creating boot cd or can usb for ransomware infection help

L

leskgr

New member
Joined
Jul 2, 2021
Posts
2
I can not create spybot boot cd ISO FILE Windows 10

1.) A question (can I create boot usb instead of cd)?
2.) Installed WAIK and all the libraries, but can not create boot cd.
3.)Does it matter if I create boot cd from a another clean installation of windows OR it is necessary to create BOOT CD from SAME computer?
Thank You in advance, sincerely, Grega from Slovenia
Report:
Started creating CD...
Cleaning up apps preparation folder...
----------------------------------------
Deleted C:\SpybotBootCD\Apps.
Preparing application collection...
----------------------------------------
Copied C:\Program Files (x86)\Spybot - Search & Destroy 2\SDPEStart.exe to C:\SpybotBootCD\Apps.
Copied C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll to C:\SpybotBootCD\Apps.
Copied C:\Program Files (x86)\Spybot - Search & Destroy 2\*.bpl to C:\SpybotBootCD\Apps.
----------------------------------------
Copied C:\Program Files (x86)\Spybot - Search & Destroy 2\Help\Licence-CE.rtf to C:\SpybotBootCD\Apps\Help.
----------------------------------------
Copied C:\Program Files (x86)\Spybot - Search & Destroy 2\Help\Licence-PE.rtf to C:\SpybotBootCD\Apps\Help.
Copying spybotsd2 from C:\Program Files (x86)\Spybot - Search & Destroy 2\...
Application menu created.
Application menu created.
----------------------------------------
Deleted C:\SpybotBootCD\Mount.
----------------------------------------
Deleted C:\SpybotBootCD\winpe.wim.
Copying operating system files...
----------------------------------------
Copied C:\Program Files\Windows AIK\Tools\PETools\x86\bootmgr to C:\SpybotBootCD\ISO\bootmgr.
Copied C:\Program Files\Windows AIK\Tools\PETools\x86\boot\etfsboot.com to C:\SpybotBootCD\ISO\bootmgr.
Copied C:\Program Files\Windows AIK\Tools\PETools\x86\boot to C:\SpybotBootCD\ISO\bootmgr.
Copied C:\Program Files\Windows AIK\Tools\PETools\x86\EFI to C:\SpybotBootCD\ISO\bootmgr.
Copied C:\Program Files\Windows AIK\Tools\PETools\x86\winpe.wim to C:\SpybotBootCD\ISO\bootmgr.
----------------------------------------
Copied C:\Program Files\Windows AIK\Tools\PETools\x86\winpe.wim to C:\SpybotBootCD\ISO\sources\boot.wim.
Mounting image file system...
----------------------------------------
Executing C:\Program Files\Windows AIK\Tools\x86\Servicing\dism.exe /Mount-Wim /WimFile:winpe.wim /index:1 /MountDir:C:\SpybotBootCD\Mount...
Deployment Image Servicing and Management tool
Version: 6.1.7600.16385
Mounting image
The operation completed successfully.
Installing package WinPE-HTA-Package...
----------------------------------------
Executing C:\Program Files\Windows AIK\Tools\x86\Servicing\dism.exe /image:C:\SpybotBootCD\Mount /Add-Package /PackagePath:"C:\Program Files\Windows AIK\Tools\PETools\x86\WinPE_FPs\winpe-hta.cab"...
Deployment Image Servicing and Management tool
Version: 6.1.7600.16385
Image Version: 6.1.7600.16385
Processing 1 of 1 - Adding package WinPE-HTA-Package~31bf3856ad364e35~x86~~6.1.7600.16385
The operation completed successfully.
Installing package WinPE-Scripting-Package...
----------------------------------------
Executing C:\Program Files\Windows AIK\Tools\x86\Servicing\dism.exe /image:C:\SpybotBootCD\Mount /Add-Package /PackagePath:"C:\Program Files\Windows AIK\Tools\PETools\x86\WinPE_FPs\winpe-scripting.cab"...
Deployment Image Servicing and Management tool
Version: 6.1.7600.16385
Image Version: 6.1.7600.16385
Processing 1 of 1 - Adding package WinPE-Scripting-Package~31bf3856ad364e35~x86~~6.1.7600.16385
The operation completed successfully.
Installing package WinPE-WMI-Package...
----------------------------------------
Executing C:\Program Files\Windows AIK\Tools\x86\Servicing\dism.exe /image:C:\SpybotBootCD\Mount /Add-Package /PackagePath:"C:\Program Files\Windows AIK\Tools\PETools\x86\WinPE_FPs\winpe-wmi.cab"...
Deployment Image Servicing and Management tool
Version: 6.1.7600.16385
Image Version: 6.1.7600.16385
Processing 1 of 1 - Adding package WinPE-WMI-Package~31bf3856ad364e35~x86~~6.1.7600.16385
The operation completed successfully.
