Virus Removal and Windows 8

[chrisaroz]

If this has been discussed elsewhere, please point me in that direction as I wasn unable to find anything via search.

We're having to re-learn some tricks now that Windows 8 machines are rolling in and I thought I might crowd-source some solutions.

One of the first things we use on a machine is the Kaspersky Rescue Disc, but a true UEFI Windows 8 system won't load that anymore. I'm not sure of the effects of switching to legacy BIOS to run the CD, and then trying to switch back once finished. Has anyone attempted that?

It seems that the ISO for a boot disc has to be an EFI ISO, so most/all of the old images aren't compatible with newer boards. Does anyone know of any boot discs or rescue discs that ARE EFI?

We're also realizing how difficult it is to get into Safe Mode now. From what we've seen you pretty much HAVE to get into regular mode first. Is this correct, or has someone found a way to trick the system into booting into Safe Mode directly?

I've been doing this for a while, and this makes me feel like I'm starting all over!

 

[NOOB_TECH]

If this has been discussed elsewhere, please point me in that direction as I wasn unable to find anything via search.

We're having to re-learn some tricks now that Windows 8 machines are rolling in and I thought I might crowd-source some solutions.

One of the first things we use on a machine is the Kaspersky Rescue Disc, but a true UEFI Windows 8 system won't load that anymore. I'm not sure of the effects of switching to legacy BIOS to run the CD, and then trying to switch back once finished. Has anyone attempted that?

It seems that the ISO for a boot disc has to be an EFI ISO, so most/all of the old images aren't compatible with newer boards. Does anyone know of any boot discs or rescue discs that ARE EFI?

We're also realizing how difficult it is to get into Safe Mode now. From what we've seen you pretty much HAVE to get into regular mode first. Is this correct, or has someone found a way to trick the system into booting into Safe Mode directly?

I've been doing this for a while, and this makes me feel like I'm starting all over!

Would this help?

http://www.bleepingcomputer.com/tutorials/start-windows-8-in-safe-mode/

 

[chrisaroz]

That post is what I'm talking about, you have to be in windows to get to safe mode as opposed to being able to boot directly into safe mode at startup.

 

[NOOB_TECH]

That post is what I'm talking about, you have to be in windows to get to safe mode as opposed to being able to boot directly into safe mode at startup.

Look at the last boot option on the website: I posted the test below, but does have images.

Looks like you have to hold shift key and repeatedly hit the f8 key

http://www.redmondpie.com/how-to-boot-into-windows-8-safe-mode/

From the website:

Booting Windows 8 In Safe Mode When PC Is Not Starting

This one is a little tricky, because it takes trial and error (and patience) to launch the Windows 8 ‘recovery mode’ when start up sequence is on going. What you need to do is, past the BIOS splash screen, hold down the Shift key and repeatedly hit the F8 key. Doing so should get you to the recovery mode, but it might take a few tries before you achieve that.

Once the Recovery screen is displayed, click the See advanced repair options button. In the next screen, hit the Troubleshoot button.
In the troubleshoot menu, click Advanced options, wherein lies Windows Startup Settings. Choose that.
The next screen will ask you to restart your PC, after which you’ll see the familiar Advanced Boot Option screen – the same one that’s been around since Windows XP – and you can choose Safe Mode here.

It’s really not clear as to why Microsoft would bury something as useful as Safe Mode so deep and complicated within various screens, but it definitely isn’t convenient, to say the least. Nevertheless, it does exist, and you can definitely achieve it if you know where to look.

 

[commodore64]

just tested switching bios to default legacy to run kaspersky and ophcrack on a efi laptop, worked fine, just switched it back when done and system booted up fine. Didnt do extensive testing, but it booted up fine and worked for days now.

 

[chrisaroz]

Looks like you have to hold shift key and repeatedly hit the f8 key

I'll try that again, but so far on the systems we've seen that doesn't work. Has anyone had luck with this trick?

 

[chrisaroz]

just tested switching bios to default legacy to run kaspersky and ophcrack on a efi laptop, worked fine, just switched it back when done and system booted up fine. Didnt do extensive testing, but it booted up fine and worked for days now.

Good to know! I wonder how long until we have some EFI enabled boot discs.

 

[jbartlett323]

Look at the last boot option on the website: I posted the test below, but does have images.

