New
#31
ok kool
my laptop is running very well.
mite set up times for a scan to keep it protected
ok kool
my laptop is running very well.
mite set up times for a scan to keep it protected
I had the same problem on my laptop (running XP) yesterday.
This is how I easily fixed it:
1) Rebooted the laptop, pressing F8 contantly until you get the black screen.
2) Select "Safe Mode with Networking" (I'm on a network)
3) Download and run Malwarebytes from here
http://download.cnet.com/Malwarebytes-Anti-Malware/3001-8022_4-10804572.html?spi=03fd6a770ceff3c413a7d4694e38f2a9
4) It found 7 problems (including Trojans) which it fixed
All is now OK!
Thanks for reporting what worked, Stuart. I had suggested that for Matt in my first post.
Hello, please help me. I followed through this thread and did everything as directed and my computer is still locked. I am somewhat tech savvy, my computer is covered by f-secure. Thanks , Susan
What were the results of Malwarebytes run in Safe Mode, and Windows Defender run from boot CD?
Then work through the other steps if necessary in the link in my signature below to Fix Unbootable Win7
Hi, first time on the forum. A few of my good friends have had the above ransomeware virus on their 7 and (older) Vista PCs. Started in "Safe MOde" and tried the simple winlogon fix - no joy. Went further in to the registry to look at :
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Run
and "above" \RunOnce
Each had been seperately used to start an unknown program on various PCs. No point in naming it as the name changes every time. Main point is that if you see some peculiar *.exe file quoted in "*\run" or "*\RunOnce", then be suspicious. Simple thing to do is to modify the string by putting a # at the beginning of the suspicious string. This basically says to Windows "ignore this". That way, you won't delete something you really need. Restart your PC and see what has happened. BTW, if any string refers to WMP*, this is a Media Player reference, so is OK. Additionaly, if you find a very oddly named folder in the %system%root, or in %system%root\ProgramData areas, take a look inside when in Safe Mode. There will almost certainly be two HTML files, one of which will be the main body of the lockout screen on normal boot, i.e. "Metropolitan Police" etc.
DELETE THIS ENTIRE FOLDER.
After this, run WDO, AND Malware Bytes - GREAT ADVICE FROM OTHERS ABOVE.