Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Blue Screen


  • This topic is locked This topic is locked
65 replies to this topic

#1 rstott24

rstott24

  • Members
  • 32 posts
  • OFFLINE
  •  
  • Local time:09:33 AM

Posted 27 July 2010 - 06:24 PM

My computer will not boot. A few days ago it was just dark and hanging up on isapnp.exe, so I replaced isapnp.exe and the file directly after that. Now instead of going dark in the beginning it will go to the windows menu but immediately after it will go to the blue screen. I tried going through safe mode and it did the same. The blue screen code says

STOP: 0x0000007B (0xF7942524, 0xC0000034, 0x00000000, 0x00000000)

I've run CHKDSK /R with the OS disk, but it has not been able to fix anything. I'm out of ideas for what to do. Please help!

Edited by Pandy, 28 July 2010 - 12:54 AM.
Moved to malware removal ~Pandy


BC AdBot (Login to Remove)

 


#2 danny1990

danny1990

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:02:33 PM

Posted 27 July 2010 - 07:04 PM

Try this boot into safe mode with command

type /fixboot (Read the screen what it says)

once you have done that type exit to restart your pc

or remove any recently installed hardware

Edited by danny1990, 27 July 2010 - 07:05 PM.


#3 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,738 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:07:33 AM

Posted 27 July 2010 - 08:01 PM

QUOTE
I've run CHKDSK /R with the OS disk, but it has not been able to fix anything

Does it report any errors?

My Website

My help doesn't cost a penny, but if you'd like to consider a donation, click DONATE

 


#4 rstott24

rstott24
  • Topic Starter

  • Members
  • 32 posts
  • OFFLINE
  •  
  • Local time:09:33 AM

Posted 27 July 2010 - 08:52 PM

Well unfortunately I cannot boot safe mode with command. I can't boot any mode without the blue screen. As far as chkdsk /r it doesn't return anything. I ran chkdsk /p and it said I had errors. Then I ran chkdsk /r followed by chkdsk /p and now it says there are no longer any errors.

#5 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,738 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:07:33 AM

Posted 27 July 2010 - 08:57 PM

Do you have any reason to believe, that your computer may be infected?

My Website

My help doesn't cost a penny, but if you'd like to consider a donation, click DONATE

 


#6 rstott24

rstott24
  • Topic Starter

  • Members
  • 32 posts
  • OFFLINE
  •  
  • Local time:09:33 AM

Posted 27 July 2010 - 08:58 PM

I went to the command prompt from the OS cd and ran the fixboot. It asked if I wanted to create a new boot sector. I went ahead and said yes. It told me it successfully created a new boot sector. That was it. But it didn't fix any of the problems...

#7 rstott24

rstott24
  • Topic Starter

  • Members
  • 32 posts
  • OFFLINE
  •  
  • Local time:09:33 AM

Posted 27 July 2010 - 08:59 PM

QUOTE(Broni @ Jul 27 2010, 08:57 PM) View Post
Do you have any reason to believe, that your computer may be infected?


Well I was having a problem with Antimalware Doctor on the computerbefore it completely shut down. I tried removing that multiple times with Malwarebytes, but it kept coming back after I would reboot.

#8 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,738 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:07:33 AM

Posted 27 July 2010 - 09:13 PM

I'll report this topic to malware people then...

My Website

My help doesn't cost a penny, but if you'd like to consider a donation, click DONATE

 


#9 JSntgRvr

JSntgRvr

    Master Surgeon General


  • Malware Response Team
  • 11,752 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto Rico
  • Local time:10:33 AM

Posted 27 July 2010 - 10:24 PM

Hi, rstott24 smile.gif

welcome.gif

Lets give this a try throughout an External Environment, which simply means you will need to burn a boot CD with especial tools. You will also need a flash drive to move information from the troubled computer to a working computer. It is the only way we can see the progress of our actions. Save these instructions in your flash drive as a text file (use notepad) so you can have access to these while in an external environment (PE).

These are the first steps:

Download the Ultimate Boot CD for Windows (UBCD4WIN)

Follow the instructions in the following link to create a UBCD4WIN Recovery CD and let me know it successful. If you have a Windows XP SP1 installation CD, I would recommend you slipstream the CD to SP2 or SP3. The instructions are also available in that link. That will save you some time.

http://www.ubcd4win.com/howto.htm
  • Boot the sick computer with the UBCD4Win.
  • In order to do so, the computer must be set to boot from the CD first
    Note : For information click here
  • In the window that pops up select Launch The Ultimate Boot CD For Windows and press Enter.
    • It may take a little longer for the Desktop to appear than it does when you start your computer normally. Just let the process run itself until the desktop appears.
  • Once the desktop appears, you will receive a message asking: Do you want to start Network support?
    • Click on NO
  • You should now have a desktop that looks like this:
Let me know if successful.

