Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

32bit XP infected with ICE ransomware. Only have 64 W7 laptop to make boot USB


  • Please log in to reply
7 replies to this topic

#1 Mattbedrock

Mattbedrock

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:11:27 AM

Posted 15 June 2014 - 09:58 AM

I read the instructions on downloading Hitman Pro to create a bootable USB drive to try to save my older Windows XP machine from an ICE Ransomware infection. Was able to download both the 32 bit and 64 bit versions on my (currently) uninfected Win7 64 bit laptop. However I was only able to create a 64bit bootable USB that will not boot on my infected 32 bit machine.

 

I tried to run the 32 bit version on my 64 bit laptop but i can't get it to start. I am not very bright at this and I'm stuck. ideas? Do i need to find a 32bit machine?

 

Thanks in advance for any help offered.

 

Matt



BC AdBot (Login to Remove)

 


#2 JohnC_21

JohnC_21

  • Members
  • 24,310 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:11:27 AM

Posted 15 June 2014 - 10:01 AM

Install the 64bit version on your 64bit computer. Create the USB. It should run on the 32bit computer. This was discussed in another thread on this forum.

 

Edit: If you cannot boot after trying again another solution is the Kaspersky Rescue Disk using WindowsUnlocker. Follow the steps shown. It's linux based so it doesn't care about Windows.

 

http://support.kaspersky.com/viruses/disinfection/8005

 

Edit: Did you make sure your USB key was the first boot device in BIOS?


Edited by JohnC_21, 15 June 2014 - 10:05 AM.


#3 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,609 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:11:27 AM

Posted 15 June 2014 - 07:55 PM

You should download the version that corresponds to the bit-type of the Windows version you will be using to create the Kickstart USB drive.

This is a quote from one of the developers of HitmanPro.Kickstart...

The Kickstart flash drive always contains both the 32bit and 64bit versions of HitmanPro. During the boot process it is determined what type of WIndows is on the (infected) machine, and the proper version of HitmanPro is selected. This way, you can use the same Kickstart flash drive on different versions (32 / 64 bit / XP / Vista / Win7) of Windows.

So during creation of the flash drive it is not important to know what version of Windows is on the infected machine you are about to use the flash drive for.

Hitmanpro on USB FLash drive help? - Post #7 by Edwin Engels (eengels)

If you still encounter problems using HitmanPro.Kickstart, please Contact HitmanPro Support directly.

erikloman and Edwin Engels (eengels) are two SurfRight Reps. who visit BC on occasion to answer questions and provide assistance. Edwin can be contacted by email at edwin@surfright.com

As SurfRight Reps, they and other Support Techs would be more familiar with any issues encountered using HitmanPro than any of our staff or members.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#4 Mattbedrock

Mattbedrock
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:11:27 AM

Posted 15 June 2014 - 08:15 PM

Thanks for you helpful suggestions. I will try the USB and hope for the best.

#5 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,609 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:11:27 AM

Posted 16 June 2014 - 06:29 PM


You're welcome. If you still encounter problems, do not hesitate to contact Edwin Engels for additional assistance.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#6 Mattbedrock

Mattbedrock
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:11:27 AM

Posted 16 June 2014 - 08:40 PM

Ok, it took me a couple of tries, but the hitman is grinding away in there. I sure hope it finds the slime that crept into my machine. Fingers crossed.

#7 Mattbedrock

Mattbedrock
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:11:27 AM

Posted 16 June 2014 - 09:29 PM

I think it's fixed. Hitman removed a couple of turds and rebooted my system. It came up clean.

I had to disconnect my external USB hard drive to get the USB stick to boot. I reconnected it and it came back up fine. Should I scan it with hitman to be sure nothing evil is lurking there?


Thanks again for the assistance and kindness.

#8 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,609 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:11:27 AM

Posted 17 June 2014 - 05:23 AM

Should I scan it with hitman to be sure nothing evil is lurking there?

Sure...I would also recommend scanning with Malwarebytes Anti-Malware 2.0.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users