BleepingComputer.com: Windows XP freezes at Mup.sys in safe mode...no administrator passowrd

Jump to content

Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

Windows XP freezes at Mup.sys in safe mode...no administrator passowrd Problem in Ophcrack and Error in NT Offline Passowrd and Registry Edit

#1 User is offline   cristyb 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 2
  • Joined: 24-April 11
  • Gender:Female
  • Location:Brainerd, MN

Posted 24 April 2011 - 09:16 PM

Dell Dimension 2400
Intel Pentium 4 Processor 2.20GHZ
Windows XP Professional

I apologize in advance about the length of this post but I am at my wits end and just want to be thorough. Also, please forgive me if the answer is somewhere here on the website, I have been dealing with this computer for nearly a month and am a little worn out on searching for answers.

The computer is my sister's. She inherited it from her boyfriend's father with no operating system cd except for a Windows XP Professional Upgrade cd(Includes Service pack 1, Version 2002).

The problems began when we attempted to hook it up to the internet. I found the Ethernet Controller on Dell Support and promptly solved that problem.

Then it began missing dll files and her icons were showing up unrecognized and it kept asking if she wanted to search the internet for programs to run applications she had previously ran on a daily basis with no problem. I downloaded a regedit hotifx and fixed that...I have both fixes on my memory stick USB if they are needed.

Then, her cat was running around and jumped down on the power strip, that everything was plugged into, and turned everything off. When she turned it back on nothing happened. I thought nothing of it at first and figured she had forgot to turn on the monitor or something trivial..that was not the case. Upon power up all the bells and whistles would fire up and the Dell loading screen would load and then....BLACK!!! I went home to my computer and did some research. :busy: Finding similar situations I found an article titled "Windows XP crashed? Here's help" by Charlie White. I was fearful that I would have to reinstall Windows so I had her get any cd's her boyfriend's father had. She came back with the upgrade cd mentioned above. This allowed me to get into Recovery Console and follow the instructions in the article. Using the enter key as the password for the administrator, I was able to run some of the commands and others were not allowed or the file destinations were not found. I did more research and was able to run "fixmbr" and "fixboot" and "chkdsk /r /c:". When the computer restarted it loaded the Dell screen and then the Windows XP screen....something we hadn't seen in a very long time on her monitor..I was ecstatic!! Success!! :clapping: Then the screen went black, once again <_< I restarted from the cd and hit "r" to enter the recovery console and when it asked for the administrator pwd I hit enter, like always,(previous owner had never entered a pwd), not recognized!! It gave me three tries and said to hit enter to reboot. I restarted in safe mode and the screen froze at the Mup.sys line and the keyboard went dead and I had to manually turn off the computer. I went back to my working computer to search for the Mup.sys error and was greeted by the same fix as before, so I tried again to use recovery console but it wouldn't take my "enter" as a password so I assumed that there was indeed a pwd so I went back to my computer and began searching for password recovery programs. I found Ophcrack, but when I ran th elive bootable cd I got the message "A Problem occurred while reading the SAM file found in /mnt/hda1/WINDOWS/system32/config/". I thought that I could use the RUN option to edit the registry but only got "Failed to execute child process.....(No such file or directory)", so I tried "NT Offline Password and Registry Editor" but instead of clearing the password when I ran the live bootable cd I got "ERROR: SAM Registry file(which conains user data) is not loaded!" I visited some other forums about NT and Ophcrack and saw that some other users had received the same errors but the problem was never addressed by any moderators or a solution was never offered.

I've taken the cover off and cleaned it. Ive detached all the periperals. Ive run chkdsk using the F command while the Windows XP loading screen is on and everything checks out. I also tried to reset to DELL factory settings using "ctrl, F11" but can't get it to work.

So I guess my questions is 1) Can I fix the SAM file through the Ophcrack RUN option..and if so, what would be the language I would use?...or 2)Can I fix it through the NT Registry Editor...and if so, how? Please there has to be a way to fix this. I am so tired. I have been going in circles with this as the fixes need you to have administrator access and I can't change the password without getting into Windows and I can't get into Windows without changing the SAM file, but I can't change the SAM file without the administrator password, which DOESN"T EXIST!! :wacko: Thank you in advance for your swift reply to my post. :flowers:

#2 User is offline   AustrAlien 

  • Inquisitor
  • PipPipPipPipPipPip
  • Find Topics
  • Group: BC Advisor
  • Posts: 4,706
  • Joined: 15-July 09
  • Gender:Male
  • Location:Cowra NSW Australia

Posted 24 April 2011 - 10:33 PM

Hello and :welcome: to the BC forums.

Try using a LIVE CD to perform an off-line system restore of the registry hives.

Using a working computer:
There are many options to use for a LIVE CD: Try Puppy Linux (download file size 128 MB)
When you have downloaded the ISO image, burn it to a CD using ImgBurn (choose "Write image file to disc"). The CD will be bootable.