Installing package winpe-legacysetup...
----------------------------------------
Executing C:\Program Files\Windows AIK\Tools\x86\Servicing\dism.exe /image:C:\SpybotBootCD\Mount /Add-Package /PackagePath:"C:\Program Files\Windows AIK\Tools\PETools\x86\WinPE_FPs\winpe-legacysetup.cab"...
Deployment Image Servicing and Management tool
Version: 6.1.7600.16385
Image Version: 6.1.7600.16385
Processing 1 of 1 - Adding package WinPE-LegacySetup-Package~31bf3856ad364e35~x86~~6.1.7600.16385
The operation completed successfully.
Installing package winpe-setup...
----------------------------------------
Executing C:\Program Files\Windows AIK\Tools\x86\Servicing\dism.exe /image:C:\SpybotBootCD\Mount /Add-Package /PackagePath:"C:\Program Files\Windows AIK\Tools\PETools\x86\WinPE_FPs\winpe-setup.cab"...
Deployment Image Servicing and Management tool
Version: 6.1.7600.16385
Image Version: 6.1.7600.16385
Processing 1 of 1 - Adding package WinPE-Setup-Package~31bf3856ad364e35~x86~~6.1.7600.16385
The operation completed successfully.
Installing package winpe-setup-client...
----------------------------------------
Executing C:\Program Files\Windows AIK\Tools\x86\Servicing\dism.exe /image:C:\SpybotBootCD\Mount /Add-Package /PackagePath:"C:\Program Files\Windows AIK\Tools\PETools\x86\WinPE_FPs\winpe-setup-client.cab"...
Deployment Image Servicing and Management tool
Version: 6.1.7600.16385
Image Version: 6.1.7600.16385
Processing 1 of 1 - Adding package WinPE-Setup-Client-Package~31bf3856ad364e35~x86~~6.1.7600.16385
The operation completed successfully.
Installing package winpe-setup-server...
----------------------------------------
Executing C:\Program Files\Windows AIK\Tools\x86\Servicing\dism.exe /image:C:\SpybotBootCD\Mount /Add-Package /PackagePath:"C:\Program Files\Windows AIK\Tools\PETools\x86\WinPE_FPs\winpe-setup-server.cab"...
Deployment Image Servicing and Management tool
Version: 6.1.7600.16385
Image Version: 6.1.7600.16385
Processing 1 of 1 - Adding package WinPE-Setup-Server-Package~31bf3856ad364e35~x86~~6.1.7600.16385
The operation completed successfully.
Installing package winpe-pppoe...
----------------------------------------
Executing C:\Program Files\Windows AIK\Tools\x86\Servicing\dism.exe /image:C:\SpybotBootCD\Mount /Add-Package /PackagePath:"C:\Program Files\Windows AIK\Tools\PETools\x86\WinPE_FPs\winpe-pppoe.cab"...
Deployment Image Servicing and Management tool
Version: 6.1.7600.16385
Image Version: 6.1.7600.16385
Processing 1 of 1 - Adding package WinPE-PPPoE-Package~31bf3856ad364e35~x86~~6.1.7600.16385
The operation completed successfully.
Installing package winpe-mdac...
----------------------------------------
Executing C:\Program Files\Windows AIK\Tools\x86\Servicing\dism.exe /image:C:\SpybotBootCD\Mount /Add-Package /PackagePath:"C:\Program Files\Windows AIK\Tools\PETools\x86\WinPE_FPs\winpe-mdac.cab"...
Deployment Image Servicing and Management tool
Version: 6.1.7600.16385
Image Version: 6.1.7600.16385
Processing 1 of 1 - Adding package WinPE-MDAC-Package~31bf3856ad364e35~x86~~6.1.7600.16385
The operation completed successfully.
Installing package winpe-wds-tools...
----------------------------------------
Executing C:\Program Files\Windows AIK\Tools\x86\Servicing\dism.exe /image:C:\SpybotBootCD\Mount /Add-Package /PackagePath:"C:\Program Files\Windows AIK\Tools\PETools\x86\WinPE_FPs\winpe-wds-tools.cab"...
Deployment Image Servicing and Management tool
Version: 6.1.7600.16385
Image Version: 6.1.7600.16385
Processing 1 of 1 - Adding package WinPE-WDS-Tools-Package~31bf3856ad364e35~x86~~6.1.7600.16385
The operation completed successfully.
----------------------------------------
Executing C:\Program Files\Windows AIK\Tools\x86\Servicing\dism.exe /image:C:\SpybotBootCD\Mount /Set-InputLocale:0409:00000409...
Deployment Image Servicing and Management tool
Version: 6.1.7600.16385
Image Version: 6.1.7600.16385
Input locale has been set to: 0409:00000409
The operation completed successfully.
----------------------------------------
Executing C:\Program Files\Windows AIK\Tools\x86\Servicing\dism.exe /image:C:\SpybotBootCD\Mount /Set-ScratchSpace:128...
