FBI Ransome virus- Desktop taken over!

Gizmos_dad

As the title says this virus has taken over the laptop.
Initially there was a FBI warning scam message, but that has gone now replaced with the white screen.

I can't go into safe mode either. It keeps going back to the old loop of trying to start as normal mode. Can't start in any safe mode, networking or with command prompt.
When I switch laptop on there is a white screen with the cursor on, nothing seems to work, the ctrl+alt+delete keys are not responding. The only thing I can see is when i hit the manual off button, for a split second the desktop shows as the pc is shutting down. Apart from that i have no control over the machine.

Out of sheer frustration and to a point where i was about to launch the machine out of the window, I thought about doing a format and starting fresh copy of xp. However that only goes so far before a message pops up saying it has shut down windows to stop damage to the system.!!! So I can't even install a fresh copy of xp (i'd rather not though)

Can any1 help... I know there are lots of knowledgeable people out there

TIA.
GD

closed

http://support.kaspersky.com/viruses/rescuedisk burn as a disc image using imgburn, then boot from it, update via ethernet connection, and scan

http://www.bleepingcomputer.com/virus-removal/remove-fbi-monkeypak-ransomware

waddler_8

Kaspersky rescue disk if you cant get into safe mode.

http://support.kaspersky.com/viruses/rescuedisk

atrixblue.-MFR-.

this virus doesnt allow you to download programs or install them use or your disc devices.

do you have a secondary harddrive? you could use a antivirus on that drive, and scan the infected drive with it. that should get rid of it.

Stooby2

You'll have to download the Kasperky stuff on another PC then create a bootable CD ROM with it.

When you boot up (switch on the laptop), keeping pressing the Del key until you get the BIOS screen up. One of the options in there is boot sequence - change it so that CDROM is the first boot option. Press F10 to save the settings. Reboot with the Kaspersky CD in the drive.

Instead of trying to load windows off the hard drive, the laptop will boot from the CD and load a very basic system and this doesn't allow the virus to run. Follow the instructions that come up.

Gizmos_dad

Thanks to all for your help so far.

Did the kaspersky recovery disc, ran it as explained. It found a lot of backdoor trojans, which were disinfected/deleted. However when i try to switch windows back on, it is going round the loop as before, goes to load the window but before it does, the screen momentarily goes blue and it is back to asking how I want to start windows as it suffered a unexpected shutdown (something along those lines).
Still can't get in to safe modes or any other start mode that works.

So it starts in this loop over and over again.
The KRD has not made a difference to the original condition, unless I am missing some important step.

GD

closed

What happens when you try the reinstall, from the beginning, you boot from the cd, then?

Do you need any data recovering

Stooby2

Try a google search on "FBI Ransomeware removal"

There are numerous sites with varying methods of removing it.

If you really get stuck and all else has failed, you can use your Windows XP disc (boot up with it) to delete the entire windows DOS partition, then recreate it. That will then allow you to do a fresh install.

waddler_8

Gizmos_dad wrote: »

However when i try to switch windows back on, it is going round the loop as before, goes to load the window but before it does, the screen momentarily goes blue and it is back to asking how I want to start windows as it suffered a unexpected shutdown (something along those lines).

Tap F8 on startup and when you reach the Advanced boot options, choose Disable automatic restart on system failure. Then when it reboots you'll have time to read the error message in full. Post the STOP code information.

Gizmos_dad wrote: »

So it starts in this loop over and over again.
The KRD has not made a difference to the original condition, unless I am missing some important step.

It is slightly different now as before it went to a white screen, now it's BSoD'ing.

If you can, post the report if you have it - if not create one and I'll PM you my email address so you can send me it.

http://support.kaspersky.com/viruses/rescuedisk/all?qid=208282388
http://support.kaspersky.com/viruses/rescuedisk/all?qid=208286086

Gizmos_dad

closed wrote: »

What happens when you try the reinstall, from the beginning, you boot from the cd, then?

Do you need any data recovering

When I try the xp reinstall disc, it goes only so far then stops with blue screen and says it has stopped the windows to prevent damage to the op system.
I did need some photos recovering, but if that's not possible I will be content with just a working machine

"If you really get stuck and all else has failed, you can use your Windows XP disc (boot up with it) to delete the entire windows DOS partition, then recreate it. That will then allow you to do a fresh install. "
Not sure how I would go about doing that.

closed

this might enable you to get your files back, it depends what you did with the attempt at reinstalling windows.

http://www.paragon-software.com/home/rk-express/download_old.html

same procedure as creating the kaspersky disc, ie disc image from imgburn

failing that, you could put the hard disk into a usb caddy, attach to another machine, and use recuva deep scan to see if you can get your files back

Could you elaborate from switch on what happens on screen when trying to do the windows install