RCMP Ransom Virus, Need Fixlist

[macarons]

So I opened my laptop today to find a lovely little surprise.

I attempted to boot from a USB with Hitman Kickstart, but it could not do so.
I also attempted to boot in Safe Mode to either 1) Download MalwareBytes or
2) Create a secondary user account but just got stuck on a black screen both times.

I finally succeeded in running FRST64 with the Command Prompt, and I'm hoping for a fixlist.txt to solve the problem.

Thank you in advance!

Edit: Turns out I can open new windows and browse from there. Disabled Javascript and was able to close the tab, not sure if my system is entirely clean, but it's working as of now. Have not yet tried to boot in any Safe Modes.

 

[TwinHeadedEagle]

System seems clean, are you still having problems?

 

[macarons]

Booting in Safe Mode still doesn't seem to work, but my browsing experience is fine once again!

 

[TwinHeadedEagle]

What exactly happens when you try to enter safe mode.
Re-run FRST again, check Addition.txt, press Scan and attach both reports.


Please download aswMBR and save it to your desktop.

Double click aswMBR.exe to start the tool.

• Select Yes if prompted to download the Avast database.
• Click Scan
• Upon completion of the scan ( Scan finished successfully ) click Save log and save it to your desktop, and post that log in your next reply for review.
  Note: do NOT attempt any Fix yet.

 

[macarons]

It just stays on a black screen, and shift+F8 or Ctrl+Shift+Esc doesn't bring up anything. I haven't waited past 3-5 minutes, but it just stays like that indefinitely, so far as I can tell.

Edit: I should mention that I've changed my Windows Startup delay time (can't remember what I did exactly, it was a year ago), so that might be why the Safe Mode boots are acting up.

 

[TwinHeadedEagle]

Download this tool, it should Repair Safe Mode

http://download.bleepingcomputer.com/sUBs/SafeBootKeyRepair.exe

Execute and then try to enter safe mode.

 

[macarons]

Sorry, we changed ISPs so I just got to this today. Seems like it only works for Win 2000 or XP, and I'm running Win 8.

 

[TwinHeadedEagle]

Do you know how to enter recovery?

 

[macarons]

I believe so, yes.

 

[TwinHeadedEagle]

Ok then, follow this instruction


Please download Farbar Recovery Scan Tool x64 and save it to a flash drive.

• Plug the flashdrive into the infected PC.
• Restart your computer and tap F8 to bring up the Advanced Menu, then click Repair your computer
• Follow the prompt to enter keyboard input method, and then the prompt to enter a password. If the machine does not have a password, simply click Enter.

In the next menu, use the arrow keys on the keyboard to highlight Command Prompt and press Enter.

• In the command window type in notepad and press Enter.
• When notepad opens, click File and select Open.
• Select "Computer" and find your flash drive letter and close the notepad.
• In the command window type e:\frst64.exe and press Enter.

Note: Replace letter e with the drive letter of your flash drive.

• The tool will start to run. When the tool opens click Yes to disclaimer.
• Press Scan button.

It will make a log (FRST.txt) on the flash drive. Please attach it to your reply.