No request for help throughout private messaging will be attended.

If I have helped you, consider making a donation to help me continue the fight against Malware!
btn_donate_SM.gif


#10 rstott24

rstott24
  • Topic Starter

  • Members
  • 32 posts
  • OFFLINE
  •  
  • Local time:09:33 AM

Posted 28 July 2010 - 10:00 PM

I downloaded the file onto a CD and tried to boot but it didn't work. I went to F12 and tried boot from a disc but it just sent me to the screen giving me an option for Safe Mode. Then I went into BIOS and set it to boot the CD first. It didn't recognize the CD. I downloaded the file and unzipped it and whatnot. Is there something you can see that I'm doing wrong? Or do you have any more direct directions on how to get it to read from the CD?

#11 JSntgRvr

JSntgRvr

    Master Surgeon General


  • Malware Response Team
  • 11,752 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto Rico
  • Local time:10:33 AM

Posted 28 July 2010 - 11:27 PM

You may have missed a step in the process. Since we are dealing with XP, lets try another option:

Here is what you need to do. (Read these instructions carefully.)

Please print this guide for future reference!

Step 1
  1. Download the PE Builder to your desktop
    • Double-Click on the PE Builder that you just downloaded to your desktop.
    • Follow all of the instructions/prompts that come up.
  2. Insert your XP CD with SP1/SP2/SP3 into a CD Rom drive
    • Double-Click on PE Builder.exe located on your desktop.
    • Click NO to Search for Windows Installation Files
    • Make the following selections from the Main Screen that pops up:
      • Builder
        • Source:(path to Windows installation files)
        • Enter the path to the drive where your XP CD is located.
        • You can click on the "..." button on the right to navigate to the path as well.
        • Custom: (include files and folders from this directory)
        • No information is necessary, leave blank.
        • Output:
        • Keep the default
        • Media output
          • Choose Create ISO image
          • Do not choose Burn to CD/DVD
            • Download the RunScanner plugin and save it to your desktop
            • Press the Plugin button on the PE Builder interface
            • Press the Add button and navigate to the location of the RunScanner plugin to install
            • Please note: You will be prompted for the folder that it shall be saved. By default it appears as runscanner10025. It should be modified to just runscanner. This is important!!!
          • Please note: If you are using a Windows XP disc with sp2 then highlight RpsSS needs to launch DComLaunch and then press Enable
          • When your done press Close and the PE Builder interface will re-appear
    • Click on the "Build" button
      • You will see the Windows EULA message. Click on I Agree
      • You will now see the Build Screen. Let it run it's course
      • When the Build is finished you can click close, then exit
    • Burn your ISO file to CD
      • Please Click Here for information on how to burn an ISO to CD.
    Step 2

    From your clean computer, please download OTLPE.zip from any of the following links:

    Link 1
    Link 2

    Save this file on your desktop, but extract its contents to the Flash Drive.

    Plug your flash drive into your sick computer now and do as instructed below..

    1. Restart Your sick Computer Using the PE Builder ISO CD That You Have Created
    • Insert the CD in the CD/DVD drive.
    • Restart your computer.
      • The computer should choose to boot from the CD automatically.
        Note : For information click here
    • Once the desktop appears, you will receive a message asking: Do you want to start Network support?
      • Click on No
    • After BART PE loads, you can chose your screen resolution that fits your monitor by following these steps:
    • Click on Go
    • Then on System
    • Then on Display
    • Then on Screen Resolution
    • Select the resolution that fits your monitor.
    Then follow these steps to run OTLPE.
    • Click on Go
    • Select Programs
    • then A43 File Management Utility
    In A43File Management you should be able to see your flash drive
    • Navigate to the OTLPE folder that you saved to your flash drive.
    • Open the OTLPE folder and double click Start.cmd.
    • When asked "Do you wish to load remote user profile(s) for scanning", select Yes
    • Ensure the box "Automatically Load All Remaining Users" is checked and press OK
    • OTL should now start. Change the following settings
      • Change Drivers to All
      • Change Standard Registry to All
      • Under the Custom Scan box paste this in

