BleepingComputer.com: Error Message System32\drivers\ntfs.sys Corrupt or Missing After Scanning with Windows Security Essentials

Jump to content

Forum Guidelines

Posted Image Read the following topic before creating a new topic in this forum. It contains instructions on the what we would like you to post, which will enable us to help you more quickly.

Preparation Guide For Use Before Using Malware Removal Tools and Requesting Help


Posted Image Unfortunately, with the amount of logs we receive per day, the average response time is 5 days. I want to assure you, though, that your topic will be looked at and responded to. So please be patient.


Posted Image DO NOT RUN ComboFix unless requested to.


Posted Image Only members of the Malware Response Team or Moderators are allowed to help people with logs. Anyone else should refrain from posting to another user's log.


Posted Image When posting a log please put the type of infection you have in the topic title. IE: Winfixer, Virtumonde, WinTools, WebSearch, Home Search Assistant, etc.


Posted Image Do not bump your topic. We try to resolve logs on a first come/first served basis. By bumping your log you will be pushed back in line due to the new date of your bump.
  • 2 Pages +
  • 1
  • 2
  • You cannot start a new topic
  • This topic is locked

Error Message System32\drivers\ntfs.sys Corrupt or Missing After Scanning with Windows Security Essentials

#16 User is offline   tjpitts10 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 52
  • Joined: 17-September 10

Posted 24 April 2011 - 05:12 PM

That's all of it.

#17 User is offline   Noviciate 

  • Forum Addict
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Malware Response Team
  • Posts: 3,676
  • Joined: 01-November 05
  • Gender:Male
  • Location:Numpty HQ

Posted 24 April 2011 - 05:51 PM

Right, we'll see if it can offer a solution. You need to boot into xPud, navigate to the flashdrive folder and open a Terminal, all as before.
This time you need to run bash rst.sh -r and when prompted for a number, enter 251
Once complete, shut down the PC, withdraw the flashdrive and see if you can get the PC to boot.

Also, did you successfully boot into the Recovery Console when you tried - this will be our next port of call if the above doesn't work.
Team Numpty - Poking a finger in the eye of malware since a week last Thursday!

#18 User is offline   tjpitts10 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 52
  • Joined: 17-September 10

Posted 24 April 2011 - 06:08 PM

Still not booting. Stuck on

"Windows could not start because the following file is missing or corrupt: System32\Drivers\Ntfs.sys"

"You can attempt to repair this file by starting Windows Setup..."

Yes, I was able to boot to the Recovery Console.

This post has been edited by tjpitts10: 24 April 2011 - 06:09 PM


#19 User is offline   Noviciate 

  • Forum Addict
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Malware Response Team
  • Posts: 3,676
  • Joined: 01-November 05
  • Gender:Male
  • Location:Numpty HQ

Posted 25 April 2011 - 01:39 PM

Good evening. :)

From what I can ascertain, there are a number of possibilities with this particular error message and not all involve the file ntfs.sys.

1) It's possible that your PC has a faulty memory module and this is causing Windows to fail to load. Do you know how much memory the PC has and whether it has more than one RAM chip in it?

2) It's also possible that the hard drive has some faulty sectors and that is the cause of the problem. The instructions below will try to solve this particular problem - if it's the problem obviously.

3) Finally, there's always the possibility that the file ntfs.sys is actually corrupt. I don't think this is the case, but we'll look at replacing it if the following fails...

Boot the PC using the XP disc that you have and when the text-based part of Setup begins, follow the prompts. Select the repair or recover option by pressing R.
If you have a dual-boot or multiboot system, select the installation that you want to access from the Recovery Console.
When you are prompted, type the Administrator password. If you haven't set up an Admin password, leave it blank.
At the command prompt, enter: chkdsk /r (note the space between chkdsk and /r) and allow it to complete undisturbed.
Remove the CD/DVD then reboot and cross your fingers.
Team Numpty - Poking a finger in the eye of malware since a week last Thursday!

