Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

All anti-spyware apps auto-close, and Web browser crashes


  • This topic is locked This topic is locked
26 replies to this topic

#1 WhytePanther

WhytePanther

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:03:05 PM

Posted 13 February 2009 - 11:33 PM

Thankfully, I have a laptop that helps me to get some files back and forth, and to do some research, but this has got me just plain stumped. I did find and try the removal tool for CoolWWWSearch.SmartKiller, but that came up empty, even though it seems to be the symptoms. Did manage to get a log, so thanks in advance for any help.


DDS (Ver_09-02-01.01) - NTFSx86
Run by Patrick at 20:19:54.34 on Fri 02/13/2009
Internet Explorer: 6.0.2900.5512 BrowserJavaVersion: 1.6.0_11
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1534.875 [GMT -8:00]

AV: Norton Internet Security *On-access scanning enabled* (Outdated)
FW: Norton Internet Security *enabled*

============== Running Processes ===============

C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Dell\Media Experience\DMXLauncher.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Dell Photo AIO Printer 924\dlccmon.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\DNA\btdna.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\System32\svchost.exe -k HTTPFilter
C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\system32\dlcccoms.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\WINDOWS\system32\wuauclt.exe
C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
C:\Program Files\Symantec\LiveUpdate\AUPDATE.EXE
C:\Program Files\Symantec\LiveUpdate\LuCallbackProxy.exe
C:\Program Files\Symantec\LiveUpdate\LuCallbackProxy.exe
C:\Program Files\Symantec\LiveUpdate\LuCallbackProxy.exe
D:\dds.scr

============== Pseudo HJT Report ===============

uStart Page = about:blank
uSearch Page = hxxp://www.google.com
uDefault_Page_URL = hxxp://www.dell4me.com/myway
mDefault_Page_URL = hxxp://www.dell4me.com/myway
mStart Page = hxxp://www.dell4me.com/myway
uInternet Settings,ProxyOverride = *.local
mSearchAssistant = hxxp://www.google.com/ie
BHO: c:\windows\system32\hsfd83jfdg.dll: {c5bf49a2-94f3-42bd-f434-3604812c8955} - c:\windows\system32\hsfd83jfdg.dll
TB: Show Norton Toolbar: {90222687-f593-4738-b738-fbee9c7b26df} - c:\program files\common files\symantec shared\coshared\browser\1.7\UIBHO.dll
TB: {0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} - No File
EB: Real.com: {fe54fa40-d68c-11d2-98fa-00c0f0318afe} - c:\windows\system32\Shdocvw.dll
uRun: [BitTorrent DNA] "c:\program files\dna\btdna.exe"
uRun: [WMPNSCFG] c:\program files\windows media player\WMPNSCFG.exe
uRun: [SpybotSD TeaTimer] c:\program files\spybot - search & destroy\TeaTimer.exe
uRun: [tezrtsjhfr84iusjfo84f] c:\docume~1\patrick\locals~1\temp\csrssc.exe
mRun: [SigmatelSysTrayApp] stsystra.exe
mRun: [IAAnotif] c:\program files\intel\intel matrix storage manager\iaanotif.exe
mRun: [ATIPTA] "c:\program files\ati technologies\ati control panel\atiptaxx.exe"
mRun: [DVDLauncher] "c:\program files\cyberlink\powerdvd\DVDLauncher.exe"
mRun: [dla] c:\windows\system32\dla\tfswctrl.exe
mRun: [ISUSPM Startup] "c:\program files\common files\installshield\updateservice\isuspm.exe" -startup
mRun: [ISUSScheduler] "c:\program files\common files\installshield\updateservice\issch.exe" -start
mRun: [DMXLauncher] c:\program files\dell\media experience\DMXLauncher.exe
mRun: [ATICCC] "c:\program files\ati technologies\ati.ace\cli.exe" runtime -Delay
mRun: [dlccmon.exe] "c:\program files\dell photo aio printer 924\dlccmon.exe"
mRun: [ccApp] "c:\program files\common files\symantec shared\ccApp.exe"
mRun: [osCheck] "c:\program files\norton internet security\osCheck.exe"
mRun: [Symantec PIF AlertEng] "c:\program files\common files\symantec shared\pif\{b8e1dd85-8582-4c61-b58f-2f227fca9a08}\pifsvc.exe" /a /m "c:\program files\common files\symantec shared\pif\{b8e1dd85-8582-4c61-b58f-2f227fca9a08}\AlertEng.dll"
mRun: [AppleSyncNotifier] c:\program files\common files\apple\mobile device support\bin\AppleSyncNotifier.exe
mRun: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
mRun: [DLCCCATS] rundll32 c:\windows\system32\spool\drivers\w32x86\3\DLCCtime.dll,_RunDLLEntry@16
mRun: [SunJavaUpdateSched] "c:\program files\java\jre6\bin\jusched.exe"
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\adober~1.lnk - c:\program files\adobe\acrobat 7.0\reader\reader_sl.exe
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {F4430FE8-2638-42e5-B849-800749B94EED} - c:\program files\partygaming.net\partypokernet\RunPF.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - {552781AF-37E4-4FEE-920A-CED9E648EADD} - c:\program files\common files\microsoft shared\encarta search bar\ENCSBAR.DLL
IE: {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - {FE54FA40-D68C-11d2-98FA-00C0F0318AFE} - c:\windows\system32\Shdocvw.dll
IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\program files\spybot - search & destroy\SDHelper.dll
DPF: {44990301-3C9D-426D-81DF-AAB636FA4345} - hxxps://www-secure.symantec.com/techsupp/asa/ss/sa/sa_cabs/tgctlsr.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab
DPF: {CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA} - hxxp://java.sun.com/products/plugin/autodl/jinstall-142-windows-i586.cab
DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab
DPF: {CAFEEFAC-0015-0000-0008-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_08-windows-i586.cab
DPF: {CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_09-windows-i586.cab
DPF: {CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_10-windows-i586.cab
DPF: {CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_11-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab
DPF: {CD995117-98E5-4169-9920-6C12D4C0B548} - hxxp://gamedownload.ijjimax.com/gamedownload/dist/hgstart/HGPlugin9USA.cab
DPF: {CE7D2BF2-D173-4CE2-9DAF-15EA153B5B43} - hxxp://entriq.vo.llnwd.net/o1/NBCUniversal/cabs/Entriq_3_5_2_2_Silent.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
DPF: {DE0FB644-C59B-46D1-B650-88BA945BC98F} - hxxp://entriq.vo.llnwd.net/o1/NBCUniversal/cabs/NBCUniversal_1_0_0_7.cab
DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} - hxxp://download.games.yahoo.com/games/web_games/popcap/bejeweled2/popcaploader_v6.cab
Handler: cdo - {CD00020A-8B95-11D1-82DB-00C04FB1625D} - c:\program files\common files\microsoft shared\web folders\PKMCDO.DLL
Notify: AtiExtEvent - Ati2evxx.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
STS: c:\windows\system32\hsfd83jfdg.dll: {c5bf49a2-94f3-42bd-f434-3604812c8955} - c:\windows\system32\hsfd83jfdg.dll

