Strange new virus
On a Windows 7 Dell Inspirion I have a new virus that gives me no clues.
It's a completely white screen that I cannot get past. It happens in both normal and safe mode. The only clue is at the very bottom of the page is dollar amount entry field /box with the phrase <? echo submit ?>. The rest of the screen is completely white. The mouse is active and available. At the top edge is about 1/8 of inch of dark border, probably the bottom of some sort of graphic
There are times when I use ESC or some other key combination, the normal desktop will show and its active. When I try to download a tool it goes back to the white screen and no key combination will remove it. The only effective action is force it off and reboot.
When the machine boots the normal desktop screen shows for 2 seconds and then goes to this white screen.
I have scanned the drive on another good machine with Avast and found nothing. I have run Kapersky Rescue and makes no difference.
Appreciate your help.
It's a completely white screen that I cannot get past. It happens in both normal and safe mode. The only clue is at the very bottom of the page is dollar amount entry field /box with the phrase <? echo submit ?>. The rest of the screen is completely white. The mouse is active and available. At the top edge is about 1/8 of inch of dark border, probably the bottom of some sort of graphic
There are times when I use ESC or some other key combination, the normal desktop will show and its active. When I try to download a tool it goes back to the white screen and no key combination will remove it. The only effective action is force it off and reboot.
When the machine boots the normal desktop screen shows for 2 seconds and then goes to this white screen.
I have scanned the drive on another good machine with Avast and found nothing. I have run Kapersky Rescue and makes no difference.
Appreciate your help.
ASKER
rindi
I checked with Parted Magic on the UBCD and I'm able to go to the .jpgs and open the pictures. I can open the pictures and manipulate them.
I am able to find document files with the extension .docx and .doc. Parted Magic can't open .doc and .docx.
My experience with Ransomware is that it changes the extensions to zip and encrypts. I don't thinks this virus has done that.
Can we do anything from here?
I checked with Parted Magic on the UBCD and I'm able to go to the .jpgs and open the pictures. I can open the pictures and manipulate them.
I am able to find document files with the extension .docx and .doc. Parted Magic can't open .doc and .docx.
My experience with Ransomware is that it changes the extensions to zip and encrypts. I don't thinks this virus has done that.
Can we do anything from here?
No, then it probably isn't ransomware.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
jcimarron
Thanks. Since your suggestion I am able to boot to recovery using a Win Restore disk. I've run system restore to August 1 and July 10 and still get the white screen on boot.
One additional clue, when I force it closed it flashes the normal desktop for a brief second. So normal is running behind the white screen.
If Avast from another system or Kapersky Rescue can't knock it out, could Hitman Pro be run from a bootable USB? What others could I run from a USB?
Thanks. Since your suggestion I am able to boot to recovery using a Win Restore disk. I've run system restore to August 1 and July 10 and still get the white screen on boot.
One additional clue, when I force it closed it flashes the normal desktop for a brief second. So normal is running behind the white screen.
If Avast from another system or Kapersky Rescue can't knock it out, could Hitman Pro be run from a bootable USB? What others could I run from a USB?
DwEckert--
If you feel Desktop (and Windows) are running then do a Repair Install.
http://www.sevenforums.com/tutorials/3413-repair-install.html
If you feel Desktop (and Windows) are running then do a Repair Install.
http://www.sevenforums.com/tutorials/3413-repair-install.html
ASKER
Thanks for the help.
DwEckert--
You are most welcome.
You are most welcome.
http://pcrepix.sourceforge.net
If you have such a ransomware virus, your best option is to restore your PC from a good backup, or by using the recovery partition or media you made when you got it.