<?xml version="1.0" encoding="UTF-8" ?>
<rss version="2.0" xmlns:s="http://www.techrepublic.com/search" xmlns:dc="http://purl.org/dc/elements/1.1/"  xmlns:atom="http://www.w3.org/2005/Atom">
<channel>
    <title><![CDATA[Questions & Answers: FBI/DOJ virus, now locks out safe mode as well.  Any ideas for removal? ]]></title>
    <link><![CDATA[http://www.techrepublic.com/forum/questions/101-401200/fbidoj-virus-now-locks-out-safe-mode-as-well-any-ideas-for-removal]]></link>
    <atom:link rel="hub" type="application/rss+xml" href="http://pubsubhubbub.appspot.com/" />
    <atom:link rel="self" type="application/rss+xml" href="http://www.techrepublic.com/forum/questions/101-401200/rss" />

    <description><![CDATA[]]></description>
    <language>en-us</language>
    <lastBuildDate>2013-05-19T00:59:09-07:00</lastBuildDate>
             

    <item>
        <title><![CDATA[This has worked for me everytime I tried it]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/questions/101-401200/fbidoj-virus-now-locks-out-safe-mode-as-well-any-ideas-for-removal?#msg-3759117]]></link>
        <description><![CDATA[I tried just about every fix I could find after weeding through the pages and pages of supposed answers that said nothing except &quot;I have this problem too did you figure it out yet&quot; Well I got sick of it and figured it out myself. Heres the trick. Download and burn (Borrow someone elses computer if you have to) a copy of hirens boot cd. Burn the iso to a cd. Once you have the CD put into your computer and boot from it. Choose &quot;MINI XP mode&quot; Allow it to boot to a desktop. Ignore the fact that tools like malwarebytes and other antispyware tools are there. Click on Setup network and allow the computer to do so. Launch the browser and google malwarebytes. Download it to the C: drive. (dont choose the default location for the download because obviously you cannot write files to a CD) Launch the program when done. Ignore the 2 or 3 error messages that pop up. Malwarebytes will launch and update itself. Run a full scan. This will delete the items that prevent your computer from being accessible in normal mode. When done remove the disk and boot into normal mode. From there run combofix and allow it to do its thing. IT will reboot your computer. AFter that run super antispyware and maybe norton power eraser (NPE). AFter this run your antivirus program to be super redundant. But you should be ok. Ive fixed probably like 25 computers with this variant in the past month. $$ For me, but my tip to you! Good luck!]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/questions/101-401200/fbidoj-virus-now-locks-out-safe-mode-as-well-any-ideas-for-removal?#msg-3759117]]></guid>
        <dc:creator><![CDATA[pentangelli]]></dc:creator>
        <pubDate>Wed, 24 Apr 2013 11:45:45 -0700</pubDate>
    </item>
             

    <item>
        <title><![CDATA[Did this on the 15th]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/questions/101-401200/fbidoj-virus-now-locks-out-safe-mode-as-well-any-ideas-for-removal?#msg-3741289]]></link>
        <description><![CDATA[A neighbor ended up getting this latest version &amp; called me to deal with it.  The Bitdefender Rescue CD should work as long as you have a video setup that uses a resolution greater than 800x600.  If you don't, it will run through the entire detection process, but you will not be able to access the buttons at the bottom of the screen to remove them.  I ended up using the Trinity Rescue Kit 3.4 and running the command-line version of Bitdefender from there.  It found and removed the problem files.  Malwarebyes with the then-latest definitions could not find it.]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/questions/101-401200/fbidoj-virus-now-locks-out-safe-mode-as-well-any-ideas-for-removal?#msg-3741289]]></guid>
        <dc:creator><![CDATA[Bruce Epper]]></dc:creator>
        <pubDate>Thu, 17 Jan 2013 01:17:47 -0800</pubDate>
    </item>
             

