Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

windows xp crash blue screen of death data recovery


  • This topic is locked This topic is locked
5 replies to this topic

#1 yogidishman

yogidishman

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:12:38 AM

Posted 03 March 2010 - 09:57 AM

I have encountered a serious problem accessing my hard drive and booting up Windows XP. I am running windows XP on a Dell 8400 dimension workstation. I am getting the infamous blue screen of death with the error message 0x0000007B. I suspect that I am a victim of a virus . As suggested I ran a repair from a Windows CD recovery disk and it seemed to run okay and indicated that everything was fine however when I rebooted I still received the same old blue screen. . Help Mode is of no help as the options all lead me back to the blue screen. Therefore I tried something different.

I booted up from the Windows Recovery CD and when prompted hit the letter R on the first screen which placed me into a C:\windows prompt. From there I was able to go to the root directory and I was able to list the folders that have my data in them. However when I attempted to open these folders I received an error message of "Access is denied" and could go no further. I checked the attributes on these directories and they are only showing an attribute of d=directory. I tried different things with the attrib command to see if I could get around the access problem but to no avail.

I ran a chkdsk /p and it came back indicating that there were no problems. I am running out of options and am quickly reaching the point where I am considering doing a complete reinstall of windows, however I don't want to lose my data. Can anyone suggest how I might be able to access my data files and skirt around that "access is denied" message? Thank you


BC AdBot (Login to Remove)

 


#2 cryptodan

cryptodan

    Bleepin Madman


  • Members
  • 21,868 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Catonsville, Md
  • Local time:05:38 AM

Posted 03 March 2010 - 12:49 PM

Do you have access to another computer?

#3 yogidishman

yogidishman
  • Topic Starter

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:12:38 AM

Posted 03 March 2010 - 01:26 PM

Yes I do have access to another computer, why ?

#4 cryptodan

cryptodan

    Bleepin Madman


  • Members
  • 21,868 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Catonsville, Md
  • Local time:05:38 AM

Posted 03 March 2010 - 01:33 PM

QUOTE(yogidishman @ Mar 3 2010, 06:26 PM) View Post
Yes I do have access to another computer, why ?



Put the drive in the other computer and set it as slave.

#5 JSntgRvr

JSntgRvr

    Master Surgeon General


  • Malware Response Team
  • 11,556 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto Rico
  • Local time:01:38 AM

Posted 03 March 2010 - 02:12 PM

Hi, yogidishman smile.gif

Welcome.

The error indicates that during I/O system initialization, the driver for the boot device might have failed to initialize the device the system is attempting to start from. Most likely caused by malware. I am requesting this topic to be moved to the malware forum. Thanks cryptodan for the input.

Lets give this a try. You will need a flash drive to move information from the sick computer to a working computer, so we can see the progress of our actions. Save these instructions in your flash drive as a text file (use notepad) so you can have access to these while in an external environment (PE).

Here is what you need to do.

Two programs to download

First

Download ISOBurner. Click Here for ISOBurner Instructions. Install the program, and follow the next set of steps.

Second
  • Download OTLPE.iso and burn to a CD using ISO Burner. NOTE: This file is 276.7MB in size so it may take some time to download.
  • When downloaded double click and this will then open ISOBurner to burn the file to CD
  • Boot the Non working computer using the boot CD you just created.
  • In order to do so, the computer must be set to boot from the CD first
    Note : For information click here
  • Your system should now display a REATOGO-X-PE desktop.
  • Double-click on the OTLPE icon.
  • When asked "Do you wish to load the remote registry", select Yes
  • When asked "Do you wish to load remote user profile(s) for scanning", select Yes
  • Ensure the box "Automatically Load All Remaining Users" is checked and press OK
  • OTL should now start. Change the following settings
    • Change Drivers to All
    • Change Registry to All
    • Under the Custom Scan box paste this in

      /md5start
      eventlog.dll
      scecli.dll
      netlogon.dll
      cngaudit.dll
      sceclt.dll
      ntelogon.dll
      logevent.dll
      iaStor.sys
      nvstor.sys
      atapi.sys
      IdeChnDr.sys
      viasraid.sys
      AGP440.sys
      vaxscsi.sys
      nvatabus.sys
      viamraid.sys
      nvata.sys
      nvgts.sys
      iastorv.sys
      ViPrt.sys
      eNetHook.dll
      ahcix86.sys
      KR10N.sys
      nvstor32.sys
      ahcix86s.sys
      nvrd32.sys
      userinit.exe
      explorer.exe
      /md5stop
      %SYSTEMDRIVE%\*.*
      %systemroot%\*. /mp /s
      %systemroot%\System32\config\*.sav
  • Press Run Scan to start the scan.
  • When finished, the file will be saved in drive C:\OTL.txt
  • Copy this file to your USB drive.
  • Please post the contents of the C:\OTL.txt file in your reply.

Edited by elise025, 03 March 2010 - 02:15 PM.
Moved as requested ~ Elise

No request for help throughout private messaging will be attended.

If I have helped you, consider making a donation to help me continue the fight against Malware!
btn_donate_SM.gif


#6 JSntgRvr

JSntgRvr

    Master Surgeon General


  • Malware Response Team
  • 11,556 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto Rico
  • Local time:01:38 AM

Posted 11 March 2010 - 12:54 AM

Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please contact a staff member with address of this thread. This applies only to the original topic starter. Everyone else please begin a New Topic.

No request for help throughout private messaging will be attended.

If I have helped you, consider making a donation to help me continue the fight against Malware!
btn_donate_SM.gif





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users