White screen virus

Discussion in 'Malware Help (A Specialist Will Reply)' started by Mdes27702, Mar 2, 2013.

  1. Mdes27702

    Mdes27702 Private E-2

    I've read other posts about this virus but can't seem to figure out how to fix. When I get to my desktop- that is when the white screen comes up...even in safe mode....where do I start? Thanks in advance for any help!
     
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Welcome to Major Geeks!

    What version of Windows are you running?

    Also are you saying that you cannot run anything at all? Like not even Task Manager can be opened?
     
  3. Mdes27702

    Mdes27702 Private E-2

    Thank you for the welcome!
    I am running Windows 7
    Initially I could not open task manager..
    I had followed instrutions on another thread here- to download 'fixlist' to a flash drive, reboot, - and was able to get to task manager in safe mode..the only programs that seemed suspicious - were disabled. I rebooted-and- back to white screen. I tried 2-3 times - rebooting...white screen every time..
     
  4. Mdes27702

    Mdes27702 Private E-2

    Update I was able to get to Task Manager.. now.. I get the FBI screen asking for $. . I can no longer . The FBI screen is blockin The FBI screen is blocking me..
     
  5. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You should not be following instructions given to someone else. All instructions are given based on an individual user's set of problems and what version of Windows they are using. They only thing that would apply to you would be the scan with FRST but that also is based on which version of Windows is being used. Now that I know you have Win 7, the below is where you need to start.

    Please do the below so that we can boot to System Recovery Options to run a scan.

    For 32-bit (x86) systems download Farbar Recovery Scan Tool and save it to a flash drive.
    For 64-bit (x64) systems download Farbar Recovery Scan Tool x64 and save it to a flash drive.

    Plug the flashdrive into the infected PC.

    Enter System Recovery Options from the Advanced Boot Options:
    • Restart the computer.
    • As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.
    • Use the arrow keys to select the Repair your computer menu item.
    • Select US as the keyboard language settings, and then click Next.
    • Select the operating system you want to repair, and then click Next.
    • Select your user account an click Next.

    On the System Recovery Options menu you will get the following options:
    • Select Command Prompt
    • In the command window type in notepad and press Enter.
    • The notepad opens. Under File menu select Open.
    • Select "Computer" and find your flash drive letter and close the notepad.
    • In the command window type e:\frst.exe (for x64 bit version type e:\frst64) and press Enter
      Note: Replace letter e with the drive letter of your flash drive.
    • The tool will start to run.
    • When the tool opens click Yes to disclaimer.
    • Press Scan button.
    • It will make a log (FRST.txt) on the flash drive. Please attach this file to your next reply. (See: How to attach)
     
  6. Mdes27702

    Mdes27702 Private E-2

    in Notepad..the drive number apparently was incorrect. I ended up restarting the computer to rerun repair program .w hen the computer rebooted I'm seem to be frozen at the select language screen ..?? Can i run the repair program on the flash drive n.from task manager in safe mode? .
     
  7. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Okay you are quickly running out of options. You cannot boot in safe mode nor in normal mode. And you also cannot get to the Recovery Environment that is built into Windows 7 so that we can run FRST. This may be due to your MBR being infected.

    Let's see if you can run the below CD.

    Try the below procedure from Kaspersky

    The Kaspersky WindowsUnlocker utility to fight ransom malware
     
  8. Mdes27702

    Mdes27702 Private E-2

    open. Can I ru your origina repair softwar in safe mod mode
     
  9. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    No. FRST must be run from the Recovery Environment as given in the instructions.
     
  10. Mdes27702

    Mdes27702 Private E-2

    The program's been running for 24 hrs.. Is that normal?.
     
  11. Mdes27702

    Mdes27702 Private E-2

    Sorry for all the typos..
     
  12. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Nothing I gave you should take that long, but what program is running for 24 hrs? FRST? How are you running it? Earlier you said you could not get to the Recovery Enviroment and that you were stuck at the language screen.
     
  13. Mdes27702

    Mdes27702 Private E-2

    I was stuck in that screen but when I went to run the Kapersky file...that worked and ran-for over 24 hrs.......I just checked it out and it has now come to the end of the program...I have to go see what the rest of the process is...get back to you soon...
     
  14. Mdes27702

    Mdes27702 Private E-2

    The Kaspersky repair worked! It DID take 24 hrs to run completely..at least 24 hrs! What do you recommend now - is there any other things I should do or check? Thank you so much for helping a non-computer binary inept person such as myself :) !
     
  15. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You're welcome. Glad to hear it work.

    If you want to really be sure all of your malware is removed and not just what you called the "white screen virus", then I suggest you work thru the below.

    READ & RUN ME FIRST. Malware Removal Guide
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds