Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

ICE Ransomware Locked PC - Safe Mode shuts down PC


  • Please log in to reply
5 replies to this topic

#1 2013again!

2013again!

  • Members
  • 34 posts
  • OFFLINE
  •  
  • Local time:07:00 AM

Posted 04 April 2014 - 08:37 PM

I am running Windows 7.

 

I have the ICE Ransomware screen locked.

 

It also will not let me run in Safe Mode, nor Safe Mode With Command Prompt.

 

Any help is appreciated!

 



BC AdBot (Login to Remove)

 


#2 Netghost56

Netghost56

  • Members
  • 973 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Texas
  • Local time:07:00 AM

Posted 04 April 2014 - 09:01 PM

I use Hitman. Load it on USB, boot from USB (make sure your connected to the internet). It will scan and tell you which files are infected. Look for the one thats set to run after boot. Write down the file name as well as the location (Probably be in C:\users\USERNAME\App Data\Roaming) Then go into Startup Repair, select Other Options, Command Prompt, navigate to the file's folder, then rename the file's extension to VRS. (code is 'ren C:\*\*\*\FILE.EXE C:\*\*\*\FILE.EXE.VRS' where * is the path you have written down). Then reboot and run Malwarebytes or other AV/spyware application.

 

Typed that from memory, so I may have left out a step :scratchhead:



#3 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:10:00 PM

Posted 04 April 2014 - 09:05 PM

Hello and sorry to hear of your problems -

 

Please follow the instructions in THIS PREP GUIDE starting at Step #6.

NOTE - If you cannot complete a step, skip it and continue.

 

If the proper DDS logs can created, then make a NEW TOPIC and post it to =>
Virus, Trojan, Spyware, and Malware Removal Logs area - Not back here

If you are not able to create logs, then still post your problem so it can be attended to.

 

They can use the correct tools to find and fix the program that we can not use in this area.

 

If HelpBot replies, please follow its Step #1 and the team will be notified.

 

Tell us when you post the new topic so we can close this one and only let the Experts fix your problem.



#4 2013again!

2013again!
  • Topic Starter

  • Members
  • 34 posts
  • OFFLINE
  •  
  • Local time:07:00 AM

Posted 04 April 2014 - 09:15 PM

Thanks!

 

I think I should go to the other subforum, since I can't create the DDS log (screen is locked)



#5 2013again!

2013again!
  • Topic Starter

  • Members
  • 34 posts
  • OFFLINE
  •  
  • Local time:07:00 AM

Posted 04 April 2014 - 09:20 PM

I am running Windows 7.
 
I have the ICE Ransomware  - screen is locked.
It will not let me run in Safe Mode, nor Safe Mode With Command Prompt.
 
It got past MSE as well as WinPatrol!
 
Any help is appreciated!
 
Mod Edit:  Merged post from MRL (no logs) - Hamluis.
 
 
New Topic posted in "Virus, Trojan, Spyware, and Malware Removal Logs" subforum.
 

 

Edited by hamluis, 05 April 2014 - 08:38 AM.


#6 2013again!

2013again!
  • Topic Starter

  • Members
  • 34 posts
  • OFFLINE
  •  
  • Local time:07:00 AM

Posted 04 April 2014 - 10:09 PM

UPDATE: Ran HitmanPro Kickstart from a USB and was able to get my desktop back,
after a couple attempts.

Sorry about my impulsive posting!

I will post if anything unsual occurs after this point.

Unless there is any further advice....?

Thanks!

Edited by 2013again!, 04 April 2014 - 10:17 PM.





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users