FBI Locked computer scam virus

My daughter's hp dv5 laptop, running vista, has been infected by this ramsomware. I logged on in safe mode w/networking and dowloaded malwarebytes and it located 14 issues and upon restart the lockscreen was still there. I tried norton which was already on the computer and it found 9 minor issues and it's still there. I posted on the vista forum and it was recommended going to a restore point before the infection, which I'm going to try as soon as malwarebytes finishes another scan. Anyone here any successful experience with this virus?
Thanks

Malwarebytes found nothing, doing restore.

try hitman kickstart...

HitmanPro.Kickstart - Anti ransomware, politievirus, bundestrojaner, Reveton, BKA, GVU - SurfRight

ok good, bookmark kickstart for next time. kids huh!

If all you did is use a restore point to solve your problem the infection is probably still in your computer.

What layback is saying is, go ahead and do the scans anyways to be safe. I know its what I would do in your situation, especially since it is your daughter's computer.

Petey7 you are correct. I should of been more to the point.
Thanks.

revmike,

What Bear is saying is correct. A Restore Point may still contain the infection.

On Post #2 boohbah suggested the use of HitmanPro.KickStart
That is a good choice since the program targets this particular ransomware. It removes the infection and allows you to access your computer to scan it for malware.

You need to know if the infected computer is running a 32-bit or 64-bit ststem. See Note at the bottom of these instructions.

Download HitmanPro.Kickstart:
HitmanPro.Kickstart - Anti ransomware, politievirus, bundestrojaner, Reveton, BKA, GVU - SurfRight

Next, you need to load a USB flash drive with HitmanPro Kickstart as follows...

Use a clean (non-infected) computer, and download HitmanPro from the link above.

When HitmanPro opens, click the Kick icon at the bottom of the screen.

Plug the USB flash drive into the clean computer and follow the instructions from the first video on the website.

Next, plug in the USB drive just created into the infected machine. The machine needs to be in a shutdown state at this point.

>> Start the infected computer.

When the computer is starting, press the key (on some machines its F10 or F2) that brings up the Boot Menu. From there, select to boot from the USB drive.
Info: How to Remove Ransomware - Select Real Security
Save the changes, and press on.

Next, perform a system scan with HitmanPro Kickstart as seen in the second video.

After HitmanPro Kickstart is done, boot into Windows.


~~~~
To remove the malicious files of the ransomware...

Download RogueKiller:
Tlcharger RogueKiller (Site Officiel)

When you get to the website, go to where it says:
(Download link) Lien de téléchargement:

Select the version that applies to your system. (See Note)
Click the dark-blue button to download.
Save to the Desktop.

Close all windows and browsers.
Right-click and select: Run as Administrator

At the program console, wait for the prescan to finish. (Under Status, it says: Prescan finished.)
press: SCAN

When done, a report opens on the Desktop: RKreport.txt
Please provide the RKreport.txt (Mode: Scan) in your reply.


Note:
To find out if the system is 32 or 64 bit:
Click: Start
Type System in the Start Search box
Click System in the Programs list.

The operating system is displayed as follows:
For a 64-bit version operating system, under System > System type, it shows:
64-bit Operating System

For a 32-bit version operating system, under System > System type, it shows:
32-bit Operating System

revmike said:

Thanks will do. I don't know what she's going to when she's in college in a few months 5 hours away.

sounds like you are counting the days and minutes until she goes . i fully emphathise i have a 19 yr old daughter who goes to university in 7 months, five days and three hours.