Members
  • 224 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:New Orleans
  • Local time:12:05 AM

Posted 23 September 2013 - 09:42 AM

Im glad you found a fix for your issue, and thanks for the information on how you got rid of it. I have different tools and experience so it is kind of hard for me to explain how to manually get rid of that type of infection, espicially if you dont have the kind of tools that I use which are for a corporation I work for and not available to the public. But there are so many ways to fix issues and removed viruses that its not even funny, Ill keep the hitman pro - kickstart in mind for future issues like this. What I will leave you with is to make sure you have a up to date and active antivirus to help prevent this from happening again. Id also recommend staying away form Mcafee and Norton, but thats my personal opinion. Go with Microsoft Security Essentials for a free antivirus, go with Kaspersky for a paid subscription. Have a good one!


Sincerely, Blake.

7 year Computer Hardware + Software Technician.

Operations Technician at a retail company.

Rhythm guitarist for the band Headspill.

:guitar: 





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users