How to boot your computer using a rescue disk?

User Rating: / 20
PoorBest 

How to burn and use a rescue CD? A method to remove ransomware from your PC.

rescue diskRecent outrage of ransomware (screen lockers) has impelled me to write this guide explaining how can a computer user boot from a rescue disk. While rescue disks is not a common method used to help remove spyware and viruses, recent rise in screen locker infections has made this an attractive way to unlock your PC without taking it to a computer repair shop. Most commonly rescue disks is used to remove viruses from computers when it's impossible to use safe mode. In this guide I will use ImgBurn software to burn the .iso file to the CD. To download ImgBurn click here. We will use Kaspersky Rescue Disk which can be downloaded here.  We chose this rescue disk because Kaspersky has always been one of top antivirus vendors and it's rescue disk is easy to use because of the attractive graphical interface. If you have a computer with a ransomware infection (examples: FBI Your Computer Has Been Locked, Police Central e-crime Unit scam etc.) and you can't boot your computer in safe mode, you can follow this guide and remove such infections using a rescue disk.

1. Download a Kaspersky Rescue Disk and ImgBurn software (use the provided links above).

2. Burn the Kaspersky Rescue Disk .iso file to a blank CD: Install ImgBurn software, launch it and select "Write image file to disk", in the opened window choose the downloaded Kaspersky Rescue Disk file (kav_rescue_10.iso) file and click the write image file to disk icon at the bottom of the window.

write image to disc   select iso file

3. After you have a Kaspersky Rescue Disk you need to boot your computer from CD/DVD: Restart your PC and look for the information on what button you should click to enter boot menu ( You can refer to your motherboards manual, most commonly it's F11, DEL or F2 key). In the boot menu select CD/DVD-ROM as your first boot device.

boot menu selection

4. When a Kaspersky Rescue Disk starts to load you will have to click any key to proceed.

kaspersky press any key

5. In the language selection menu select your language and press Enter.

kaspersky select your language

6. Accept the licence agreement by pressing 1 on your keyboard.

accept licence agreement

7. In the following screen select Kaspersky Rescue Disk. Graphic Mode.

graphic mode

After following these steps you will boot your computer from Kaspersky Rescue Disk.  If you are dealing with an infected computer follow these steps to remove any malware or viruses.

1. Click the start button at the bottom left corner of the Kaspersky Rescue Disk main screen.

2. Select and run the Kaspersky WindowsUnlocker utility which will fix malicious registry entries.

3. After running the WindowsUnlocker, click start again and select Kaspersky Rescue Disk. Update it and after selecting the drives that you want to scan click "Start Objects Scan".

4. Remove all the infections that it detects and restart your computer.

After such procedure your operating system should start in both normal and safe mode. To make sure that your computer is free of any possible left security infections start your computer in normal mode and scan your PC with Malwarebytes Anti-malware or Stop Zilla.

Comments 

 
#12 Brendan 2013-03-12 06:26
Thanks for this information. Recently infected with a nasty variant of the ukash virus that blocked all Safe Mode options. This method worked a treat.
Quote
 
 
#11 clayton 2013-01-19 11:53
Everything worked well thru #7-graphic mode. Then I got a black screen with a lot of writing....kernel panic - not syncing:UFS: Unable to mount root fs on unknown-block(0,0)
Pid: 1,comm:swapper Not tainted 3.0.13-krd10 #1
Call Trace: etc
Quote
 
 
#10 Woitek 2013-01-19 04:28
To run windowsunlocker open terminal from start menu, type windowsunlocker on the terminal console.

But: I've another issue.
How to unlock a bitlocker encrypted drive ? Any help appreciated!
Quote
 
 
#9 Eric 2013-01-16 13:47
I scanned my computer but once it detects something it says untreated on every single one. and on the reason section on the detailed report it says postponed.
Is the trojan being deleted or just detecting where its at?
Quote
 
 
#8 office 2013-01-08 23:12
Do not download this. Kav_rescue has been downloaded on my brand new laptop because I was trying to create a recovery disc for the old computer, and now this file is nowhere to be found and I cant burn it on disc, and I also cant remove it.
Quote
 
 
#7 Louis 2012-12-26 15:28
I have the Kaspersky rescue disk. Every time I enter boot menu and select the CD/DVD ROM it mearly reboots my computer it does not show the Kaspersky progam. There is a breif flash of blue screen with many symbols on it and then it reboots the computer and I'm back at square one. My computer is a windows XP. Any help would be much appreciated.
Quote
 
 
#6 Tim 2012-12-23 15:37
Kaspersky WindowsUnlocker utility was never an option with Kaspersky 10.
Quote
 
 
#5 admin 2012-12-20 03:37
Hi John, try repeating the procedure, we have never seen a computer which wouldn't boot using a rescue disk. Most probably this error is not related to ransomware infection. Try using a different CD or other removable media to write (burn) the rescue disk.
Quote
 
 
#4 John 2012-12-20 02:38
Hi I tried running this but once I select Graphic mode the screen goes black and I see nothing on the screen, any help in figuring this out is much appriciated
Quote
 
 
#3 admin 2012-12-10 06:38
Hi rose, click the button К; in the bottom right corner of the screen and in the menu select Terminal. In the command prompt enter the command windowsunlocker and press Enter on the keyboard. 1 – Unblock Windows
Quote
 

Add comment

PCrisk.com is not responsible for the content of the comments.


Security code
Refresh