#20 User is offline   tjpitts10 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 52
  • Joined: 17-September 10

Posted 25 April 2011 - 09:04 PM

Well, chkdsk did say it found and fixed one or more errors but... no go with the booting.

Now what?

#21 User is offline   Noviciate 

  • Forum Addict
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Malware Response Team
  • Posts: 3,676
  • Joined: 01-November 05
  • Gender:Male
  • Location:Numpty HQ

Posted 26 April 2011 - 01:20 PM

Quote

Do you know how much memory the PC has and whether it has more than one RAM chip in it?

Team Numpty - Poking a finger in the eye of malware since a week last Thursday!

#22 User is offline   tjpitts10 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 52
  • Joined: 17-September 10

Posted 26 April 2011 - 06:19 PM

According to the system information it has 1017528 KB. Is there a way I can find out without taking the computer apart?

#23 User is offline   Noviciate 

  • Forum Addict
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Malware Response Team
  • Posts: 3,676
  • Joined: 01-November 05
  • Gender:Male
  • Location:Numpty HQ

Posted 27 April 2011 - 02:32 PM

Good evening.,
:)

I don't know of any way apart from with a screwdriver when you can't get Windows to boot. Can you see a Microsoft sticker on the PC that has the Windows Product Key on it?
Team Numpty - Poking a finger in the eye of malware since a week last Thursday!

#24 User is offline   tjpitts10 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 52
  • Joined: 17-September 10

Posted 27 April 2011 - 05:07 PM

There are 2 512MB memory chips. The sticker says Windows XP Professional.

#25 User is offline   Noviciate 

  • Forum Addict
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Malware Response Team
  • Posts: 3,676
  • Joined: 01-November 05
  • Gender:Male
  • Location:Numpty HQ

Posted 27 April 2011 - 05:24 PM

Assuming the sticker has the Product Key on it, which you probably won't need but it never hurts to have it, I suggest you try a Repair Install: http://camtech2000.net/Pages/XP_Repair.htm

This will leave all your personal files intact but hopefully will repair your Operating System.
Team Numpty - Poking a finger in the eye of malware since a week last Thursday!

#26 User is offline   tjpitts10 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 52
  • Joined: 17-September 10

Posted 27 April 2011 - 05:41 PM

The Windows CD I have is Home Edition. The Windows sticker on the computer says Professional. Does that matter??

#27 User is offline   Noviciate 

  • Forum Addict
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Malware Response Team
  • Posts: 3,676
  • Joined: 01-November 05
  • Gender:Male
  • Location:Numpty HQ

Posted 27 April 2011 - 05:45 PM

I'd say that it did, so that's the end of that idea. Is there any chance of getting hold of the right installation disc from someone?
Team Numpty - Poking a finger in the eye of malware since a week last Thursday!

#28 User is offline   tjpitts10 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 52
  • Joined: 17-September 10

Posted 27 April 2011 - 06:13 PM

Probably not unless we can find one at a computer repair shop.

I am finding some on Ebay. Does it also matter if it's a SP2 or SP3?

This post has been edited by tjpitts10: 27 April 2011 - 07:29 PM


#29 User is offline   Noviciate 

  • Forum Addict
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Malware Response Team
  • Posts: 3,676
  • Joined: 01-November 05
  • Gender:Male
  • Location:Numpty HQ

Posted 28 April 2011 - 02:04 PM

Good evening. :)

When I replied to your original post I was of the opinion that I could resolve the issue with relatively little fuss, and I was wrong - sorry. A repair install may resolve your problem and a full install will, but there may be other options that require no cash expenditure on your part and I think it would be wise to explore those first.
The best place I can suggest to find better answers than mine is in this part of Bleeping Computer where the Techs hang out. Start a fresh thread and link to this one so that all the steps that have already been taken won't be duplicated and any pertinent information can be easily accessed.
Team Numpty - Poking a finger in the eye of malware since a week last Thursday!

Share this topic:


  • 2 Pages +
  • 1
  • 2
  • You cannot start a new topic
  • This topic is locked

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users