Looks like you have to hold shift key and repeatedly hit the f8 key

http://www.redmondpie.com/how-to-boot-into-windows-8-safe-mode/

From the website:

Booting Windows 8 In Safe Mode When PC Is Not Starting

This one is a little tricky, because it takes trial and error (and patience) to launch the Windows 8 ‘recovery mode’ when start up sequence is on going. What you need to do is, past the BIOS splash screen, hold down the Shift key and repeatedly hit the F8 key. Doing so should get you to the recovery mode, but it might take a few tries before you achieve that.

Once the Recovery screen is displayed, click the See advanced repair options button. In the next screen, hit the Troubleshoot button.
In the troubleshoot menu, click Advanced options, wherein lies Windows Startup Settings. Choose that.
The next screen will ask you to restart your PC, after which you’ll see the familiar Advanced Boot Option screen – the same one that’s been around since Windows XP – and you can choose Safe Mode here.

It’s really not clear as to why Microsoft would bury something as useful as Safe Mode so deep and complicated within various screens, but it definitely isn’t convenient, to say the least. Nevertheless, it does exist, and you can definitely achieve it if you know where to look.

There are other threads on this issues. But the short and sweet is that this does not work, unless the machine is in a boot-error state to begin with. So if your virus is allowing you to get to a login prompt, your SOL. I have tried many, many times to get into Safe Mode without booting first, and can find no way of doing so unless Win8 sees a failure. Horrible design...

 

[altrenda]

Try booting form recovery media or an install disk.

http://winsupersite.com/article/windows8/windows-8-tip-create-recovery-media-144098

http://www.bleepingcomputer.com/tutorials/create-a-windows-system-repair-disc/

http://www.bleepingcomputer.com/tutorials/windows-8-recovery-environment-command-prompt/

 

[chrisaroz]

Thanks altrenda, but I don't believe that gives you the option for Safe Mode (though it should allow us to get to some troubleshooting tools!) It seems like we're supposed to rely on "multiple failed attempts to start" and then Windows will automatically give us the Safe Mode option.

 

[rjframe]

It seems that the ISO for a boot disc has to be an EFI ISO, so most/all of the old images aren't compatible with newer boards. Does anyone know of any boot discs or rescue discs that ARE EFI?

I believe the Fedora live discs (16 or 17+) are UEFI. I haven't tried it yet, though.

 

[gravator]

I tried here the other day and I believe it worked, was to hold shift and hit f5 right after you restart or power on. Might give it a shot. Dang fast boot options!

 

[altrenda]

Thanks altrenda, but I don't believe that gives you the option for Safe Mode (though it should allow us to get to some troubleshooting tools!) It seems like we're supposed to rely on "multiple failed attempts to start" and then Windows will automatically give us the Safe Mode option.

With the recovery media, try selecting Troubleshoot, Advanced Options, Windows Startup
http://www.redmondpie.com/how-to-boot-into-windows-8-safe-mode/

 

[ohio_grad_06]

This might be considered more risky, but at least on older windows machines if the machine powered off before finishing boot up it would give you the options. Also the shift f8 method does not work reliably for me. Assuming there's a backup, what if you were to power the machine off during startup? That theoretically may throw it into the diagnostic screen. In my opinion Microsoft really did a bad job on windows 8. Been using it on my personal system since November and some things are ok, other things I still don't like.

Linux is sounding better and better.

 

[altrenda]

Linux is sounding better and better.

Problem is, not too many paying jobs fixing Linux desktops.

 

[tf76]

In regards to uefi boot software.
Rufus allows this. Boot from usb with your chosen software.

http://rufus.akeo.ie/

Regards,

 

[AndyM]

Has anyone tried the Microsoft DaRT Boot CD's in this situation?

Available through Technet

Andy

 

[ohio_grad_06]

Yes unfortunately about Linux. Just with windows 8 and office 2013 Microsoft really just has annoyed me. Majority of people I help still want windows 7. I know they backed off a little with office 2013, but really dislike the subscription model. With windows 8 the user interface is great for tablets but should not be forced, should have been choices. Also making it harder to get to safe mode seems silly. Most users don't seem to know the f8 key got you there. I mean really? But they are probably trying to make it so that guys like us can't work on it.

I have a lot to learn, but kinda hoping with the fallout over windows 8 and valve releasing steam for Linux and steambox supposedly this year, I'm hoping over the next few years Linux may grow. I do realize that Microsoft backed off on like office with the oem style license for the standard install being only allowed on one PC ever, but the fact they even tried to force that makes me slightly distrustful. And too, at what point do they have you renting your os per year and when do they take away the desktop ui? Just saying.