computer hijack/locked help

me ^ | 8-16-13 | turbozamboni

[TurboZamboni]

never had this one. an ebay spoof? locked me up and says I need to pay to unlock due to some US code violation claim(BS) in the past I could do a system restore to an earlier date but it won't let me do that either. it bypassed AVG and I cannot get to my malwarebytes program via safe mode either. windows vista home premier is what I have

[TurboZamboni]

any help is appreciated. using another computer for now. downloaded free version of superantispyware to a thumb drive but cannot get it to run

[GeronL]

Can you change the boot order?

and have a linux live disc?

[GeronL]

bump

[TurboZamboni]

not sure how to do the 1st one.

no to the 2nd.

[Army Air Corps]

That is a nasty one and a couple of machines at my workplace suffered that one.

[PieterCasparzen]

Perhaps unplug from the internet for starters.

Physically unplug.

Then reboot.

[John Valentine]

The only thing that worked for me is a total disk wipe and restore; lost EVERYTHING on the hard drive. The problem is with these things is that they are virus/worm combos: you get rid of the worm, the virus downloads it again, get rid of the virus, and it goes back and gets the worm, and they hide multiple places. Maybe there is someone out there who can help, but for me, I had to put the whole computer out of its misery and rebuild. You could try to save you files first to an external drive, but my guess is that the computer won’t let you.

[doc1019]

I have been hit with this several times and the only product that saved me was a portable version of Malwarebytes. Good luck ... took me days to get rid of this (Russian originated) crap.

[Jayster]

http://guides.yoosecurity.com/how-to-remove-microsoft-windows-ukash-virus-that-blocked-pc-asked-for-payment-100-pounds-or-euros/

[Thunder90]

http://www.bleepingcomputer.com/virus-removal/remove-new-zealand-e-crime-lab-ransomware/

The steps for removing the ransomware you have are going to be the same, just ignore the New Zealand part.

You also want to run TDSSKiller, Rkill, and Malwarebytes antimalware in safe mode once you perform the above steps from Bleeping Computer just to make sure you got everything.

[Hardastarboard]

I believe you can start it in safe mode and get past the virus that way. Also - use the other computer to look up on the internet how to remove whatever has your computer by the @$$.

IMHO the death penalty is justified for people who write viruses.

[GeronL]

If you can restart while pushing F8.. I actually think that depends on the computer...

I don’t know if reinstalling Windows or a recovery disc is possible for you

If you can get into the BIOS you can have it boot from the USB and CD/DVD drive BEFORE the harddrive. This would allow you to run a linux live disc and even copy document, video and audio files off before you restart with the recovery disc if that is available.

I’m no expert but that’s off the top of my head.

[Jayster]

http://www.youtube.com/watch?v=VZUTcJZufpQ

[GeronL]

read 12 about saving the files (hopefully all uninfected)

[South40]

Start here

[doc1019]

If the virus is already on your computer, what the heck is that going to do?

[cherry]

my limited knowledge says go in in safe mode too....I don’t even know how I did it before....from there you can run restore or run a quick scan...

[missingwv]

I had this on my desktop - tried to fix with Malaware bytes and it killed my Windows. Now using a laptop because I haven’t had time to work on it and install Ubuntu or some other Linux. Someone else probably has better advice on how to get around this. I was able to create a temporary boot cd to access files with a mini-Windows. See http://www.hirensbootcd.org/ to create a cd.

[GeronL]

if you have another computer available and a CD burner or a USB card most linux O/S will not need to be installed to use for getting the files off before you wipe or reinstall.

[GeronL]

I had it once. The virus wouldn’t let me download Malware Bytes or anything. I hated it.