Help removing ICE Block virus on windows 7

[wastintime]

Hi, I recently contracted the ice virus on my Windows 7 (x64 i believe) laptop and it will not boot up in safe mode.  I googled and saw people being helped on here and having to post logs, etc to get the issue resolved.  I noticed that it's specific to a computer, so if someone could please help me remove this virus I would be most appreciative.  Thanks in advance!

[MrCharlie]

Welcome to the forum, here's how we deal with that malware:

• Please download Farbar Recovery Scan Tool and save it to a flash drive.

  Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

  Plug the flash drive into the infected PC.

• If you are using Windows 8 consult How to use the Windows 8 System Recovery Environment Command Prompt to enter System Recovery Command prompt.

  If you are using Vista or Windows 7 enter System Recovery Options.

  To enter System Recovery Options from the Advanced Boot Options:

  • Restart the computer.
  • As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.
  • Use the arrow keys to select the Repair your computer menu item.
  • Select US as the keyboard language settings, and then click Next.
  • Select the operating system you want to repair, and then click Next.
  • Select your user account an click Next.
  Note: In case you can not enter System Recovery Options by using F8 method, you can use Windows installation disc, or make a repair disc. Any Windows installation disc or a repair disc made on another computer can be used.

  To make a repair disk on Windows 7 consult: http://www.sevenforums.com/tutorials/2083-system-repair-disc-create.html

  To enter System Recovery Options by using Windows installation disc:

  • Insert the installation disc.
  • Restart your computer.
  • If prompted, press any key to start Windows from the installation disc. If your computer is not configured to start from a CD or DVD, check your BIOS settings.
  • Click Repair your computer.
  • Select US as the keyboard language settings, and then click Next.
  • Select the operating system you want to repair, and then click Next.
  • Select your user account and click Next.
• On the System Recovery Options menu you will get the following options:

  • • Startup Repair

      System Restore

      Windows Complete PC Restore

      Windows Memory Diagnostic Tool

      Command Prompt

      Select Command Prompt

      Once in the Command Prompt:

  • In the command window type in notepad and press Enter.
  • The notepad opens. Under File menu select Open.
  • Select "Computer" and find your flash drive letter and close the notepad.
  • In the command window type e:\frst (for x64 bit version type e:\frst64) and press Enter

    Note: Replace letter e with the drive letter of your flash drive.

  • The tool will start to run.
  • When the tool opens click Yes to disclaimer.
  • Press Scan button.
  • It will make a log (FRST.txt) on the flash drive. Please copy and paste it to your reply.

MrC

[wastintime]

Thank you for getting back to me.  I'd already tried to do that as every repair process started that way.  I've tried both the 64 and 32 bit versions of farbar, but once i select repair computer, I get an error:

 

windows failed to start a recent hardware or software change might be the cause.  To fix the problem:

 

1. insert your windows installation disc and restart your computer

2.

3.

 

if you do not have this disc contact your system admin or computer manufacturer for assistence

 

status: 0xc000000f

 

info: the boot selection failed because a required device is inaccessible

 

 

 

I don't have the windows install discs, so at this point how do I get the farbar software to boot/work?

 

thanks,

[wastintime]

I tried to make a repair disc, but the only other computer I have access to is a MAC, so it won't let me download the files

[MrCharlie]

Can you borrow someones W7 disk??  MrC

[wastintime]

I honestly don't know.  I guess I can start calling my friends and see if any have one.

[MrCharlie]

http://maximumpcguides.com/windows-7/create-a-windows-7-system-repair-disc/

You can also create one...MrC

[wastintime]

I know I can create one, I've just got to find another windows 7 system to create it on.  If there was just something I could download onto a disc or the mac it'd be simple.

[MrCharlie]

Can you get to the ---->Command Prompt??

 

--------------------------------

 

also........

 

You can try to make a Kaspersky Rescue Disk and Unlocker: (about half way down on the page)

http://maddoktor2.com/forums/index.php/topic,55928.0.html

MrC

[wastintime]

I managed to get it to attempt to boot in Safe Mode with networking, and was able to kill the virus process and command prompt fast enough that it wouldn't let me in windows, but the task manager was running, so I was able to open malwarebytes through that and it seems to have cleaned it enough to start windows normally.  I'm now downloading and running what most people recommended adwcleaner, junkware remover, and tdsskiller

[MrCharlie]

what most people recommended adwcleaner, junkware remover, and tdsskiller

They won't target the malware, you need to run FRST:

Please download Farbar Recovery Scan Tool and save it to a folder. (use correct version for your system)

• Double-click to run it. When the tool opens click Yes to disclaimer.
• Press Scan button.
• It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
• The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

MrC

[AdvancedSetup]

Are you still with us? 

[Maurice Naggar]

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!