Deployment Image Servicing and Management tool
Version: 6.1.7600.16385
Image Version: 6.1.7600.16385
Scratch Space : 128MB
The operation completed successfully.
----------------------------------------
Executing C:\Program Files\Windows AIK\Tools\x86\Servicing\dism.exe /image:C:\SpybotBootCD\Mount /Add-Driver /driver:C:\SpybotBootCD\Drivers /recurse...
Deployment Image Servicing and Management tool
Version: 6.1.7600.16385
Image Version: 6.1.7600.16385
Error: 2
Cannot find the specified file 'C:\SpybotBootCD\Drivers'
The DISM log file can be found at C:\Windows\Logs\DISM\dism.log
Loading registry hives...
Copying apps to mounted folder...
About to copy the MISSING file C:\SpybotBootCD\Apps...
----------------------------------------
Copied C:\SpybotBootCD\Apps to C:\SpybotBootCD\Mount\Apps.
----------------------------------------
Could not copy C:\Windows\winhlp32.exe to C:\SpybotBootCD\Mount\Windows\System32!
Could not copy C:\Windows\system32\winver.exe to C:\SpybotBootCD\Mount\Windows\System32!
Could not copy C:\Windows\system32\notepad.exe to C:\SpybotBootCD\Mount\Windows\System32!
Could not copy C:\Windows\system32\xchm.exe to C:\SpybotBootCD\Mount\Windows\System32!
File operation failed (error 0x02)!
Saving shell options...
Copying system libraries from running system...
----------------------------------------
Could not copy C:\Windows\system32\oledlg.dll to C:\SpybotBootCD\Mount\Windows\System32!
File operation failed (error 0x78)!
----------------------------------------
Copied C:\Windows\system32\shfolder.dll to C:\SpybotBootCD\Mount\Windows\System32.
----------------------------------------
Copied C:\Windows\system32\IEAdvPack.dll to C:\SpybotBootCD\Mount\Windows\System32.
----------------------------------------
Could not copy C:\Windows\system32\oledlg.dll to C:\SpybotBootCD\Mount\Windows\System32!
File operation failed (error 0x78)!
----------------------------------------
Copied C:\Windows\system32\shfolder.dll to C:\SpybotBootCD\Mount\Windows\System32.
----------------------------------------
Copied C:\Windows\system32\IEAdvPack.dll to C:\SpybotBootCD\Mount\Windows\System32.
----------------------------------------
Could not copy C:\Windows\system32\oledlg.dll to C:\SpybotBootCD\Mount\Windows\System32!
Could not copy C:\Windows\system32\shfolder.dll to C:\SpybotBootCD\Mount\Windows\System32!
Could not copy C:\Windows\system32\IEAdvPack.dll to C:\SpybotBootCD\Mount\Windows\System32!
Could not copy C:\Windows\system32\oledlg.dll to C:\SpybotBootCD\Mount\Windows\System32!
Could not copy C:\Windows\system32\shfolder.dll to C:\SpybotBootCD\Mount\Windows\System32!
Could not copy C:\Windows\system32\IEAdvPack.dll to C:\SpybotBootCD\Mount\Windows\System32!
File operation failed (error 0x78)!
Unloading registry hives...
Preparing CD image file system...
----------------------------------------
Unmounting image file system...
----------------------------------------
Executing C:\Program Files\Windows AIK\Tools\x86\Servicing\dism.exe /Unmount-Wim /MountDir:C:\SpybotBootCD\Mount /commit...
Deployment Image Servicing and Management tool
Version: 6.1.7600.16385
Image File : C:\SpybotBootCD\winpe.wim
Image Index : 1
Saving image
Unmounting image
The operation completed successfully.
----------------------------------------
Copied C:\SpybotBootCD\WinPE.wim to C:\SpybotBootCD\ISO\sources\boot.wim.
Creating ISO image file...
----------------------------------------
Executing C:\Program Files\Windows AIK\Tools\x86\oscdimg.exe -n -h -lSpybotBootCD -bC:\SpybotBootCD\etfsboot.com C:\SpybotBootCD\ISO C:\SpybotBootCD\SpybotBootCD.iso...
OSCDIMG 2.55 CD-ROM and DVD-ROM Premastering Utility
Copyright (C) Microsoft, 1993-2007. All rights reserved.
Licensed only for producing Microsoft authorized content.
Scanning source tree
Scanning source tree complete (16 files in 8 directories)
Computing directory information
Computing directory information complete
Image file is 752486400 bytes
ERROR: Image is 70502400 bytes too large (681984000)
(use -m to override or try -o to optimize storage)
Click to expand...