Now to work on your problematic computer:
Boot from the Puppy Linux CD. You will be able to navigate to all the files on your HDD.

Off-line system restore using a LIVE CD

:step1: Navigate to C:\System Volume Information\
Inside that folder you will see a folder with a name beginning with "restore" followed by a long alpa-numeric code in brackets. Inside the "restore<bracketed long alpa-numeric code>" folder you will see a number of folders named "RP<3 digit number>". Choose the highest number: That is your most recent System Restore point.
Open the "RP<highest number>" folder and inside that you will see another folder called "snapshot". Finally, open the "snapshot" folder and you will be at this address ...
C:\System Volume Information\restore<bracketed long alpha-numeric code>\RP<highest number>\snapshot

Locate the 5 files that you need to copy from within the snapshot folder:
    _REGISTRY_MACHINE_SYSTEM
    _REGISTRY_MACHINE_SOFTWARE
    _REGISTRY_MACHINE_SECURITY
    _REGISTRY_MACHINE_SAM
    _REGISTRY_USER_.DEFAULT


Copy these 5 files from here, and paste into the "config" folder at following location ...
C:\Windows\System32\config <<< folder


:step2: In the "config" folder at C:\Windows\System32\config, locate the current registry hive files ...
    system
    software
    security
    sam
    default

.... and re-name them by appending .old to the filename, so that they now look like this ....
    system.old
    software.old
    security.old
    sam.old
    default.old


:step3: Still in the "config" folder at C:\Windows\System32\config
Re-name the files that you copied from the restore point:
    _REGISTRY_MACHINE_SYSTEM ... rename to SYSTEM
    _REGISTRY_MACHINE_SOFTWARE ... rename to SOFTWARE
    _REGISTRY_MACHINE_SECURITY ... rename to SECURITY
    _REGISTRY_MACHINE_SAM ...rename to SAM
    _REGISTRY_USER_.DEFAULT .... rename to DEFAULT (You MUST remove the dot in front of DEFAULT)


You have now completed the System Restore. Shut down the computer, removing the LIVE CD.


Does your Windows XP system start normally now?

This post has been edited by AustrAlien: 24 April 2011 - 10:34 PM

AustrAlien
Google is my friend. Make Google your friend too.

Posted Image

#3 User is offline   cristyb 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 2
  • Joined: 24-April 11
  • Gender:Female
  • Location:Brainerd, MN

Posted 25 April 2011 - 05:54 PM

Thank you so very much for taking the time to help me!! The fix worked like a charm and was very simple and had little typing involved. Puppy was the easiest program Ive used to date..the drag and drop for copying was very convenient. Thank you thank you thank you!! Solved!! :thumbsup:

#4 User is offline   AustrAlien 

  • Inquisitor
  • PipPipPipPipPipPip
  • Find Topics
  • Group: BC Advisor
  • Posts: 4,706
  • Joined: 15-July 09
  • Gender:Male
  • Location:Cowra NSW Australia

Posted 25 April 2011 - 06:03 PM

You are most welcome. I am pleased to see that things worked out well for you.

Thank you for letting me know of your success, and for your comments on the fix I offered.

Regards
AustrAlien
Google is my friend. Make Google your friend too.

Posted Image

#5 User is offline   merkman 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 17
  • Joined: 25-May 11

Posted 08 June 2011 - 08:36 AM

I just wanted to thank you for posting this solution, as well. My wife's computer randomly died back in December and I have spent HOURS AND HOURS AND HOURS here and there over the last several months trying to get the darn thing working. When I used my SATA usb adapter to connect to the drive, I could retrieve all files no problem but I couldn't get the darn thing to boot---in safe mode, off a CD, or anything. I had scoured all over the internet trying everything under the sun to fix it...and then recently I had a major virus issue that led me to a bleepingcomputer specialist to help me fix it. After such a pleasant experience I decided to search here, specifically, one last time for a way to fix my wife's computer. Well I stumbled upon your solution, and since I could access the drive externally via the USB adapter, I just plugged it in and did the manual system restore steps, popped in back in her computer, and *VOILA* good as new.

SOOOOOOOOOOO happy to get this fixed. Wished the other 10,000 forum posts across the internet mentioned this simple solution...not a one did! Such a big problem with such an easy fix! (you wouldn't believe how many people had to replace hard drives or reinstall Windows to accomplish the same thing!)

#6 User is offline   AustrAlien 

  • Inquisitor
  • PipPipPipPipPipPip
  • Find Topics
  • Group: BC Advisor
  • Posts: 4,706
  • Joined: 15-July 09
  • Gender:Male
  • Location:Cowra NSW Australia

Posted 08 June 2011 - 08:47 AM

Thank you for posting of your success.

Glad that you could use the info to successfully get Windows up and running again, too.
AustrAlien
Google is my friend. Make Google your friend too.

Posted Image

Share this topic:


Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users