Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

hpdskflt.sys ... unmountable_boot_volume


  • Please log in to reply
4 replies to this topic

#1 pnolans

pnolans

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:07:47 AM

Posted 02 December 2009 - 09:47 AM

I was watching a movie live on netflix a couple of days ago, and suddenly "AntiVirus 2009 Pro" started scanning all my drives.
I kept closing windows, but every command I tried to run gave me an error. Sorry, don't remember what it was.

Since I couldn't do anything, I tried rebooting... Had to hold down the power button just to do that.

This is my work laptop, I work for HP. It's got tons of AntiVirus crap on it.... I have no idea how this junk got by it.

The situation is now this.

When I try to boot "windows normally", it blue-screens with "unmountable_boot_volume"... when I try safe mode it gets to
hpdskflt.sys and bluescreens with a bottom-left bracket and question mark.

I've tried running Recovery Console, and it says no disk drive to run against. I've tried re-installing windows... it tells me it cant' find a drive to install to.

YET... I ran diagnostics in the BIOS, and it passed with no problems. I booted with UBCD4WIN, and run every disk diagnostics it has and it passes every one.
I was able to see the c:\ drive with UBCD4WIN. ??

I was able to install Ubuntu to some free space, and it works fine. But linux won't work for what I need this for. I need to be able to run Outlook and several HP utilities.

BUT... I need this for work...it's not critical , but I need to get Windows XP Pro back. I CAN turn it back in, and get IT Support to fix it, but then I'll be without a laptop for a week or two.

Can anyone help with this? I would like to be able to save at least SOME of the files, but it's not actually urgent that I do that.

I DON'T BELIEVE that the disk is bad, since it passes numerous diagnostics.

If it was a desktop, I would just throw another drive in there and start over. Re-install Windows.

Thanks in advance for any help

BC AdBot (Login to Remove)

 


#2 garmanma

garmanma

    Computer Masochist


  • Staff Emeritus
  • 27,809 posts
  • OFFLINE
  •  
  • Location:Cleveland, Ohio
  • Local time:08:47 AM

Posted 02 December 2009 - 11:09 AM

Follow these instructions and post back with the results if you need further help

http://www.bleepingcomputer.com/virus-remo...ivirus-pro-2009
Mark
Posted Image
why won't my laptop work?

Having grandkids is God's way of giving you a 2nd chance because you were too busy working your butt off the 1st time around
Do not send me PMs with problems that should be posted in the forums. Keep it in the forums, so everyone benefits
Become a BleepingComputer fan: Facebook and Twitter

#3 pnolans

pnolans
  • Topic Starter

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:07:47 AM

Posted 02 December 2009 - 01:09 PM

Follow these instructions and post back with the results if you need further help

http://www.bleepingcomputer.com/virus-remo...ivirus-pro-2009


I'd really love to do that, but regrettably, I can NOT boot the little rascal right now. I don't know how to run malware bytes on UBCD4WIN. There isn't a bootable version, is there?

Thanks,

Pat

Edited by pnolans, 02 December 2009 - 01:13 PM.


#4 Jeff Campbell

Jeff Campbell

  • Members
  • 28 posts
  • OFFLINE
  •  
  • Local time:07:47 AM

Posted 02 December 2009 - 01:31 PM

try deleting those files using ubunto?

#5 AustrAlien

AustrAlien

    Inquisitor


  • BC Advisor
  • 6,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cowra NSW Australia
  • Local time:10:47 PM

Posted 02 December 2009 - 01:40 PM

I don't know how to run malware bytes on UBCD4WIN. There isn't a bootable version, is there?

You could try this .... it would be a good start.
It will not fix your immediate problem though, which is most likely to have resulted from the untimely shut-down of the system.

Off-line removal of the malware "Antivirus System Pro" with UBCD4Win

WARNING:
(The information provided requires editing the Windows registry.)
Improper changes to the registry could render your computer inoperable.
The following instructions include steps to save a back-up copy of the relevant part of the registry before making any changes.
Do not neglect to make those back-up copies.

Step 1
Make a UBCD4Win LiveCD
Go to http://www.ubcd4win.com/howto.htm and follow the instructions to make a bootable CD.
Test: Boot the infected machine from the CD, to make sure that all is working as it should. You should see the UBCD4Win Desktop, and be able to browse the hard drive (C: ) and view all files and folders.
-------------------------------------------

Information for the following steps:
Refer to the following information about items related to "Antivirus System Pro" when viewing the files and folders on your hard drive, and the entries in the Windows registry.

Remove Antivirus System Pro (Uninstall Guide)
Posted by Grinler on June 5, 2009
http://www.bleepingcomputer.com/virus-remo...irus-system-pro

Associated Antivirus System Pro Files:
c:\WINDOWS\sysguard.exe
c:\WINDOWS\system32\iehelper.dll
C:\Documents and Settings\<UserProfile>\<random characters>\<4 random chars>sysguard.exe

Associated Antivirus System Pro Windows Registry Information:
HKEY_CURRENT_USER\Software\AvScan
HKEY_CLASSES_ROOT\CLSID\{BAD4551D-9B24-42cb-9BCD-818CA2DA7B63}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BAD4551D-9B24-42cb-9BCD-818CA2DA7B63}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "system tool"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "<random characters>"

-----------------------------------------

Step 2
Navigate to
C:\Documents and Settings\<username>\<random characters>\<4 random chars>\sysguard.exe <<< file
Please record the details of the folder names "<random characters>" and "<4 random chars>" (You will need this information later.).
Now, delete the folder "<random characters>" and all its contents.