    <item>
        <title><![CDATA[Reponse To Answer]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/questions/101-401200/fbidoj-virus-now-locks-out-safe-mode-as-well-any-ideas-for-removal?#msg-3741076]]></link>
        <description><![CDATA[thank you, I will try that.]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/questions/101-401200/fbidoj-virus-now-locks-out-safe-mode-as-well-any-ideas-for-removal?#msg-3741076]]></guid>
        <dc:creator><![CDATA[Locrian_Lyric]]></dc:creator>
        <pubDate>Wed, 16 Jan 2013 09:42:21 -0800</pubDate>
    </item>
             

    <item>
        <title><![CDATA[Reponse To Answer]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/questions/101-401200/fbidoj-virus-now-locks-out-safe-mode-as-well-any-ideas-for-removal?#msg-3741075]]></link>
        <description><![CDATA[thanks]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/questions/101-401200/fbidoj-virus-now-locks-out-safe-mode-as-well-any-ideas-for-removal?#msg-3741075]]></guid>
        <dc:creator><![CDATA[Locrian_Lyric]]></dc:creator>
        <pubDate>Wed, 16 Jan 2013 09:42:06 -0800</pubDate>
    </item>
             

    <item>
        <title><![CDATA[Reponse To Answer]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/questions/101-401200/fbidoj-virus-now-locks-out-safe-mode-as-well-any-ideas-for-removal?#msg-3741087]]></link>
        <description><![CDATA[THANKS!!!!  That's GREAT!]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/questions/101-401200/fbidoj-virus-now-locks-out-safe-mode-as-well-any-ideas-for-removal?#msg-3741087]]></guid>
        <dc:creator><![CDATA[Locrian_Lyric]]></dc:creator>
        <pubDate>Wed, 16 Jan 2013 09:41:24 -0800</pubDate>
    </item>
             

    <item>
        <title><![CDATA[Reponse To Answer]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/questions/101-401200/fbidoj-virus-now-locks-out-safe-mode-as-well-any-ideas-for-removal?#msg-3741074]]></link>
        <description><![CDATA[I'll try that one too.]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/questions/101-401200/fbidoj-virus-now-locks-out-safe-mode-as-well-any-ideas-for-removal?#msg-3741074]]></guid>
        <dc:creator><![CDATA[Locrian_Lyric]]></dc:creator>
        <pubDate>Wed, 16 Jan 2013 09:40:48 -0800</pubDate>
    </item>
             

    <item>
        <title><![CDATA[Reponse To Answer]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/questions/101-401200/fbidoj-virus-now-locks-out-safe-mode-as-well-any-ideas-for-removal?#msg-3741086]]></link>
        <description><![CDATA[Thanks, great idea!]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/questions/101-401200/fbidoj-virus-now-locks-out-safe-mode-as-well-any-ideas-for-removal?#msg-3741086]]></guid>
        <dc:creator><![CDATA[Locrian_Lyric]]></dc:creator>
        <pubDate>Wed, 16 Jan 2013 09:39:45 -0800</pubDate>
    </item>
             

    <item>
        <title><![CDATA[FBI virus]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/questions/101-401200/fbidoj-virus-now-locks-out-safe-mode-as-well-any-ideas-for-removal?#msg-3740970]]></link>
        <description><![CDATA[Try using  &quot;Remove Fake Anti-virus&quot; and then run &quot;Combofix&quot;  running a search online and you will find both these tools.  Has worked everytime for me.]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/questions/101-401200/fbidoj-virus-now-locks-out-safe-mode-as-well-any-ideas-for-removal?#msg-3740970]]></guid>
        <dc:creator><![CDATA[techie@...]]></dc:creator>
        <pubDate>Tue, 15 Jan 2013 20:55:10 -0800</pubDate>
    </item>
             

    <item>
        <title><![CDATA[Rescue CDs: Tips for fighting malware]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/questions/101-401200/fbidoj-virus-now-locks-out-safe-mode-as-well-any-ideas-for-removal?#msg-3740921]]></link>
        <description><![CDATA[Try looking at this TR Blog Link from Michael Kassner. It covers exactly what you want to know here.www.techrepublic.com/blog/security/rescue-cds-tips-for-fighting-malware/3803Col]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/questions/101-401200/fbidoj-virus-now-locks-out-safe-mode-as-well-any-ideas-for-removal?#msg-3740921]]></guid>
        <dc:creator><![CDATA[OH Smeg]]></dc:creator>
        <pubDate>Tue, 15 Jan 2013 14:56:48 -0800</pubDate>
    </item>
             

