My Dell laptop has Safeboot installed and everyhing was fine until recently I saw a virus attack while browsing. The virus was like a antivirus dialog saying that my PC was infected with virus even though I had a good antivirus.
I tried to shutdown, but it wouldn't let me. So I powered down my laptop and when I tried turning it on - I couldn't get to the safeboot login screen.
I was only getting a SafeBoot dialog box with the title 'SafeBoot Error' and with the contents
SafeBoot is not installed
and with an 'OK' button.
I know my safeboot password, but I am not able to get there to be able to logon.
Our IT support guys tried to see if it would connect to the safeboot server using their tools, but they said its not connecting.
Finally, they suggested me to get some help from some outside data recovery services.
I don't know much about the internal workings of safeboot, but it looks like the safeboot program was infected by the virus.
Is there any way to get this virus infection to the safeboot program removed so that I can get to the safeboot login screen?
Any help in this regards is very much appreciated, as I am trying to avoid the expensive solution of getting the data recovered.
strange that they told you to use a data recovery agency - as they won't be able to help you, because the data is encrypted.
The only people who are actually in a position to help you are your own IT department, as only they have the key for your machine. They should be able to easily decrpyt the drive and get your data back.
It sounds though like you got hit by the TDSS/Alureon rootkit. It's simple for your IT department to fix if they choose to.
Thanks a lot Simon for your quick response.
I am not sure if they already tried that or not.
I do appreciate if you can provide me any inputs in your terminology that I can ask them to try (other than TDSS/Alureon rootkit) OR any process that I can tell them to follow.
Thanks much again!Message was edited by: catchyy on 3/20/12 4:29:54 PM CDT
Thanks Simon. I will talk to my IT folks and hope to see getting my data back.
I will definitely update this thread on how things went.
Sorry for not updating this thread. My IT folks have been pretty busy and haven't looked at it yet.
Thanks for the follow-up. I will definitely update this thread once I have something.
Check with your IT and may ask then to restore EEPC MBR and do eBoot..
hopefully it's will fix if not then they need to manually remove the eepc using Wintech..