Ukash scan

valerian · 29 May 2012 at 09:09

im trying to remove this ukash scam from a friends computer, with XP on it
the pc wont boot into safe mode at all
it comes on and for all of 3 seconds looks normal then that screen comes up, and its locked

ive tried removing the hdd and scanning it from another computer, to no avail, including malware bytes and av software

ive tried booting windows defender from a cd rom this finds nothing,
can someone save me some time by giving some advice that will work
i dont really want to format the system
but i can see it a-coming

cheers

KIA · 29 May 2012 at 09:50

I guess you're referring to http://windows.microsoft.com/en-US/windows/what-is-windows-defender-offline

You could try a live anti-virus XP CD: http://www.raymond.cc/blog/13-antiv...-compared-in-search-for-the-best-rescue-disk/

XP Repair would probably work. Backup important data beforehand.

valerian · 29 May 2012 at 10:58

KIA said:
I guess you're referring to http://windows.microsoft.com/en-US/windows/what-is-windows-defender-offline

You could try a live anti-virus XP CD: http://www.raymond.cc/blog/13-antiv...-compared-in-search-for-the-best-rescue-disk/

XP Repair would probably work. Backup important data beforehand.

yes to the first one
is it possible to alter the registry on his windows if i access the hdd via another pc

KIA · 29 May 2012 at 11:03

valerian said:
is it possible to alter the registry on his windows if i access the hdd via another pc

Yes. http://www.osattack.com/walk-through/tutorial-how-to-mount-a-registry-hive/

kipslacher · 29 May 2012 at 15:44

use combofix or try scanning with comodo and their tools

valerian · 29 May 2012 at 22:08

i couldnt get it into a windows environment at all
ive just formatted instead
so job done