03-09-2012 01:37 AM
I have a Lenovo 3000 N200 machine, a few years old.
I was recently infected with a "Met Police" type virus (demanding money because I had apparently downloaded child porn, etc) and now I am unable to get into the system at all.
This happened about a year ago, unfortunately, and I was able to boot the machine in safe mode by tapping F8 continuously after turning it on, then using regedit to remove the .exe file it had left behind.
This time, however, I can't get it to recognise F8 (or any other function key) at all, and the buffer fills after a while, reacting to each keystroke with a beep. I am presented with a black screen with a single, non-flashing flat cursor in the top left of the screen. I have no alternative at that point but to turn the machine off.
I have tried using the LenovoCare button, which does respond with menu options, but I don't see any reference to "safe mode" and don't really want to mess where I don't belong.
Before I spend a bunch of money at a repair shop before being told I need a new box, can anyone suggest a way for me to start in safe mode?
03-09-2012 11:38 AM
Hi collizz, welcome to the forum,
if you have access to another computer I suggest you download Kaspersky Rescue Disc and create a bootable cd, below is a link to a knowledgebase article where you can download it and also find out how to use it.
p.s. moving to Security and Malware board.
Please remember to come back and mark the post that you feel solved your question as the solution, it earns the member + pointsDid you find a post helpfull? You can thank the member by clicking on the star to the left awarding them Kudos
03-09-2012 12:32 PM - edited 03-09-2012 12:33 PM
Adding to Andy's good instructions, once you get Kaspersky Rescue Disk downloaded, here are some instructions specific to removing that malware using Kaspersky's Rescue Disk 10: http://malwaretips.com/Thread-Remove-Metropolitan-
If you want a trained analyst to walk you through it, one-on-one, there are helpers at the forums listed by Trend Micro here: http://hjt-data.trendmicro.com/hjt/analyzethis/ind
Best of luck in getting your issue resolved.
If you find a post helpful and it answers your question, please click the "Accept As Solution" button.
Microsoft MVP - Consumer Security
Member of Alliance of Security Analysis Professionals