================= FIREFOX ===================

FF - ProfilePath - c:\docume~1\patrick\applic~1\mozilla\firefox\profiles\slj2bqj5.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://slashdot.org/
FF - plugin: c:\documents and settings\patrick\application data\mozilla\firefox\profiles\slj2bqj5.default\extensions\moveplayer@movenetworks.com\platform\winnt_x86-msvc\plugins\npmnqmp071101000055.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npbittorrent.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npgcplug.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npracplug.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npvirtools.dll
FF - plugin: c:\program files\real\realarcade\plugins\mozilla\npracplug.dll
FF - plugin: c:\program files\unity\webplayer\loader\npUnity3D32.dll

============= SERVICES / DRIVERS ===============

R2 ccEvtMgr;Symantec Event Manager;c:\program files\common files\symantec shared\ccSvcHst.exe [2007-6-4 109160]
R2 ccSetMgr;Symantec Settings Manager;c:\program files\common files\symantec shared\ccSvcHst.exe [2007-6-4 109160]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\common files\symantec shared\eengine\EraserUtilRebootDrv.sys [2008-1-18 109616]
R3 NAVENG;NAVENG;c:\progra~1\common~1\symant~1\virusd~1\20080706.002\NAVENG.SYS [2008-7-6 89936]
R3 NAVEX15;NAVEX15;c:\progra~1\common~1\symant~1\virusd~1\20080706.002\NAVEX15.SYS [2008-7-6 856336]
S3 Symantec Core LC;Symantec Core LC;c:\program files\common files\symantec shared\ccpd-lc\symlcsvc.exe [2007-7-6 1251720]

