How to boot your computer using a rescue disk?

User Rating: / 24
PoorBest 

How to burn and use a rescue CD? A method to remove ransomware from your PC.

rescue diskThe recent outrage of ransomware (screen lockers) has impelled me to write this guide to describe how computer users can boot from a rescue disk. Whilst rescue disks are no longer the most common method to remove spyware and viruses, the recent rise in screen locker infections makes them an effective alternative to unlock your PC. Commonly, rescue disks are used to remove viruses from computers when it is impossible to use Safe Mode. In this guide, I use ImgBurn software to burn the .iso file to a CD.

To download ImgBurn, click here. We will use the Kaspersky Rescue Disk, which can be downloaded here.  We chose this rescue disk since Kaspersky remains one of the top antivirus vendors. In addition, their rescue disk is easy-to-use and employs an attractive graphical user interface. If your computer is infected with a ransomware infection (for example, FBI Your Computer Has Been Locked, Police Central e-crime Unit scam, etc.) and you are unable to boot your computer in Safe Mode, follow this guide to remove the infections using a rescue disk.

1. Download the Kaspersky Rescue Disk and ImgBurn software (use the links provided above).

2. Burn the Kaspersky Rescue Disk .iso file to a blank CD: Install ImgBurn software, launch it, and select 'Write image file to disk'. In the opened window, choose the downloaded Kaspersky Rescue Disk (kav_rescue_10.iso) file and click the 'write image file to disk' icon at the bottom of the window.

write image to disc   select iso file

3. After you have a Kaspersky Rescue Disk, boot your computer from CD/DVD: Restart your PC and look for information relating to the key required to enter boot menu (you can refer to your motherboard manual, most commonly it is F11, DEL, or the F2 key). Within the boot menu, select CD/DVD-ROM as your first boot device.

boot menu selection

4. When the Kaspersky Rescue Disk starts to load, click any key to proceed.

kaspersky press any key

5. In the language selection menu, select your preferred language and press Enter.

kaspersky select your language

6. Accept the licence agreement by pressing 1 on your keyboard.

accept licence agreement

7. On the following screen, select Kaspersky Rescue Disk. Graphic Mode.

graphic mode

After following these steps, boot your computer from the Kaspersky Rescue Disk. If you are dealing with an infected computer, follow these steps to remove any malware or viruses:

1. Click the start button at the bottom left corner of the Kaspersky Rescue Disk main screen.

2. Select and run the Kaspersky WindowsUnlocker utility, which will fix malicious registry entries.

3. After running the WindowsUnlocker, click start again and select Kaspersky Rescue Disk. Update it, and after selecting the drives required for scanning, click 'Start Objects Scan'.

4. Remove any infections detected and restart your computer.

After this procedure, your operating system should start in both Normal and Safe modes. To ensure your computer is free from any remaining security infections, start your computer in Normal Mode and scan your PC with Malwarebytes Anti-malware or Stop Zilla.

Comments 

 
#14 perry 2013-08-21 18:49
never worked. I made a disc and it did not show up on the infected computer.
I tried another antivirus and it loaded but did no good.
I made another attempt with a Kasperskey disc to no avail
Quote
 
 
#13 Mahdi 2013-08-05 10:56
many thanks for your good information. It really works great!!!
Quote
 
 
#12 Brendan 2013-03-12 06:26
Thanks for this information. Recently infected with a nasty variant of the ukash virus that blocked all Safe Mode options. This method worked a treat.
Quote
 
 
#11 clayton 2013-01-19 11:53
Everything worked well thru #7-graphic mode. Then I got a black screen with a lot of writing....kernel panic - not syncing:UFS: Unable to mount root fs on unknown-block(0,0)
Pid: 1,comm:swapper Not tainted 3.0.13-krd10 #1
Call Trace: etc
Quote
 
 
#10 Woitek 2013-01-19 04:28
To run windowsunlocker open terminal from start menu, type windowsunlocker on the terminal console.

But: I've another issue.
How to unlock a bitlocker encrypted drive ? Any help appreciated!
Quote
 
 
#9 Eric 2013-01-16 13:47
I scanned my computer but once it detects something it says untreated on every single one. and on the reason section on the detailed report it says postponed.
Is the trojan being deleted or just detecting where its at?
Quote
 
 
#8 office 2013-01-08 23:12
Do not download this. Kav_rescue has been downloaded on my brand new laptop because I was trying to create a recovery disc for the old computer, and now this file is nowhere to be found and I cant burn it on disc, and I also cant remove it.
Quote
 
 
#7 Louis 2012-12-26 15:28
I have the Kaspersky rescue disk. Every time I enter boot menu and select the CD/DVD ROM it mearly reboots my computer it does not show the Kaspersky progam. There is a breif flash of blue screen with many symbols on it and then it reboots the computer and I'm back at square one. My computer is a windows XP. Any help would be much appreciated.
Quote
 
 
#6 Tim 2012-12-23 15:37
Kaspersky WindowsUnlocker utility was never an option with Kaspersky 10.
Quote
 
 
#5 admin 2012-12-20 03:37
Hi John, try repeating the procedure, we have never seen a computer which wouldn't boot using a rescue disk. Most probably this error is not related to ransomware infection. Try using a different CD or other removable media to write (burn) the rescue disk.
Quote
 
Add comment
PCrisk.com is not responsible for the content of the comments.