Help, I'm having problems with my parent's vista system. It was infected by a virus around 2012 (FBI i believe) Ransomware, at the time I was deployed overseas and couldn't help before their PC locked up. they lost all their data with no backups. I am wishing to recover all data if possible, So far I've started the system and looked at it... The entire computer is functional but slow, the programs that were on it are frozen and hidden. No ICONs or startbar. Desktop Screen is black and the only thing that is on the screen is the mouse. I've enter the taskbar and was able to start a new task of explorer.exe and that made the startbar and trashcan appear but that is about it, there were no programs and it seems like the login is a user account (no access to computer functions, Devmgmt.msc, Compmgmt.msc, Event Log, Control Panel) CMD is accessible and Task Manager. Processes that are running are csrss.exe, explorer.exe, rundll32.exe taskmgr.exe and winlogin.exe. I know thats not enough information to give reasonable solutions and I do believe I could do a system restore. But i would like to see if anybody here and any success on recovering data or removing the virus before I restore.
Thank you and appreciate any ideas or advice.
Edited by hamluis, 22 June 2015 - 03:13 PM.
Moved from Vista to Am I Infected - Hamluis.