Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Missing or corrupt hal.dll


  • Please log in to reply
20 replies to this topic

#1 APL23

APL23

  • Members
  • 58 posts
  • OFFLINE
  •  
  • Local time:02:34 AM

Posted 09 April 2009 - 05:19 PM

Dear O/S Expert,

In trying to rid my system of Vundo http://www.bleepingcomputer.com/forums/t/208353/vundogrb-detected-and-quarantined-by-mcafee/, I have inadvertently damaged Windows XP to the point where the system won't boot up.

I've been working with a Malware expert who suggested a Repair, but I seem to have some kind of partition that won't allow for it. As such, she is suggesting I seek help elsewhere. Not sure if you can see my post (link above), but here's a summary of where things went wrong:

***********************************************************************************************
In trying to remove the ASK Toolbar, the following occurred - Found / checked: R1-HKLM..., R1-HKCU..., 02-BHO:AskBar..., 03-Toolbar:AskToolbar..., 023-Service:ASKService...

Clicked Fix, HJT said it needed to restart the computer and to close all browsers and explorer windows.

Restarted computer.

Upon restart: Windows could not start because the following file is missing or corrupt: \system32\hal.dll. Please re-install a copy of the above file.
*************************************************************************************************

As instructed, tried: expand d:\i386\hal.dl_ c:\windows\system32\hal.dll in Recovery Console, but got "unable to create file hal.dll. 0 file expanded."

*************************************************************************************************

I was then instructed to try a Repair Install. In Windows XP Home Edition Setup. "The following list shows the exsiting partitions and unpartitioned space on this computer". Selected "To set up Windows XP on the selected item, press ENTER".

The box directly below that:

28608 MB disk 0 at Id 0 on bus 0 on atapi [MBR]

-: Partition 1 [FAT] 31 Mb (24 Mb free)
C: Partition 2 [NTFS] 28577 Mb (11365 Mb free)

I was instructed to: "Click on the smaller partition and follow the directions to delete that partition. Then you will have only one partition. Select it to do the repair install."

*******************************************************************************
I went on to try the Repair on C: Partition2 and got this:

Set up will install Windows XP on C: Partition 2 [NTFS]

Use the up and down keys to select the file system you want then press enter. If you want to select a different partition for Windows XP press esc.

-format the partition using NTFS file system (quick)
-format the partition using FAT file system (quick)
-format the partition using the NTFS file system
-format the partition using the FAT file system
-leave the current file system intact

I selected the last - "no changes", got the following warning:

Caution: a \Windows folder already exists that may contain a Windows installation. If you continue, the existing Windows installation will be overwritten.

All files, subfolders, user accounts, applications, security and desktop settings for that Windows installation will be deleted. The "My Documents" folder may also be deleted.

-To use the folder and delete the existing Windows installation in it, press L
-To use a different folder, press esc
-To quit setup press F3.

I hit F3, since I did not want to lose all of my files.

*************************************************************************************************

I can't seem to get to the screen for the Repair option. It was suggested I read another article http://www.michaelstevenstech.com/XPrepairinstall.htm, Warning!! #2, If the Repair Option is not Available, not sure if I should try that...

I've been working on this since March 4th (daily) and still don't have a functional computer.

Any advice is very much appreciated.

Thanks,

Edit: Made HijackThis Log link clickable for ease of reference for assistance. ~ Animal

BC AdBot (Login to Remove)

 


#2 Budapest

Budapest

    Bleepin' Cynic


  • Moderator
  • 23,577 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:04:34 PM

Posted 13 April 2009 - 04:56 PM

Boot back into the Recovery Console and type the following commands:

Attrib -H -R -S C:\Boot.ini
DEL C:\Boot.ini
BootCfg /Rebuild
Fixboot

The power of accurate observation is commonly called cynicism by those who haven't got it.

—George Bernard Shaw

#3 APL23

APL23
  • Topic Starter

  • Members
  • 58 posts
  • OFFLINE
  •  
  • Local time:02:34 AM

Posted 13 April 2009 - 06:32 PM

Thanks Budapest,

As a bit of a neophite, I apologize in advance.

I'm in Recovery Console, and I see this:

1: C:\WINDOWS

Which Windows installation would you like to log onto
(To cancel, press ENTER)?

Is there an answer to that question prior to typing the commands?

Tks,

#4 Budapest

Budapest

    Bleepin' Cynic


  • Moderator
  • 23,577 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:04:34 PM

Posted 13 April 2009 - 06:46 PM

Yeah, answer 1 to that question first.
The power of accurate observation is commonly called cynicism by those who haven't got it.