=============== Created Last 30 ================

2009-02-12 20:38 <DIR> --d----- c:\program files\Spybot - Search & Destroy
2009-02-12 18:48 15,000 a------- c:\windows\system32\hsfd83jfdg.dll
2009-02-12 18:47 289 a------- c:\windows\system32.exe
2009-02-12 18:47 289 a------- c:\windows\kernel32.exe
2009-02-12 18:47 385,024 a------- c:\windows\system32\WinNB55.dll
2009-01-24 08:32 <DIR> --d----- C:\PerfLogs
2009-01-16 18:23 49,152 a------- c:\docume~1\patrick\applic~1\upd.exe
2009-01-15 19:27 <DIR> --d----- c:\program files\Bonjour

==================== Find3M ====================

2008-12-12 11:18 87,336 a------- c:\windows\system32\dns-sd.exe
2008-12-12 11:11 61,440 a------- c:\windows\system32\dnssd.dll
2008-12-12 09:01 3,067,904 -------- c:\windows\system32\dllcache\mshtml.dll
2008-12-11 02:57 333,952 -------- c:\windows\system32\dllcache\srv.sys
2008-04-26 14:03 208 a------- c:\docume~1\patrick\applic~1\wklnhst.dat
2007-07-29 21:35 32 a----r-- c:\documents and settings\all users\hash.dat
2007-05-24 20:10 79,376 a------- c:\docume~1\patrick\applic~1\GDIPFONTCACHEV1.DAT
2006-02-23 17:53 774,144 a------- c:\program files\RngInterstitial.dll
2008-05-31 18:02 56 ---shr-- c:\windows\system32\611492F4A5.sys
2008-05-31 18:02 3,350 a--sh--- c:\windows\system32\KGyGaAvL.sys

============= FINISH: 20:22:02.90 ===============

BC AdBot (Login to Remove)

 


#2 fenzodahl512

fenzodahl512

  • Members
  • 6,738 posts
  • OFFLINE
  •  
  • Local time:07:05 AM

Posted 15 February 2009 - 03:42 AM

Please download SDFix by Andy Manchesta and save it to your desktop.
Double click SDFix.exe and it will extract the files to %systemdrive%
(Drive that contains the Windows Directory, typically C:\SDFix)

Please reboot into Safe Mode
  • In Safe Mode, right click the SDFix.zip folder and choose Extract All,
  • A new folder will be extracted to your %systemdrive%, typically C:\SDFix
  • Open the extracted folder and double click RunThis.bat to start the script.
  • Type Y to begin the script.
  • It will remove the Trojan Services then make some repairs to the registry and prompt you to press any key to Reboot.
  • Press any Key and it will restart the PC.
  • Your system will take longer that normal to restart as the fixtool will be running and removing files.
  • When the desktop loads the Fixtool will complete the removal and display Finished, then press any key to end the script and load your desktop icons.
  • Finally open the SDFix folder on your desktop and copy and paste the contents of the results file Report.txt along with any other requested logs at the end of these instructions.




NEXT


Please make sure you disable ALL of your Antivirus/Antispyware/Firewall before running ComboFix.. Please visit HERE if you don't know how.. Please re-enable them back after performing all steps given..

Please download ComboFix by sUBs from one of the locations below, and save it to your Desktop.

Link 1
Link 2
Link 3

Double click combofix.exe and follow the prompts. Please, never rename Combofix unless instructed.

If ComboFix asked you to install Recovery Console, please do so.. It will be your best interest..

When finished, it shall produce a log for you. Post that log and a fresh HijackThis log in your next reply..

Note: DO NOT mouseclick combofix's window while its running. That may cause it to stall




Please post these logs in your next reply... Post each log in separate post

1. SDFix
2. ComboFix
3. A fresh HijackThis log

Keep calm, make it simple, use your brain, don't freak out, and you'll be just fine..
Awesomeness: When I get sad, I stop being sad and be awesome instead.. True story - Barney Stinson
Posted Image Posted Image
Its gonna be legen.. wait for it.. dary! Cherish the pain, it means you're still alive


#3 WhytePanther

WhytePanther
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:03:05 PM

Posted 15 February 2009 - 12:32 PM

Roger Roger, As I mentioned earlier, based on the problems I've had already, I'll be passing those files to the problem computer via my laptop (more specifically, burned CDs) Also, because many of the advice posts I've read will eventually suggest disabling TeaTimer, since I can't get Spybot to run, but TeaTimer starts with my system, would it be acceptable to just end the process if that step comes up?

At any rate, starting to download the scanners now.

#4 WhytePanther

WhytePanther
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:03:05 PM

Posted 15 February 2009 - 01:05 PM

Had to extract the SDfix files on my laptop, but at least they ran on the infected computer. (Are you noticing a theme yet?)

