UKASH virus

paulwilliams · 09 Jun 2012

Any option I select it comes back to the black screen?

paulwilliams · 09 Jun 2012

No every thing I try it keeps coming back to the same black screen "we apologize for the inconvenience bla bla ... non of the option work it just jumps right back to this black screen. I don't have a xp disk so I can't recover anything that way. Has this virus taken the lot out. My files were there because when I turned the laptop off when I had the UKASH virus I could see them for a split second.

Borg 386 · 09 Jun 2012

You may wish to try a Boot AV rescue disk. There may be remnants of the virus left, or it may have taken some of the files with it/corrupted them.

Being that you have no recovery CD, you may have to access the restore partition (provided you have one) and reset it to factory settings. Be aware that if you must go this route, it will erase all your personal files, restoring it back to it's original state when you first booted it.

For now, try running one of these:

What is Windows Defender Offline?

You can find several AV Rescue Boot disks here.

Free Bootable AntiVirus Rescue CDs Download List

Note: Kaspersky has caused problems in the past with Windows 7, if they have remedied this problem, I do not know, but you should probably try some of the other disks before using that one.

Please post back if you are able to restore a working Windows environment.

paulwilliams · 09 Jun 2012

I just ran defender I downloaded it onto a usb stick. I think I have the avg one on disk, but will this do the job, might I be better off getting a copy of XP from somewhere, I take it that it would have recovery options on it.

Paul

paulwilliams · 09 Jun 2012

sorry I went windows 7

Jacee · 11 Jun 2012

You might try The RannohDecryptor utility
Utility for decrypting files affected by Trojan-Ransom.Win32.Rannoh infection

martmart123 · 30 Jul 2012

Hi there people,
I had the Ukash screen pop up earlier and lock me out.
I realise this is slightly off-topic but thought id post in here anyway to avoid making a whole new Ukash thread.

Been doing a few things to get rid.. Last few steps were

running RKill from bleeping computers

Then Malware Bytes (which tends to find 3 Objects each time)

So, after that it asks me to restart and i get back into my desktop. The Main reason im posting is because once i get in spybot asks me if i want to allow reg changes "userinit" "winlogon" and some weirder looking ones which i haven't written down/can't remember.

Should i accept or deny these changes? They could well be the virus re-entering or also it could be the virus getting booted out. If anyone could shed any light that would be great.

Thanks in Advance.