Solved virus locks computer

[peire]

ok, my artners sister phoned me last week about her notebook laptop saying it wont go to her desktop and only shows a metropolitan police thing saying illigal activity saying you have been downloading illigal music pay £50 to get you computer unlocked, and now it just loads up to a white screen saying....

"please wait while the connection is beeing established" and something in another language underneath that

i read that its a virus and scam to get money out of people so i backed up what she wanted to keep and then tried to boot into safe mode and that just loads to a white screen and every other option accept 1 option that said repair your computer so whent there and tried to do a re install of windows but i get a error message on the second step of installing windows i cant tell you the error as i cant get into it now as it keeps booting upto startup repaire...

done a start up repair and the root cause was...

root cause found
the operating system version is incompatible with startup repair


i even tried using this trojen killer but get error when trying to run it http://remove-malwares.blogspot.co.u...ow-to-fix.html

what i normaly do when i access the files on the computer is start it up then press F8 and then select repair computer and go on command prompt and type notepad then enter then notepad starts up click file/open and then change it to all from .txt and i can access files on the computer but i cant now as it keeps booting to startup repair

any ideas thanks

 

[Jacee]

See the article on this particular "Ransomware" Encyclopedia entry: Trojan:Win32/Ransirac.G - Learn more about malware - Microsoft Malware Protection Center

 

[Jacee]

Additional information ThreatExpert Report

 

[peire]

thanks just looking at these now, im still trying to get F8 to boot but it still boots to recovery menu so i cant use the software to get rid of the virus

 

[Jacee]

I don't know if you can get RKill to the infected computer, but you can try via "Clean" flash drive ...this kills the rogue/fake processes from running, so that you can download necessary tools for removal.
The tool should run on all 32bit versions of current Windows (XP, Vista, Windows 7). VirusTotal shows
that only a few AVs flag it as anything

Download and Run RKill
Please download RKill by Grinler from one of the 4 links below and save it to your desktop.
Link 1
Link 2
Link 3
Link 4

• Before we begin, you should disable your anti-malware softwares you have installed so they do not interfere RKill running as some anti-malware softwares detect RKill as malicious. Please refer to this page if you are not sure how.
• Double-click on Rkill on your desktop to run it. (If you are using Windows Vista, please right-click on it and select Run As Administrator)
• A black screen will appear and then disappear. Please do not worry, that is normal. This means that the tool has been successfully executed.
• If nothing happens or if the tool does not run, please let me know in your next reply

 

[peire]

thanks, im using a flash drive to put these programs on but i normaly access the flash drive through the F8 button but i cant get the F8 options up on the screen as it just boots to the recovery menu so i press f12 to get to the boot manager i see my usb flash drive so i click enter then this comes up

Remove disks or other media
press any key to restart


so i remove the flash drive and press enter and the computer restarts straight to recovery menu again


so how am i going to access the files on the usb flash drive ??

edit: found how to access the flash drive

 

[Jacee]

Have you been able to get into the infected computer?

 

[peire]

I can get in but cant run any programs to get rid do Going to re install Windows via usb

 

[peire]

This issue has been solved I re installed windows using a USB stick