Mal- Ware destroying Start Windows in Safe Mode

[Greadion3]

Fellow nerds of the Internet!
Hear my plea!!!


Recently my computer was attacked by an especially powerful mal-ware program.


I was browsing the Internet, and than suddenly a large white document with no means of exiting <ctrl alt delete does not work, and there is no X to close it> dominates the computer screen.


The document claims to be sent to me by the Australian Federal Police dictating that I am charged with piracy, and if I do not pay a $100 fine within 72 hours a court case will be waged against me.

I contacted the local police and the AFP whom both stated that this is a common hoax, and a mal-ware attack on my computer.


I entered safe mode, both with and without networking and in both cases the computer restarted shortly after safe mode finished loading stopping me from doing anything.

I am currently following this check list < 10 tips for removing stubborn malware | News | TechRadar >of how to fight off a tough mal-ware infection, however gaining access to a computer with windows 7 is proving a difficulty.


Firstly, I need to know if in step 2 in the URL above, that this is the correct registry file I need to replace.

Secondly I need to know ware or if I can download registry files off the Internet for windows seven and burn them onto a disc in windows vista, 8 or XP or Ubuntu.


Any other advice for killing this thing would be greatly appreciated,

 

[marsmimar]

Hello Greadion and welcome to Seven Forums.

I would suggest you not change anything in your registry at this time. You can cause even more problems. Many people recommend using Windows Defender Offline to scan your computer for malware. The required boot disk must be prepared on a computer that is malware free. If you try to create it on the computer that has been infected the scan won't work properly.

http://www.sevenforums.com/tutorials/166445-windows-defender-offline.html

Try running this and see if it helps.

 

[Greadion3]

I am looking into this now, Thank you.

 

[marsmimar]

Basically, what you're going to try to do is create a "rescue disk". A rescue disk is able to boot your computer without actually going into the Windows environment. By not booting into Windows it's less likely for the malware to hide and it's more likely to be found and hopefully erased. Once the Windows Defender Offline disk is created you need to make sure that your computer is configured to boot from the CD/DVD drive as first option. You don't want the computer to boot from the hard drive as first option. The boot sequence can be changed in your BIOS. If you need help with that please provide your system information (make and model of computer, etc.)

Here's another article that gives a bit more info about creating and using rescue disks.

How to Get Rid of a Virus (Even When Your Computer Won't Boot)