One of my crew let her foster daughter use her laptop for about a year. Now getting it back it is borked up badly. And I mean borked up.
What happened after I got a brick for it, was on bootup it went to a russian site for forex bank and sat there. I tried the control alt delete route and it would not go to the menu screen to pull up the process manager.
I hit the power switch and held it down for a good 10 seconds. Normally any computer would shut off in 4 seconds but this one kept right on going. I unplugged the brick and ejected the battery pack. ( I hate doing that. Rough on the hardware.)
When I booted back up I tapped F8 and it finally started showing the list of items it was loading. When it got to atipcie.exe it froze up. A few seconds later up pops this screen with the US government title and some crap about the FBI. You read the fine text and it's all about going to kiddie porn sites and bullshit like that.
Then at the bottom of all the fine print it says to go buy a greendot card and input the control numbers. After you pay the supposed "fine" it says it will restore normal operations in 1 to 4 hours. BFS!!!
It does this in normal or safe mode. I need you guys to really think hard as to how I can get back in and run combofix off a thumb drive. It has a rootkit scanner/removal tool that I really need to run.
If not I'm going to have to get my employee to snarf up a virgin copy of win7 with a new key. Sucks. She bought the office package online and paid for the POS norton360 that's on it. Boy did norton ever blow this one.
What happened after I got a brick for it, was on bootup it went to a russian site for forex bank and sat there. I tried the control alt delete route and it would not go to the menu screen to pull up the process manager.
I hit the power switch and held it down for a good 10 seconds. Normally any computer would shut off in 4 seconds but this one kept right on going. I unplugged the brick and ejected the battery pack. ( I hate doing that. Rough on the hardware.)
When I booted back up I tapped F8 and it finally started showing the list of items it was loading. When it got to atipcie.exe it froze up. A few seconds later up pops this screen with the US government title and some crap about the FBI. You read the fine text and it's all about going to kiddie porn sites and bullshit like that.
Then at the bottom of all the fine print it says to go buy a greendot card and input the control numbers. After you pay the supposed "fine" it says it will restore normal operations in 1 to 4 hours. BFS!!!
It does this in normal or safe mode. I need you guys to really think hard as to how I can get back in and run combofix off a thumb drive. It has a rootkit scanner/removal tool that I really need to run.
If not I'm going to have to get my employee to snarf up a virgin copy of win7 with a new key. Sucks. She bought the office package online and paid for the POS norton360 that's on it. Boy did norton ever blow this one.