Solved DISM - Restore Health QUESTION

[Mike Lynch]

I have my original Windows-7 hard drive from the Ransome Attack that crippled our family PC +- a year ago.
I just heard about DISM Restore Health function.
My question is:

If I have DISM installed on my Windows-10 PC and can connect my Windows-7 Hard Drive to it, how do I cause DISM to Restore Health to my Windows-7 Hard Drive without effecting my Windows-10 PC?

Mike

 

[SIW2]

Restorehealth does not work for win7.

 

[torchwood]

use KB947821, Dism's W7 equivalent

 

[Mike Lynch]

[MENTION=77976]torchwood[/MENTION], [FONT=&quot]- could you advise please?
[/FONT]
I believe I need to set up a functioning Windows-7 Pro 64PC, and attach my former Windows-7 Pro 64PC via a USB Dock then run DISM.

Is my thinking correct or how would you suggest I do it.

Mike

 

[torchwood]

Hi Mike,

if you run DISM, you will get error 87.....(basically not a valid operation)
as i said Download KB947821 (correct version.. likely x64) it >>to a usb<<
Then on your corrupted comp run it OFFLINE
(same can be done for the AV of your choice)

 

[Mike Lynch]

[FONT=&quot]@[/FONT]torchwood[FONT=&quot], [/FONT][FONT=&quot]- could you advise please?[/FONT]

I will ask, all I have is the Hard Drive from the corrupted / hacked PC.
I have the ability to install this Hard Drive as the C:\ Drive in a PC, however, it will not Boot.
Will I be Booting from a Thumb Drive with the Download you mentioned on it?
Do I understand your instruction correctly?

Mike

 

[SIW2]

You would need to be able to boot into the os to use it.

 

[Mike Lynch]

Seems like I'm at a dead end!

Any other thoughts on how I could proceed?

Mike

 

[Nik K]

Seems like I'm at a dead end!

Any other thoughts on how I could proceed? Mike

Hi Mike,

I've had this sort of thing happen to me before. I have a few questions:

1. What exactly happened in the ransom attack? Did in lock you out of your OC with a note asking for bitcoin or did it manifest differently?
2. Do you still have your old system or is it only a detached HD?
3. Have you tried to access the files on it via an enclosure on a different device?
4. Is you ultimate goal to get your data or restore the OS?
5. What have you tried so far?

- Nik

 

[torchwood]

As SIW2 said you need a "running" OS to be able to use the KB
depends on the message you get when the OS will not boot

as we dont know the background its rather difficult for us to give you usefull instructions
did you pull the HD from another comp, if so put it back BUT keep it OFFLINE if you believe its been hacked
post any error messages
has any other forum given you help in regard to the malware issue if so post a link to it

 

[Mike Lynch]

@torchwood,

I am stymied!

The Hack occurred almost a year ago.
I struggled to recover beginning with removing the Original, Hacked Drive and Cloning it.
I installed the Cloned Drive in the Original PC and started to try to undo the damage.
Month after month went by but no perfect solution.
While I was doing what I could Microsoft and Spectrum joined forces to overwhelm my efforts.
Microsoft Locked my Microsoft Account as it was being used by the Hacker to do, "whatever".
Once this was done, I was locked out of my Spectrum Email Account, losing years of history, photos and Email Addresses of all 20 years of Roadrunner history of friends and family, a disaster for an 80-year-old as simultaneously my memory is getting scrambled and guessing what an Email Address might have been is very unreliable.
To make it worse, Spectrum, the greedy SKUM that they are, decided that any Roadrunner Account not accessed in six months was history.
So now, my Microsoft Account has been reopened, and Spectrum has joined the ranks of the Hacker.
The Hacker must have been a novice as he/she stated that they needed to talk with me but left no way of doing so.
There was no Phone Number, Text, and No Email Address which would not have worked as I had no access to my Email.
Bottom line, a fiasco!
I will start assembling a PC to mount the Original "Hacked" Drive in today.
I will then try and Boot from it and report what happens.
Be patient as I make many mistakes, requiring re-do's.
I appreciate your interest and advice.

Mike

PS To @Nik K Is your ultimate goal to get your data or restore the OS?
(To somehow, retrieve Email from the MS Office email Archives on the Drive. As I recall, there were several, about three)

 

[torchwood]

what ever you do KEEP the "new" set-up OFFLINE....

run any "clean-up" operations via a USB download
As you cloned the drive the "infection" would have been carried over/copied to the new set-up

Do yo have a MS account linked to W11