However, after the first half of the SDfix scan, The infeted system crashed on startup. Error message is as follows:

STOP: c000021s {Fatal System Error}
The Session Manager Initialization system process terminated unexpectedly with a
status of 0xc0000034 {0x00000000 ox00000000).
The system has been shut down.

#5 WhytePanther

WhytePanther
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:03:05 PM

Posted 15 February 2009 - 01:23 PM

Tried to restart again, new error:

Windows could not start because the following file is missing or corrupt:
<Windows Root>\system32\hal.dll
Please re-install a copy of the above file

I managed to backup my files yesterday, so doing a full reformat/reinstall is an option at this point, As I assume Dell's hidden reinstall file isn't something that could be corrupted.

#6 fenzodahl512

fenzodahl512

  • Members
  • 6,738 posts
  • OFFLINE
  •  
  • Local time:07:05 AM

Posted 16 February 2009 - 01:38 AM

Hello.. Please read below article on how to recover from hal.dll error...

http://pcsupport.about.com/od/fixtheproble...storehaldll.htm

Since you need to do the command via Recovery Console, please have a read below on how to do a Recovery Console

http://pcsupport.about.com/od/termsr/p/recoveryconsole.htm


Please do as per suggested by both links and tell me the result of it :thumbup2:

Keep calm, make it simple, use your brain, don't freak out, and you'll be just fine..
Awesomeness: When I get sad, I stop being sad and be awesome instead.. True story - Barney Stinson
Posted Image Posted Image
Its gonna be legen.. wait for it.. dary! Cherish the pain, it means you're still alive


#7 WhytePanther

WhytePanther
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:03:05 PM

Posted 16 February 2009 - 01:51 AM

I don't have an original XP disc, Dell shipped my computer with just a recovery partition. I can't get at the files inside it without wiping the whole thing. Would it be possible to make some other sort of bootable CD, and if so, would a copy of the hal.dll file from my laptop work? It also has XP. Apart from that, it's calling around to a few friends to see if anyone has it.

#8 fenzodahl512

fenzodahl512

  • Members
  • 6,738 posts
  • OFFLINE
  •  
  • Local time:07:05 AM

Posted 16 February 2009 - 02:20 AM

You can borrow any Windows XP cd from your friend if they have one.. Can you try that first? :)

Yes, you can take out the hard disk from the computer and slave it (or make it as external hard disk) and copy hal.dll from another XP computer, but keep in mind, since that is a DELL computer, it will VOID the warranty..


About bootable CD, yes you can, but honestly I never use any bootable CD before, I just only use Windows CD to boot any unbootable computer :thumbup2:


Got to go to work now :step4:

Keep calm, make it simple, use your brain, don't freak out, and you'll be just fine..
Awesomeness: When I get sad, I stop being sad and be awesome instead.. True story - Barney Stinson
Posted Image Posted Image
Its gonna be legen.. wait for it.. dary! Cherish the pain, it means you're still alive


#9 WhytePanther

WhytePanther
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:03:05 PM

Posted 16 February 2009 - 02:33 AM

Well, I'll be making a few calls tomorrow then. Good thing I have the day off.

#10 fenzodahl512

fenzodahl512

  • Members
  • 6,738 posts
  • OFFLINE
  •  
  • Local time:07:05 AM

Posted 16 February 2009 - 03:30 AM

Ok.. enjoy your day off :thumbup2:

Keep calm, make it simple, use your brain, don't freak out, and you'll be just fine..
Awesomeness: When I get sad, I stop being sad and be awesome instead.. True story - Barney Stinson
Posted Image Posted Image
Its gonna be legen.. wait for it.. dary! Cherish the pain, it means you're still alive


#11 WhytePanther

WhytePanther
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:03:05 PM

Posted 16 February 2009 - 08:09 PM

I found a downloadable version of the recovery console elsewhere on the forums, so I tried it, and now I get ANOTHER error message while running the recovery console.

A problem has been detected and Windows has been shut down to prevent damage
to your computer

If this is the first time you've seen this Stop error screen,
restart your computer. If this screen appears again, follow
these steps:

Check to make sure you have adequate disk space. If a driver is
identified in the Stop message, disable the driver or check
with the manufacturer for driver updates. Try changing video
adapters.

Check with your hardware vendor for any BIOS updates. Disable
BIOS memory options such as caching or shadowing. If you need
to use Safe Mode to remove or disable components, restart your
computer, press F8 to select Advanced Startup Options, and then
select Safe Mode.