    <item>
        <title><![CDATA[Malware]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/questions/101-401200/fbidoj-virus-now-locks-out-safe-mode-as-well-any-ideas-for-removal?#msg-3740801]]></link>
        <description><![CDATA[I use a bootable dvd which I would create on a safe pc. UBCD is a free boot cd utility that also comes bundled with antivirus/malware/rootkit utilities. These can be updated (prgram file+definition files) and then slipstreamed into the dvd image. So the burned image is bang up to date.This can then be used to host a virtual OS complete with utilities to disinfect the problem computer. UBCD can be had from here http://www.ubcd4win.com/]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/questions/101-401200/fbidoj-virus-now-locks-out-safe-mode-as-well-any-ideas-for-removal?#msg-3740801]]></guid>
        <dc:creator><![CDATA[maggie5150@...]]></dc:creator>
        <pubDate>Tue, 15 Jan 2013 07:56:46 -0800</pubDate>
    </item>
             

    <item>
        <title><![CDATA[This is a question.]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/questions/101-401200/fbidoj-virus-now-locks-out-safe-mode-as-well-any-ideas-for-removal?#msg-3740790]]></link>
        <description><![CDATA[Any experience removing this malware with with f-secure, kapersky  or avira all available as bootable CDs hence obviating the need to use Windows as the OS?]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/questions/101-401200/fbidoj-virus-now-locks-out-safe-mode-as-well-any-ideas-for-removal?#msg-3740790]]></guid>
        <dc:creator><![CDATA[dldorrance@...]]></dc:creator>
        <pubDate>Tue, 15 Jan 2013 07:31:14 -0800</pubDate>
    </item>
             

    <item>
        <title><![CDATA[Use As External Drive]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/questions/101-401200/fbidoj-virus-now-locks-out-safe-mode-as-well-any-ideas-for-removal?#msg-3740759]]></link>
        <description><![CDATA[I would remove the hard drive and use it as a secondary or external hard drive. I would then use malware tools, such as malwarebytes, and an antivirus software to scan the external drive. You might also have to Google this type of virus to delete the executables, registry paths, etc. yourself in order to get safe mode to work or Windows to boot. If all else fails, get a new hard drive and restore everything from a backup. If you didn't backup the drive or its files, you can try to restore the files from the infected drive. Choose a group of files and scan them each time before you bring them to the new drive. You don't want to grab the virus that caused this issue to begin with.I had a client that received this file once. Strange enough it was when he tried to download an episode of Criminal Minds off of a forum. He thought the FBI actually locked his PC. Too funny! Not for me though, it was a pain to get rid of. Luckily he only received the stage one of the virus which allowed safe mode. It seems it has adapted to the environment.Good Luck!]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/questions/101-401200/fbidoj-virus-now-locks-out-safe-mode-as-well-any-ideas-for-removal?#msg-3740759]]></guid>
        <dc:creator><![CDATA[Clendanielc]]></dc:creator>
        <pubDate>Tue, 15 Jan 2013 06:53:43 -0800</pubDate>
    </item>
             

    <item>
        <title><![CDATA[FBI/DOJ virus, now locks out safe mode as well.  Any ideas for removal?]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/questions/101-401200/fbidoj-virus-now-locks-out-safe-mode-as-well-any-ideas-for-removal?#msg-3740771]]></link>
        <description><![CDATA[The new version locks you out of windows safe mode with networking as well.any ideas on how to block it long enough to run some removal programs to get it out, or some that I can boot into to get this darn thing off?]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/questions/101-401200/fbidoj-virus-now-locks-out-safe-mode-as-well-any-ideas-for-removal?#msg-3740771]]></guid>
        <dc:creator><![CDATA[Locrian_Lyric]]></dc:creator>
        <pubDate>Tue, 15 Jan 2013 06:18:22 -0800</pubDate>
    </item>
    </channel>
</rss>