Step 3
Check each of the usernames at
C:\Documents and Settings\<username>
You may need to repeat Step 2 for each of the usernames on the computer?

Step 4
Navigate to
C:\WINDOWS\ <<< folder
Locate the file "sysguard.exe" and delete it.

Step 5
Navigate to
C:\WINDOWS\system32 <<< folder
Locate and delete the file "iehelper.dll"

Step 6 Edit the registry using "Registry Editor"
At the UBCD4Win Desktop, go to Start > Programs > Registry Tools > RegEdit(Remote).
(Select C:\WINDOWS (should be the only thing showing) and click OK (if you see this dialog box at all)
At the "Runscanner" prompt box, choose "Yes".
Select Administrator probably, in the "Select User Profile" window.)
Note: What options you actually see will depend on your system configuration.
You will now see the "Registry Editor" window.

Step 7
Navigate to
HKEY_CURRENT_USER\Software\AvScan <<< key (key = folder in left-hand-side window pane)
Right-click on the "AvScan" key and choose "Export" and give it a name and choose a location (say "My Documents" folder) and save it.
Right-click on the "AvScan" key and choose "Delete" and then confirm, to remove the whole key.

Step 8
Navigate to
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run <<< key
Right-click on the "Run" key and choose "Export" and give it a name and choose a location (say "My Documents" folder) and save it.
In the right-hand side pane, find the entry "system tool" and delete it. (the whole line)

Step 9
Navigate to
HKEY_CLASSES_ROOT\CLSID\{BAD4551D-9B24-42cb-9BCD-818CA2DA7B63} <<< key
Right-click on the "{BAD4551D-9B24-42cb-9BCD-818CA2DA7B63}" key and choose "Export" and give it a name and choose a location (say "My Documents" folder) and save it.
Right-click on the "{BAD4551D-9B24-42cb-9BCD-818CA2DA7B63}" key and choose "Delete" and then confirm, to remove the whole key.

Step 10
Navigate to
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BAD4551D-9B24-42cb-9BCD-818CA2DA7B63} <<< key
Right-click on the "{BAD4551D-9B24-42cb-9BCD-818CA2DA7B63}" key and choose "Export" and give it a name and choose a location (say "My Documents" folder) and save it.
Right-click on the "{BAD4551D-9B24-42cb-9BCD-818CA2DA7B63}" key and choose "Delete" and confirm, to remove the whole key.

Step 11
Navigate to
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run <<< key
Right-click on the "Run" key and choose "Export" and give it a name and choose a location (say "My Documents" folder) and save it.
In the right-hand side pane, find the entry "<random characters>" and delete it. (the whole line)
(Refer to Step 2 for the information that you recorded about "<random characters>")

Step 12
Close the Registry Editor window.
Restart your computer
, taking out the LiveCD.
Does Windows load normally and present you with the your Desktop now?
How do things look? Are you able to operate the system normally?
------------------------------------------------------

Edit: This (TestDisk) is well worth a shot ...

UNMOUNTABLE_BOOT_VOLUME STOP 0×000000ED
http://gregscomputing.com/?p=20

I downloaded on another computer a Linux live distribution called SystemRescueCd. This can be downloaded for free from: http://www.sysresccd.org/Main_Page

This can be burned to a CD as a bootable CD, so if you place the CD or DVD into a disk drive, and turn the computer on, it loads into the operating system on the disk. (Obviously it depends on whether or not you have your BIOS configured to boot from CD or DVD drive first.)

The reason for me using this live distribution on top of any other Linux live distros is that this one comes with a package called “TestDisk” which can be used to fix the partition table, recover deleted partitions, and many others. The main one that shot out to me was “Rebuild NTFS boot sector ”


Edit: Beginners Guides: Hard Drive Data Recovery
TESTDISK, The Holy Grail
http://www.pcstats.com/articleview.cfm?art...1139&page=8

Edit:
XP wont boot. ERR: 'UNMOUNTABLE_BOOT_VOLUME'. REPAIR CONSOLE WONT RUN
http://www.techsupportforum.com/microsoft-...e-wont-run.html

Have you "lost" a hard drive or partition in your computer?
http://www.techsupportforum.com/hardware-s...r-computer.html

Unmountable Boot Drive
http://www.techsupportforum.com/microsoft-...tml#post1683053
Italia5239 wrote: "Finally solved the problem and got my PC up and running! Thank god for UBCD! One of the HDD Scanners finally located my Hard Drive, scanned, located the problem, and repaired it!"
Note: Italia5239 was using UBCD and not UBCD4Win3.50
UBCD = UBCD4.11
http://www.ultimatebootcd.com/
TestDisk Livecd
http://www.cgsecurity.org/wiki/TestDisk_Livecd

UBCD4Win
http://www.ubcd4win.com/index.htm
UBCD4Win contains TestDisk version 6.9

Edited by AustrAlien, 02 December 2009 - 03:52 PM.

AustrAlien
Google is my friend. Make Google your friend too.

Posted Image




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users