Check the above for error messages, we could not create a valid ISO file.
 
Last edited by a moderator:
Hi,

I have edited your post a little to make it more appealing for others to respond.

Please do not use headings like that, it makes it appear as though you are shouting and aggressive which does not help in getting the attention from the right people.
 
Hello, Grega.

Please give us more information about your computer's issues and what exactly you are trying to do.

From what I understand, you got infected by Ransomware and now you are trying to make a clean install of Windows using a bootable media. Am I right?

I will be waiting for further details before giving any instructions.
 
I got an email a few months ago that somebody installed malware on my computer and wants my $BITCOINs.
My computer freezes so often and other 'unwanted' things happen both on my redhat8.4 and on windows 10 that no work is possible.

I want to know can I create bootable cd with spybot pro waik ob another Windows 10 computer or have I to use the same pc (libraries specific to hardware)?
Please ASAP simple yes no then I will post more.

Thank You in advance, Grega from Slovenia
 
Hi, Grega from Slovenia. :-)

I can't help you with the Spybot product, since I never used it. This is a link I found online about it: How to create a bootable CD - Spybot Anti-Malware and Antivirus

However, I can give you some hints, about your issue, and it's up to you to decide what you want to do.

============================

If you got infected by Ransomware, then your files have been encrypted. Right?

So the first thing I ask Ransomware victims to do is to check if their files can be decrypted:

1. Check if your files can be decrypted

Upload samples of encrypted files, ransom notes and any contact email addresses or hyperlinks provided by the cyber-criminals to ID Ransomware (IDR). This service is strictly for identifying what ransomware may have encrypted your files. It will attempt to point you in the right direction, and let you know if there is a known way of decrypting your files.

Next...

2. Check your computer

Regardless of the results at the ID Ransomware site, you have to check your computer and ensure that it is clean. We can help you to do this if you want.

I will need you to run a diagnostic tool, and let me check the produced logs.

Here are the instructions to do so:

Download Farbar Recovery Scan Tool and save it to your desktop. --> IMPORTANT

If your antivirus software detects the tool as malicious, it’s safe to allow FRST to run. It is a false-positive detection.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.
  • Double-click the FRST icon to run the tool. When the tool opens click Yes to disclaimer.
  • Press Scan button and wait for a while.
  • The scanner will produced two logs on your Desktop: FRST.txt and Addition.txt.
  • Please attach the content of these two logs in your next reply.

Let me know about your thoughts.
 
Last edited:
Hi, Grega.

Any news regarding your issue? Do you need assistance regarding the above? Please let us know what is happening and what did you decide.
 
You must log in or register to reply here.

Has Sysnative Forums helped you? Please consider donating to help us support the site!

Back
Top