Unfortunately, Some ransomware completely disable the ability to access the desktop through safe mode.
Safe Mode with Command Prompt
regedit
HKLM > Software > Microsoft > Windows NT > CurrentVersion > Winlogon > Shell > explorer.exe
yay for being a power user
The person makes a SJDB (Silent Java Drive-By)
I'm going to stop you right here because firstly, you need to verify whether or not you want to run Java applets, and secondly, an image can only have other files archived inside it. There's no way the archived virus could run unless you unpack it.