Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Hitman Pro won't remove detected infections unless I buy the software


  • This topic is locked This topic is locked
4 replies to this topic

#1 kcsm

kcsm

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:10:24 PM

Posted 26 July 2013 - 07:09 PM

Approximately 2 months ago my husband's Lenovo T61p laptop was infected with "Your computer has been locked Ransomware."

At that time I downloaded HitmanPro from the link on another computer and then created the KickStart USB Drive and successfully removed the infection.

Yesterday, it happened again -locked Ransonware screen!

 I took the same USB drive and tried to remove it again.  It would not boot from the USB drive.

I went back and downloaded Hitman Pro again to another computer, erased everything on the USB drive and created another Hitman Pro Kickstart flashdrive.

Insert the flashdrive in the laptop, access the boot menu, and the the HitmanPro.Kickstart program loads.

The HitmanPro setup screen appears, I select option No, I only want to perform a one-time scan to check the computer.

Click the next button, the scan begins. Once it is finished there is a list of infections. However , when i clicked on next to remove nothing happens.

Thats when I notice in the lower leftt hand corner  " Your license has expired"  and removal of malicious software is disabled .

I am able to save a log of the infections but once I restart the locked Ransonware screen appears

I suspect that somewhere along the line i inadvertantly did something wrong.

 

Any suggestions ( besides buying the software)?

This laptop is about 7 or 8 years old. ( 32 bit, Windows XP) and hes going to have to buy a new one but not right now.

 

Thanks for your help.

 

KCSM

 

 

 



BC AdBot (Login to Remove)

 


#2 gringo_pr

gringo_pr

    Bleepin Gringo


  • Malware Response Team
  • 136,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto rico
  • Local time:10:24 PM

Posted 27 July 2013 - 03:04 AM


Hello


We are going to try System Restore to restore the system prior to the infection.

Depending on your Windows version.


Option 1.

Step 1: Use F8 to Boot to SafeMode With Command Prompt
Step 2: Use ctrl/alt/del (keys) to get task manager opened
Step 3: choose file and create new task
Step 4: Then Navigate to:
C:\windows\system32\restore\rstrui.exe and press Enter and press Enter (double click rstrui.exe) and press Enter (double click rstrui)
Step 5: Restore Computer to a Date you know you were virus free
Step 6: Run Malwarebytes

Option 2.

Step 1: Use F8 to Boot to SafeMode With Command Prompt
At the command prompt type in: rstrui.exe
I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic



My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Proud Graduate Of Malware Removal University

#3 kcsm

kcsm
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:10:24 PM

Posted 27 July 2013 - 07:58 AM

Thanks for responding.

That was the first thing i tried.

Got blue  screen and message:  "Sorry for the inconvenience......"

and then screen went back to F8 screen.

I'm thinking that because this keeps happening, I should purchase the HitmanPro software ?

 

kcsm



#4 gringo_pr

gringo_pr

    Bleepin Gringo


  • Malware Response Team
  • 136,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto rico
  • Local time:10:24 PM

Posted 27 July 2013 - 01:18 PM

Try this please. You will need a USB drive.

Download GETxPUD.exe to the desktop of your clean computer
  • Run GETxPUD.exe
  • A new folder will appear on the desktop.
  • Open the GETxPUD folder and click on the get&burn.bat
  • The program will download xpud_0.9.2.iso, and upon finished will open BurnCDCC ready to burn the image.
  • Click on Start and follow the prompts to burn the image to a CD.
  • Next download driver.sh to your USB drive
  • Remove the USB & CD and insert it in the sick computer
  • Boot the Sick computer with the CD you just burned
  • The computer must be set to boot from the CD
  • Gently tap F12 and choose to boot from the CD
  • Follow the prompts
  • A Welcome to xPUD screen will appear
  • Press File
  • Expand mnt
  • sda1,2...usually corresponds to your HDD
  • sdb1 is likely your USB
  • Click on the folder that represents your USB drive (sdb1 ?)
  • Confirm that you see driver.sh that you downloaded there
  • Press Tool at the top
  • Choose Open Terminal
  • Type bash driver.sh
  • Press Enter
  • After it has finished a report will be located on your USB drive named report.txt
  • Remove the USB drive and insert it back in your working computer and navigate to report.txt

    Please note - all text entries are case sensitive
Copy and paste the report.txt for my review
I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic



My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Proud Graduate Of Malware Removal University

#5 gringo_pr

gringo_pr

    Bleepin Gringo


  • Malware Response Team
  • 136,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto rico
  • Local time:10:24 PM

Posted 03 August 2013 - 12:14 AM

Due to the lack of feedback, this topic is now closed.

In the event you still have problems, please send me or any Moderator a Private Message and ask them to reopen this topic within the next 5 days.

Please include a link to your topic in the Private Message. Thank you.
I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic



My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Proud Graduate Of Malware Removal University




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users