Technical information:

*** STOP: 0x0000007E (0xC0000005,0xf748E0BF,0xF78DA208,0xF78D9F08)


*** pci.sys - Address F748E0BF base at F7487000, DateStamp 3b7d855c


So yeah... It asked if I needed to install a SCSI controller as the recovery disc booted, so it could have had trouble accessing the hard drive, but naturally, a lot of this message is BS when you're booting from a CD. And yes, I did try it at least three times.

#12 fenzodahl512

fenzodahl512

  • Members
  • 6,738 posts
  • OFFLINE
  •  
  • Local time:07:05 AM

Posted 17 February 2009 - 12:20 AM

I found a downloadable version of the recovery console elsewhere on the forums, so I tried it, and now I get ANOTHER error message while running the recovery console.


I only know one place to download Recovery Console, yet, what I suggested to you is to find a Windows CD, now to download that "Recovery Console"..

There's a reason why I asked you to find a Windows CD, and it would because we need to copy a file from Windows CD (hal.dll) to that computer.. A standalone "Recovery Console" would be useless at this point unless we knew exactly where's the copy of hal.dll inside your computer...


So, please find a Windows CD and tell me more about it :thumbup2:


About Standalone Bootable Recovery Console, below is the ONLY location I found in the internet..


http://www.thecomputerparamedic.com/files/rc.iso


If you still can't find the Windows CD, please tell me, we may have to do a search on your computer via Recovery Console to look for the copy of hal.dll

Keep calm, make it simple, use your brain, don't freak out, and you'll be just fine..
Awesomeness: When I get sad, I stop being sad and be awesome instead.. True story - Barney Stinson
Posted Image Posted Image
Its gonna be legen.. wait for it.. dary! Cherish the pain, it means you're still alive


#13 WhytePanther

WhytePanther
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:03:05 PM

Posted 17 February 2009 - 12:27 AM

Well, that was sort of the last resort, as I've basically called everyone around me who might have a disc handy, and nobody has one. It is rather sad that a basic OS disc isn't standard in every PC box, eh? But as far as finding the file, I planned to just put an extra copy of the hal.dll from my laptop on the same CD, but since I couldn't get the CD to boot properly, it was a moot point. Although reading the file list that came in that .iso (which was the one I had found) seems like it does have the compressed version of the hal.dll. Either way, I'll ask around at work tomorrow, but I'm not holding up a lot of hope. If I come up empty, I'll just hit the recovery partition and start from scratch.

And I suppose I might not have been completely clear in my last post, I wasn't able to get the Recovery Console I downloaded to run to the point of getting the command prompt. If I had, then we'd probably be a step or two father along, I hope.

#14 fenzodahl512

fenzodahl512

  • Members
  • 6,738 posts
  • OFFLINE
  •  
  • Local time:07:05 AM

Posted 17 February 2009 - 12:45 AM

Ok.. Lets do this first and we will search a copy of hal.dll in the computer after you create a bootable Recovery Console CD :thumbup2:

When you have a blank cd, please do the following..

1. Please download RC.iso and save it to your Desktop.. Don't do anything with it yet.. We will later..


2. Please download ISO Recorder and save it to your Desktop.. Double-click it and install it to your computer..


3. Please navigate this website on tutorial how to use ISO Recorder to burn RC.iso into your blank CD.. You need to burn RC.iso into your cd and will need to use this cd upon rebooting..


4. Please reboot your computer and press either Delete or F2 button upon rebooting to load into bios.


5. Please change your Boot sequence or Boot Priority into CD/DVD first and Hard Disk (HDD) in second order.. Please navigate this website for some idea on how to change your boot order.. Make sure you Save your setting before exit the BIOS..


6. Please put the CD that contains RC.iso into CD/DVD drive.. and reboot your computer.. You should be able to enter into Recovery Console..


7. Tell me about it.. Also, tell me if you have any difficulty to do that..


Regards
fenzodahl512

Keep calm, make it simple, use your brain, don't freak out, and you'll be just fine..
Awesomeness: When I get sad, I stop being sad and be awesome instead.. True story - Barney Stinson
Posted Image Posted Image
Its gonna be legen.. wait for it.. dary! Cherish the pain, it means you're still alive


#15 WhytePanther

WhytePanther
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:03:05 PM

Posted 17 February 2009 - 01:29 AM

Oh, I didn't have a problem making the CD or booting from the CD. Once the Recovery Console was trying to boot, it crashed to the error I posted before. After the part where it loaded all of the various driver files, but I suspect just before I would have a command prompt.

I tried it one more time after a full power cycle, turning the power off at the surge protector, and came upon the same error after the Recovery Console came up to "Starting Windows"... And it is the exact same error as I posted earlier today, same memory addresses and everything.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users