Laptop locked by scammers asking for ransom

July 18, 2013 at 03:01:03
Specs: Windows XP
my laptop has been locked/blocked by scammers demanding £100 for its release.
if i try to open in safe mode the computer shows my desktop and then reverts to a silver screen and nothing else happens
any help would be appreciated

See More: Laptop locked by scammers asking for ransom

Report •

#1
July 18, 2013 at 03:10:18
Run HitmanPro Kickstart. Note: You will need a USB flash/thumb/pen drive to use this method.
Once you have created a HitmanPro.Kickstart USB flash drive you can use it to rescue a ransomed PC. For that you must first make sure that the ransomed PC is powered off.
Insert the HitmanPro.Kickstart USB flash drive into a USB port of the ransomed PC and turn on the power of the PC. During the startup of the PC, enter the Boot Menu of your BIOS (press either F8, F11 or F12 depending on the manufacturer of your BIOS) and select the HitmanPro.Kickstart USB flash drive.

Copy & Paste the contents of the scan log please.

http://www.surfright.nl/en/kickstart
Download 32-bit
http://dl.surfright.nl/HitmanPro.exe
Download 64-bit
http://dl.surfright.nl/HitmanPro_x6...


Report •

#2
July 18, 2013 at 03:37:34
Hi poldark,

If the virus program executes automatically in safe mode as well, use RKill to terminate known malware processes so that you can use a virus removal software to perform scan on the system.

If you do not have any antivirus installed on the system, you may use Malwarebytes which can be used to remove viruses.

Please click the link mentioned below for Malwarebytes:

http://www.filehippo.com/download_m...

Perform complete scan and remove the viruses.

Let me know if that helps.

Thanks & Regards
Manshu S
#iworkfordell


Report •

#3
July 18, 2013 at 05:45:53
john w i appreciate your advice but as a senior citizen with little computer knowledge i would find it difficult to follow your instructions. I have a pen drive? with norton power eraser. is it possible this might work.
thanks

Report •

Related Solutions

#4
July 18, 2013 at 08:28:39
Take it to a known good repair shop. You don't want to have more damage than already exists.

Answers are only as good as the information you provide.
How to properly post a question:
Sorry no tech support via PM's


Report •

#5
July 18, 2013 at 16:08:03
"would find it difficult to follow your instructions"
Another way, get a friend, neighbor or relative who is computer savvy to help.

Report •

#6
July 18, 2013 at 18:08:58
Even though it won't boot to regular safe mode, it may boot to command prompt. From there you can try a system restore using a date from before you had the problem. Here's some info:

http://support.microsoft.com/kb/304449


Report •

#7
July 19, 2013 at 03:08:26
daveincaps does the same proceedure apply to windows vista
thanks

Report •

#8
July 19, 2013 at 03:29:57
How to start the System Restore tool by using the safe mode option with the Command prompt in Windows vista
http://is.gd/k0trcy

http://windows.microsoft.com/en-au/...


Report •

#9
July 23, 2013 at 08:11:12
Hi poldark,

Before performing the scan on the system, virus process needs to be terminated.

Please terminate the process using Rkill in safe mode. Click the link mentioned below for Rkill:

http://www.bleepingcomputer.com/dow...

If the download does not begin automatically, click the hyperlink "Click here".

Note: You may download the application in the pen drive using a different computer.

Once the application terminates the known virus process, perform scan using Norton or the malwarebytes mentioned in my previous post.

Thanks & Regards
Manshu S
#iworkfordell


Report •

Ask Question