        /md5start
        UXTHEME.DLL
        eventlog.dll
        scecli.dll
        netlogon.dll
        cngaudit.dll
        sceclt.dll
        ntelogon.dll
        logevent.dll
        iaStor.sys
        nvstor.sys
        atapi.sys
        IdeChnDr.sys
        viasraid.sys
        AGP440.sys
        vaxscsi.sys
        nvatabus.sys
        viamraid.sys
        nvata.sys
        nvgts.sys
        iastorv.sys
        ViPrt.sys
        eNetHook.dll
        ahcix86.sys
        KR10N.sys
        nvstor32.sys
        ahcix86s.sys
        nvrd32.sys
        userinit.exe
        explorer.exe
        ntoskrnl.exe
        /md5stop
        %SYSTEMDRIVE%\*.*
        %systemroot%\*. /mp /s
        %systemroot%\System32\config\*.sav
    • Press Run Scan to start the scan.
    • When finished, the file will be saved in drive C:\OTL.txt
    • Copy this file to your USB drive.
    • Please post the contents of the C:\OTL.txt file in your reply.

    Edited by JSntgRvr, 28 July 2010 - 11:27 PM.

    No request for help throughout private messaging will be attended.

    If I have helped you, consider making a donation to help me continue the fight against Malware!
    btn_donate_SM.gif


    #12 rstott24

    rstott24
    • Topic Starter

    • Members
    • 32 posts
    • OFFLINE
    •  
    • Local time:09:33 AM

    Posted 01 August 2010 - 12:11 AM

    Alright, I've done all of Step 1 except number 4. After the build it says "ISO image is not created, you must fix the errors!" It says there are 4 errors and 11 warnings. I'm not really sure how to fix the errors. The errors are as follows:

    Error: loadKey() failed:

    Error: closeHive() failed: RegUnLoadKey (key="PEBuilder.exe-C:/PEBUILDER3110A/BARTPE/I386/SYSTEM32/CONFIG/petmphive") returned error 0: Access is denied.

    Error: DeleteFile() "C:\PEBUILDER31101\BARTPE\I386\SYSTEM32\CONFIG\petmphive" failed

    Error: DeleteFile() "C:\PEBUILDER31101\BARTPE\I386\SYSTEM32\CONFIG\petmphive.log" failed

    Error: DeleteFile() "C:\PEBUILDER31101\BARTPE\I386\SYSTEM32\setuphiv" failed

    Error: DeleteFile() "C:\PEBUILDER31101\BARTPE\I386\SYSTEM32\setuphiv.log" failed



    #13 JSntgRvr

    JSntgRvr

      Master Surgeon General


    • Malware Response Team
    • 11,752 posts
    • OFFLINE
    •  
    • Gender:Male
    • Location:Puerto Rico
    • Local time:10:33 AM

    Posted 01 August 2010 - 02:06 AM

    I will discuss this with a colleague, but I wonder if this is the results of the Interference that some Security applications have over the files in the Computer

    No request for help throughout private messaging will be attended.

    If I have helped you, consider making a donation to help me continue the fight against Malware!
    btn_donate_SM.gif


    #14 JSntgRvr

    JSntgRvr

      Master Surgeon General


    • Malware Response Team
    • 11,752 posts
    • OFFLINE
    •  
    • Gender:Male
    • Location:Puerto Rico
    • Local time:10:33 AM

    Posted 01 August 2010 - 12:11 PM

    Are you using an original XP Installation CD? If you do, it is SP1, SP2 or SP3?

    No request for help throughout private messaging will be attended.

    If I have helped you, consider making a donation to help me continue the fight against Malware!
    btn_donate_SM.gif


    #15 JSntgRvr

    JSntgRvr

      Master Surgeon General


    • Malware Response Team
    • 11,752 posts
    • OFFLINE
    •  
    • Gender:Male
    • Location:Puerto Rico
    • Local time:10:33 AM

    Posted 01 August 2010 - 01:58 PM

    Open this file in Notepad and post its contents:

    C:\pebuilder3110a\pebuilder.log

    No request for help throughout private messaging will be attended.

    If I have helped you, consider making a donation to help me continue the fight against Malware!
    btn_donate_SM.gif





    0 user(s) are reading this topic

    0 members, 0 guests, 0 anonymous users