locked
virus blocks keyboard booting in safe mode RRS feed

  • Question

  • My customer requested virus removal on their Vista PC. My first approach is always a safe boot scan using MalwareBytes. This threat disabled the keyboard blocking attempts to log in. Thanks for the addition of the soft-keyboard, I got past the first challenge.

    1. Is there a way to manually neutralize this attack?

    After, MalwareBytes found and 'removed' 30 odd threats, the problem is not resolved. So, I tried to install Security Essentials. The virus blocks the post install update, and SE turns red, indicating its defeat by these threats.

    2. Any suggestions on getting around this?

    Time is money on the customer's dime, so I used a USB  to SATA adapter to scan the infected PC's drive off-line from another PC using MalwareBytes. The long scan will run overnight and the war resumes tomorrow, AM.

    3. It seems virus removal is becoming a big money maker around these parts. But, I want to provide good value to my customers. Should I stop trying to remove these threats on-line and always begin with an off-line hard drive scan from a second PC? I think it best to avoid the hardware option, but ALL of the software tools seem to be easily defeated by these latest threats.

    Thanks,
    Kurt


    Deep Creek Services
    Thursday, March 4, 2010 11:31 PM

All replies

  • After off-line remote scan, most problems gone. After Security Essentials full scan and reboot no signs yet of intrusion. This week quick scans fixed half the PCs. Off-line remote scans fixed the other half.
    Deep Creek Services
    Saturday, March 6, 2010 3:26 PM