Member Avatar for ember16

My computer is completely locked up. I can't even get in Safe Mode. What can I do to bypass this, so I can delete it?

  • 4 Contributors
  • 5 Replies
  • 228 Views
  • 6 Days Discussion Span
  • Latest Post Latest Post by R1pperZ

Dani AI

Generated

was hit with a classic screen‑locker that can intercept Safe Mode and spread to removable media. Immediate priorities are isolation, preserving recoverable data, and using a clean environment to remove the infection.

Power down the machine, unplug Ethernet/Wi‑Fi and any networked drives, and stop using the infected USB on other systems. On a known‑clean computer prepare bootable recovery media (a Linux live ISO or an AV rescue ISO) and copy a couple of small offline utilities (process/autorun viewers and a scanner) onto that media. Boot the infected PC from the rescue media so everything runs outside Windows — offline scans and autorun removal are far safer that way.

If the rescue environment can’t fully clean, use it to copy personal files only (documents, photos, etc.) to a clean external drive, then scan those files on the clean machine before restoring. For an advanced cleanup: use the recovery environment’s registry editor to Load Hive and inspect the typical startup locations (user HKCU hives and HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run and the Startup folders) and remove entries that point to the rogue executable — export hives first and be cautious, because mistakes can break the OS. As noted, killing the rogue process (Ctrl‑Alt‑Del) can buy a small window, but it often respawns; an offline rescue run is more reliable.

When cleaning isn’t possible or the system remains unstable, back up needed files, wipe and reinstall Windows, then scan backups on a clean system before restoring. After recovery, format affected USBs on a clean PC and change all account passwords that were used on the infected machine.

Recommended Answers

All 5 Replies

Member Avatar for PhilliePhan

My computer is completely locked up. I can't even get in Safe Mode. What can I do to bypass this, so I can delete it?

If nothing works and you are completely locked out, try

Best Luck :)
pp

Member Avatar for MrWebmonster

try MalwareBytes Anti-Malware download & update the lastest version of MalwareBytes Anti-Malware and boot your pc to safe mode and scan it with MalwareBytes Anti-Malware.

Edited by MrWebmonster because: n/a
Member Avatar for ember16

try MalwareBytes Anti-Malware download & update the lastest version of MalwareBytes Anti-Malware and boot your pc to safe mode and scan it with MalwareBytes Anti-Malware.

I tried that, but I can't boot in safe mode and when I plugged in the usb stick with malware's on it, Windows Police Pro attached itself to it and it wouldn't open. Any other ideas? I can't seem to bypass it.

Member Avatar for PhilliePhan

I tried that, but I can't boot in safe mode and when I plugged in the usb stick with malware's on it, Windows Police Pro attached itself to it and it wouldn't open. Any other ideas? I can't seem to bypass it.

-- What is your OS?
-- What are you able to do on the ill computer?

PP :)

Member Avatar for R1pperZ

With WPP you should be able to Ctrl/Alt/Del and end process on the WPP app. On my system it stoped for about 5-10 seconds before loading itself back up but this should be enough time to double click Mb-Am or your a/v software. Once you get the antivirus software up even if Police Pro pops up you will still be able to run a scan, the scan should get rid of the malware app for the time being giving you the ability to take the further steps to completely remove the malwares rootkits.

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.