FBI Ransom Malware - Help

[Deleted]

My daughters PC (windows 8) has been infected with this ransom Malware - blog.yoocare.com/pc-locked-fbi-moneypak-virus-malware-removal-guide/ 

My problem is that I don't know how to enter Windows 8 in safe mode - the F8 key simply doesn't invoke the safe start up. I found a USB virus-checker, but the malware starts so fast it doesn't have a chance to run.

One thought is to restore the OS from the safe mode, but I have no idea how to do this, or simply buy a new version of Windows and install it from a USB or CD.

A second thought is to run Linux through a USB and try to clean it that way - not sure if that is possible

Any thoughts would be gratefully received. I haven't used a PC in years

Nick

[revoke]

I would download a retail version windows 8 and install via usb using the 'Rufus' tool,

Then make sure you download Malwarebytes anti-malware and uninstall mcafee.(guessed mcafee as its been installed on 95% of PCs I've worked on)

Also,
What is the make and model # of the PC?
I'll see if I can find something,

Good luck!

[DiscoDes]

It could be F10 or another function Key you need to press to enter safe mode, it's not always F8 so try some of the others I'm pretty sure you'll find one that works.

[Deleted]

Nov 6, 2015 9:55:34 GMT revoke said:

I would download a retail version windows 8 and install via usb using the 'Rufus' tool,

Then make sure you download Malwarebytes anti-malware and uninstall mcafee.(guessed mcafee as its been installed on 95% of PCs I've worked on)

Also,
What is the make and model # of the PC?
I'll see if I can find something,

Good luck!

Thanks revoke. It is a Samsung laptop. NP350. 

Will Rufus install from the USB at the boot up? I can not do anything on the PC once it has booted.

Thank you

[Deleted]

Nov 6, 2015 9:56:11 GMT DiscoDes said:

It could be F10 or another function Key you need to press to enter safe mode, it's not always F8 so try some of the others I'm pretty sure you'll find one that works.

I have hit every function key to get into safe mode. From what I have read Windows 8 is not safe mode friendly!

Thanks though

Nick

[revoke]

@kopiert Rufus will install at boot up when you change your BIOS or your bootup method to USB

And ill have a look, see what I can find, cheers !

edit: have you tried the F4 key when booting up?

[Deleted]

revoke

Here comes the stupid question.......

How do I get into the BIOS?

[Deleted]

Nov 6, 2015 10:28:23 GMT revoke said:

@kopiert Rufus will install at boot up when you change your BIOS or your bootup method to USB

And ill have a look, see what I can find, cheers !

edit: have you tried the F4 key when booting up?

F4 - yes

I have systematically tried every F key - holding down, one press and several presses.

The machine is totally and utterly ******.

[revoke]

@kopiert haha not a stupid question mate mostly all PCs have a different BIOS key.

I believe its F2 for yours but you've tried every F key? I see some samsung laptop users have an issue with entering BIOS.

Try spamming F2 as soon as you press the On button, I believe there is an option holding most people back called 'Secure Boot', if you can, disable that when in BIOS then switch to legacy BIOS.
I'll try find a quick tutorial for you.

[Deleted]

Nov 6, 2015 10:47:27 GMT revoke said:

@kopiert haha not a stupid question mate mostly all PCs have a different BIOS key.

I believe its F2 for yours but you've tried every F key? I see some samsung laptop users have an issue with entering BIOS.

Try spamming F2 as soon as you press the On button, I believe there is an option holding most people back called 'Secure Boot', if you can, disable that when in BIOS then switch to legacy BIOS.
I'll try find a quick tutorial for you.

Thanks I really appreciate your help

I will have a go over the weekend

Nick

[revoke]

@kopiert No worries mate,

If you can't get it to work PM me and we'll get it sorted!

Best of luck pal!

[chrisjw]

Try the delete button for safe mode.



"Life...........is just a bowl of tricks!!!!!!"

[sydsut]

When stuck like this create an error at switch on by holding down multiple keys. This should then let you access the bios.

[gill2009]

Nov 6, 2015 11:01:26 GMT revoke said:

@kopiert No worries mate,

If you can't get it to work PM me and we'll get it sorted!

Best of luck pal!

You are a lovely, helpful man revoke 

[phatfil]

ransomware is a bugger and your puter is now best wiped clean and reinstalled, im afraid you cant trust the install image on a hidden partition on your HD now either ;( and if its an encryption jobbie all your files are F*cked, dont try to revive them your more likely to spread the malware to other puters..

the seller of your puter or microshaft should send you a reinstall dvd for a small? admin fee, unless its sony

if F2 ist getting u into the bios try alt + F2 and ctrl + F2 .. i feel for you..

this ransom ware plague is a Very good reason for you to back up all your data files regularly to an external safe source ..
and these days 64gb usb sticks are cheap as chips so buy some and save all your important files.. BE SAFE!!

and remember to run regular scans on your puters, having an av program installed and sat monitoring IS NOT ENOUGH PROTECTION, consider the AV monitor akin to a nightclub doorman able to spot obvious threats but pants at spotting hidden and disguised threats to catch those you need to run regular scans..