Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Cannot Choose an Option from the USB Boot Options Menu


  • Please log in to reply
6 replies to this topic

#1 peterfoster

peterfoster

  • Members
  • 55 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Chelmsford, Essex, United Kingdom
  • Local time:05:49 PM

Posted 29 July 2013 - 03:33 AM

Apologies if this question has been asked before. I have tried to search for an answer before posting this but to no avail.

I'm a victim of Ransomeware (The ICE Cyber jobbie.) I have followed the instructions online to download HitmanPro to an uninfected pc and habe saved it to a usb stick. I have inserted the USB stick into the infected computer ( a Dell Vostro 1000 laptop) which is running Windows XP 32 bit. I have booted from the USB drive and can see the following USB Boot Options-

1. Bypass master boot record (default)

2. Regular boot (when bypass failed)

3. Legacy Boot (last chance)

Please enter your choice: _



The problem is that when I key in "1" into the (flashing) choice field, as per the instructions, NO FIGURE APPEARS IN THE CHOICE FIELD! I've also tried to key in a "2" and then a "3" but the choice field remains stubbornly blank. I get the same effect whether I use the laptop's own keyboard or an external keyboard. Any guidance which can be provided would be gratefully received. Thanks.
 

 


Edited by peterfoster, 29 July 2013 - 08:16 AM.


BC AdBot (Login to Remove)

 


#2 GodfatherKing

GodfatherKing

  • Members
  • 587 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:07:49 PM

Posted 29 July 2013 - 08:12 AM

:welcome:

 

Is Num-lock on the keyboard on?

 

Let's try another tool:

 

 

:step1: Download USB-installer: http://www.pendrivelinux.com/universal-usb-installer-easy-as-1-2-3/

 

:step2: Download AVG-Rescue: http://www.avg.com/us-en/download-file-cd-arl-iso

 

:step3: Open USB-installer:

  • Get an USB-stick we can use for this operation.
  • Step 1: Select a Linux Distribution, choose AVG Rescue CD
  • Step 2: Select the AVG ISO, we downloaded it before.
  • Step 3: Select your path to USB-device <== Important, choose the correct drive letter
  • Press on create.

Note: In this example Mythbuntu is used, use AVG instead. 

Universal-USB-Installer.png

 

 

:step4: AVG Rescue:

 

Now plugin the USB-device with AVG-rescue on it.

 

1.  Reboot the computer and start the boot menu (F10 or F12). Then choose for the USB-device

 

2. At the Boot Menu: Choose AVG Rescue CD (1) and press Enter

3. Let it load, at the "Disclaimer Screen"... just choose I agree or not and press Enter

4. At the "Update Screen", choose Yes and press Enter

Next screen, Choose Update from Internet and press Enter

5. At the "Update Priority Configuration" window, choose Priority 2 Virus Database Update and press Enter

6. Let it update and when finished, Press any key to continue

7. You end up back at the "Update Screen", choose Return and press Enter

8. Your at the "Main Menu" screen, choose Scan, press Enter

9. "Scan Type Menu", choose "Volumes Scan - Selected Volumes" and press Enter

10. "Scan Volumes", choose "OK" and press Enter

11. "Scan Options", choose "OK" and press Enter

12. "Run Scan", choose "Yes" and press Enter

13. When scan is complete, Press any key to continue

14. "Info screen", choose "OK" and press Enter

15. To see the scan report, select "Report File" and press Enter
Please look over the list as some files can be crucial for the Windows system and deleting them can make it inoperative, if  in your not sure please Google the file or files.

16. "Scan Results Menu", use the up and down keys and choose "Select - Handle single or groups of infected files", press Enter
Go through the files and choose to Rename the infected file, don't choose Delete!
This is important....Rename<---

17. Read the "Warning Screen", "Yes" and Enter

18. Back to "Scan Results Menu", choose "Back or Return" to get to the "Main Menu" and then choose ---->Reboot System
Don't forget to take out the rescue cd.

19. All the malware files will be renamed to "_INFECTED.arl", to find all of these files....
Go to Start > Search > All Files and Folders > type "_INFECTED.arl" and click search.
  Example: malware.exe would be renamed to malware.exe_infected.arl

 

 


If you have received help from me and I don't have respond to you for almost >= 3 days, send me a Private Message.  :hello:


#3 peterfoster

peterfoster
  • Topic Starter

  • Members
  • 55 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Chelmsford, Essex, United Kingdom
  • Local time:05:49 PM

Posted 30 July 2013 - 08:03 AM

Many thanks for your response, GodfatherKing. 

 

I contrived to get my option accepted in the USB Boot Options menu and managed to run the programme on the USB stick, eventually succeeding in removing the virus.

 

Best Regards

 

Peter 



#4 GodfatherKing

GodfatherKing

  • Members
  • 587 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:07:49 PM

Posted 30 July 2013 - 08:08 AM

Well done.  :thumbup2: 

I would recommend to look of everything of the malware/virus has been removed. I would run some additional scans..


If you have received help from me and I don't have respond to you for almost >= 3 days, send me a Private Message.  :hello:


#5 peterfoster

peterfoster
  • Topic Starter

  • Members
  • 55 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Chelmsford, Essex, United Kingdom
  • Local time:05:49 PM

Posted 30 July 2013 - 08:19 AM

You're quite right. I ran full Microsoft Essential and Superantispyware  scans and came up with allsorts! I've also installed the Secunia software.



#6 GodfatherKing

GodfatherKing

  • Members
  • 587 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:07:49 PM

Posted 30 July 2013 - 08:20 AM

Give this tools a try...

 

:step1: Install and run MBAM

:step2:  Running TDSSKiller to obtain log

 

Note: Don't cure or delete a threat, but choose skip for all instead.

  • Please download TDSSKiller from here and save it to your Desktop
  • Doubleclick on TDSSKiller.exe to run the application, then click on Change parameters

tds2.jpg

  • In the Additional options: Check Detect TDLFS file system
  • Click Start Scan and allow the scan process to run

tds4-1.jpg

  • Choose for all threats to Skip for all of them.
  • Click Continue
  • Please post the TDSSKiller.[Version]_[Date]_[Time]_log.txt found in your root directory (typically c:\)

===================================================

 

:step3: ESET Online Scanner

==================

Note: If your AV is blocking Eset online scanner, please temporarily disable your AV.

 

I'd like us to scan your machine with ESET OnlineScan This process may may take several hours, that is normal.

  • Hold down Control and click on this link to open ESET OnlineScan in a new window.
  • Click the esetonlinebtn.png button.
  • For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
    • Click on esetsmartinstaller_enu.exe to download the ESET Smart Installer. Save it to your desktop.
    • Double click on the icon on your desktop.
  • Check "YES, I accept the Terms of Use."
  • Click the Start button.
  • Accept any security warnings from your browser.
  • Under scan settings, check "Scan Archives" and » UNCHECK "Remove found threats" <== Important
  • Click Advanced settings and select the following:
    • Scan potentially unwanted applications
    • Scan for potentially unsafe applications
    • Enable Anti-Stealth technology
  • ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
  • When the scan completes, click List Threats
  • Copy and paste the information in your next reply. (If no malware was found you will not be presented with a log).
  • Click the Back button.
  • Click the Finish button.

===================================================


If you have received help from me and I don't have respond to you for almost >= 3 days, send me a Private Message.  :hello:


#7 peterfoster

peterfoster
  • Topic Starter

  • Members
  • 55 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Chelmsford, Essex, United Kingdom
  • Local time:05:49 PM

Posted 30 July 2013 - 08:25 AM

Willdo. Thanks.






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users