metropolitan british pice ransomware

lazaruss · Dec 16, 2014

Guys

I have this ransomware on my windows 8 machine which pops up after logon and stops you from doing anything else as I can't take focus away from the window. What I would normally do is restart in safemode and run malware removal tools from there. The problem is my machine won't go into safe mode at all. After restarting the machine while holding shift and selecting the option to restart in safemode it restarts but when it trys loading windows it reboots again, so there's no way for me to get into safe mode at all. I have never seen an instance where safemode doesn't work so it must be an issue with the boot sector maybe? Any ideas? I'm just going to take the hard drive and scan it externaly but would like to know what could bw wrong with safe mode??

TimW · Dec 16, 2014

The ransomware may have prohibited you from running in safe mode. Typically, in the case of ransomware, the only course is a reinstall.

chaslang · Dec 17, 2014

TimW said: ↑

The ransomware may have prohibited you from running in safe mode. Typically, in the case of ransomware, the only course is a reinstall.
Click to expand...

Well Tim, you could try FRST to see if you can locate the startups that are causing the boot up problems, but it is true that if the ransomware has truly taken hold that files may be encrypted and lost now. If that is the case then a yes a clean reinstall from scratch is required.

TimW · Dec 17, 2014

Please do the below so that we can boot to System Recovery Options to run a scan. There will be two options to choose from. One if you do not have your Windows 7 boot DVD and another when you have your DVD.

For x32 (x86) bit systems download Farbar Recovery Scan Tool and save it to a flash drive.
For x64 bit systems download Farbar Recovery Scan Tool x64 and save it to a flash drive.

Plug the flashdrive into the infected PC.

Option1: Enter System Recovery Options from the Advanced Boot Options:

Restart the computer.

As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.

Use the arrow keys to select the Repair your computer menu item.

Select US as the keyboard language settings, and then click Next.

Select the operating system you want to repair, and then click Next.

Select your user account an click Next.

Option2: Enter System Recovery Options by using Windows installation disc:

Insert the installation disc.

Restart your computer.

If prompted, press any key to start Windows from the installation disc. If your computer is not configured to start from a CD or DVD, check your BIOS settings.

Click Repair your computer.

Select US as the keyboard language settings, and then click Next.

Select the operating system you want to repair, and then click Next.

Select your user account and click Next.

On the System Recovery Options menu you will get the following options:

Startup Repair
System Restore
Windows Complete PC Restore
Windows Memory Diagnostic Tool
Command Prompt
Click to expand...

Select Command Prompt

In the command window type in notepad and press Enter.

The notepad opens. Under File menu select Open.

Select "Computer" and find your flash drive letter and close the notepad.

In the command window type e:\frst.exe (for x64 bit version type e:\frst64) and press Enter
Note: Replace letter e with the drive letter of your flash drive.

The tool will start to run.

When the tool opens click Yes to disclaimer.

Press Scan button.

It will make a log (FRST.txt) on the flash drive. Please attach this file to your next reply. (See: How to attach)

Log in or Sign up

metropolitan british pice ransomware

lazaruss Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

Log in or Sign up

metropolitan british pice ransomware

lazaruss Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

Useful Searches