Safe mode isn't working to remove monpeypak virus? PLEASE HELP!?

Question

I've had this virus before and I was successfully able to get rid of it in safe mode (with command prompts). It's impossible to get into my computer now though. Now I can choose safe mode, log in, and then the screen goes straight to the virus or plain black and won't allow me to do anything depending what safe mode I'm in. I need some help please! I have exams next week and I need my laptop!!!

Answer 1

Hello mollycocolucky ,



With safe mode disabled, you are going to need access to another computer to download

Kaspersky Rescue Disk 10 to and will need a software to burn this file as a ISO

Download

http://support.kaspersky.com/4162



Instructions on how to burn this to a CD/DVD or USB device

CD/DVD

http://support.kaspersky.com/8093

USB

http://support.kaspersky.com/8092



Free software to use to burn this

http://www.techmixer.com/free-windows-cd-dvd-burner-software-list-download/

NOTE: With ANY free software, always do a Custom install as some software will install additional software that you really don't want or need



Further information can be found here

http://blog.malwarebytes.org/intelligence/2012/12/ransomware/



If your current security solution let this infection through, you might please consider purchasing the FULL version of Malwarebytes Anti-Malware for additional protection.

http://www.malwarebytes.org/products/malwarebytes_pro/

Answer 2

2

Answer 3

These procedures should remove any type of ransomware, but for future reference be aware that the West Yorkshire Police variant encrypts some files. That requires a different approach, which involves removal and decryption.



If your Safe Mode options are disabled...



Try this:



Use a working computer to download the trial version of HitmanPro. You then run the program, but instead of using it to scan, you use the Kickstart feature to burn HitmanPro to a flash drive. You then boot your infected computer to the flash drive and scan.



This link takes you to the HitmanPro download:



http://www.surfright.nl/en



This video shows the creation and use of the Kickstart flash drive:



http://www.youtube.com/watch?v=RW3PG0YDy3Y





If you have no luck with that...



There are simpler fixes for SOME of the ransomware infections, but this should work with all forms of ransomware...even those that disable every Safe Mode option, plus Regedit and Task Manager, etc....



Use a working computer to download and burn the Kaspersky Rescue Disk 10 .ISO file. Burn the file to a CD or DVD or flash drive, then use it to boot your infected computer. Once at the desktop, use the WindowsUnlocker feature.



This link is for the download of Kaspersky Rescue Disk 10. It's primarily designed to boot and disinfect computers that have been rendered unbootable due to an infection, but it's fine to use it on an uninfected machine. The .ISO file is 262MB in size, and it's easier to burn it to a CD or DVD than a flash drive, but the link does includes instructions on how to burn the file to a flash drive (USB device):



http://support.kaspersky.com/viruses/rescuedisk



If you don't have burning software installed on the working computer, download and install Ashampoo Burning Studio 6. It's free, and I recommend it...I use it myself:



https://www.ashampoo.com/uk/gbp/pin/0710/0-Offline/Ashampoo-Burning-Studio-6



Start up Ashampoo and select Create/Burn Disc Images...then select Burn a CD/DVD/Blu-ray Disc from a Disc Image.



Burn the CD or DVD, and use it to boot your faulty computer. You may need to enter your BIOS (Setup), and change the boot sequence to boot from CD first, but this isn't always necessary.



As already stated...when the CD or DVD or flash drive has reached a desktop, select the WindowsUnlocker feature. Once your computer is unlocked, you can either update tha virus definitions for the rescue disk and use it to scan your computer, or scan using your currently installed security product, or download a free product to perform a scan.



This WindowsUnlocker explanation and video link should also prove useful:



http://support.kaspersky.com/faq/?qid=208285998



http://www.youtube.com/watch?v=C5hvSlrOUlE



Hope this helps.