—George Bernard Shaw

#5 APL23

APL23
  • Topic Starter

  • Members
  • 58 posts
  • OFFLINE
  •  
  • Local time:02:34 AM

Posted 13 April 2009 - 06:51 PM

OK,

At C:\WINDOWS, tried typing the attrib command but I got "The parameter is not valid".

Should I be typing this attrib command at the C:> or at C:\WINDOWS> ?

Tks,

#6 Budapest

Budapest

    Bleepin' Cynic


  • Moderator
  • 23,577 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:04:34 PM

Posted 13 April 2009 - 06:58 PM

It shouldn't matter but you can try it from C:\

Make sure that you get the syntax exactly correct, watch the spaces.
The power of accurate observation is commonly called cynicism by those who haven't got it.

—George Bernard Shaw

#7 APL23

APL23
  • Topic Starter

  • Members
  • 58 posts
  • OFFLINE
  •  
  • Local time:02:34 AM

Posted 13 April 2009 - 07:22 PM

...watching the spaces but still getting "the parameter is not valid".

Here's what I've been typing:

C:\WINDOWS>attrib -h -r -s C:\boot.ini

I've tried with a space between the WINDOWS> and attrib command, I've tried caps on / off, etc.

What I am doing wrong here?

Tks,

#8 Budapest

Budapest

    Bleepin' Cynic


  • Moderator
  • 23,577 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:04:34 PM

Posted 13 April 2009 - 07:31 PM

Try these commands. If one doesn't work move on to the next. The first command should move you up to the root directory.

cd..
Attrib -H C:\Boot.ini
Attrib -R C:\Boot.ini
Attrib -S C:\Boot.ini
DEL C:\Boot.ini


Report back what happens.
The power of accurate observation is commonly called cynicism by those who haven't got it.

—George Bernard Shaw

#9 APL23

APL23
  • Topic Starter

  • Members
  • 58 posts
  • OFFLINE
  •  
  • Local time:02:34 AM

Posted 13 April 2009 - 07:46 PM

I can't get to the root directory, only C:\WINDOWS>

#10 Budapest

Budapest

    Bleepin' Cynic


  • Moderator
  • 23,577 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:04:34 PM

Posted 13 April 2009 - 07:49 PM

Skip that command and move on to the next one.
The power of accurate observation is commonly called cynicism by those who haven't got it.

—George Bernard Shaw

#11 APL23

APL23
  • Topic Starter

  • Members
  • 58 posts
  • OFFLINE
  •  
  • Local time:02:34 AM

Posted 13 April 2009 - 07:58 PM

C:\WINDOWS>attrib -h C:\boot.ini = The system cannot find the file or directory specified.
C:\WINDOWS>attrib -r C:\boot.ini = The system cannot find the file or directory specified.
C:\WINDOWS>attrib -s C:\boot.ini = The system cannot find the file or directory specified.
C:\WINDOWS>del C:\boot.ini = No matching files were found.

What next?

#12 Budapest

Budapest

    Bleepin' Cynic


  • Moderator
  • 23,577 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:04:34 PM

Posted 13 April 2009 - 08:05 PM

Try this command:

bootcfg /rebuild

If you get asked "Enter Load Identifier" type anything you want (it is just a description of the operating system, it doesn't matter what you put).

If you get asked "Enter Operating System Load Options" type: "/fastdetect"
The power of accurate observation is commonly called cynicism by those who haven't got it.

—George Bernard Shaw

#13 APL23

APL23
  • Topic Starter

  • Members
  • 58 posts
  • OFFLINE
  •  
  • Local time:02:34 AM

Posted 13 April 2009 - 08:15 PM

C:\WINDOWS>BOOTCFG /rebuild
Scanning all disks for Windows installations.
Please wait, since this may take a while...
The Windows installation scan was successful.
Note: These results are stored statically for this session. If the disk configuration changes during this session, in order to get an updated scan, you must first reboot the machine and then rescan the disks.
Total identified Windows installs: 1
[1]: C:\WINDOWS
Add installation to boot list? (Yes/No/All):

Shall I add - Yes?

Then what?

#14 Budapest

Budapest

    Bleepin' Cynic


  • Moderator
  • 23,577 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:04:34 PM

Posted 13 April 2009 - 08:19 PM

Yes - you should add.
The power of accurate observation is commonly called cynicism by those who haven't got it.

—George Bernard Shaw

#15 APL23

APL23
  • Topic Starter

  • Members
  • 58 posts
  • OFFLINE
  •  
  • Local time:02:34 AM

Posted 13 April 2009 - 08:27 PM

I've entered the Load Identifier, and I've entered OS load option: /fastdetect.

Went straight back to C:\WINDOWS>.

Next step?




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users