Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Virus or harddrive


  • This topic is locked This topic is locked
12 replies to this topic

#1 hiroshi

hiroshi

  • Members
  • 56 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:redmond,WA
  • Local time:12:41 PM

Posted 22 October 2010 - 01:30 PM

My computer just keeps looping from startup to SafeMode page and back. I was finally able to stop it and got a 0X0000007B (0XBA4C7524, 0X0000034 and 0X0000000 twice. I'm stuck as to what to do from here. Can anyone explain to me my problem and how to resolve it? I run WindowXP Pro and have a Seagate Barracuda SATA 720000 w/power and interface cable. Since I have two different hard drives on my computer, I hook the wires to my back up drive and it works fine, therefore I suspect the problem is just in my primary hard drive. Stupid me didn't even back up my information from my primary drive. Help.

BC AdBot (Login to Remove)

 


#2 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 61,581 posts
  • ONLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:10:41 PM

Posted 23 October 2010 - 03:28 AM

Hi, a few questions here.

You mention it starts up in safe mode. Do you mean by this you forced Safe Mode (through MsConfig) and are now stuck in a loop?

Do you have an XP CD at hand?

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft

 

animinionsmalltext.gif


#3 hiroshi

hiroshi
  • Topic Starter

  • Members
  • 56 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:redmond,WA
  • Local time:12:41 PM

Posted 23 October 2010 - 10:27 AM

Hi, It starts with the Windows Logo and proceeds to the Safe Mode windows. After clicking any command, it just loops back to the startup page with the Windows Logo. I can't even get into Safe Mode. I do have the original WindowsXP Pro install disc. Appreciate the help. Hiroshi

#4 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 61,581 posts
  • ONLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:10:41 PM

Posted 23 October 2010 - 01:31 PM

What happens when you attempt to start in normal mode?

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft

 

animinionsmalltext.gif


#5 hiroshi

hiroshi
  • Topic Starter

  • Members
  • 56 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:redmond,WA
  • Local time:12:41 PM

Posted 24 October 2010 - 09:14 AM

It doesn't matter what I try to do, it just keeps going back to the beginning with the WindowXP logo and just keeps looping. It's like driving in a circle. Even when I tried Safe Mode, a blue Safe Mode comes up on the bottom of the screen and back to the sames looping. I don't think it's a virus because I have Norton 360 and LavaSoft Ad-Adware (paid version) running all the time. Would something like purchasing a USB enclosure help me recover my data if it's the HD? Appreciate your time

#6 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 61,581 posts
  • ONLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:10:41 PM

Posted 24 October 2010 - 10:15 AM

Lets see if we can find out a bit more about this. This method will also allow you to access and save any important data.

Let's try to boot your computer using a Boot CD.

Please print this guide for future reference!

You will need a blank CD, your Windows XP install disc, a clean computer and a flash drive.

Please follow the steps below and let me know if you were successful. Please tell me what error messages you got and/or what steps you got hung up on.

1. Download the PE Builder to your desktop

http://www.nu2.nu/download.php?sFile=pebuilder3110a.exe
  • Double-Click on the PE Builder that you just downloaded to your desktop.
  • Follow all of the instructions/prompts that come up.
2. Insert your XP CD with SP1/SP2/SP3 into a CD Rom drive
  • Double-Click on PE Builder.exe located on your desktop.
  • Click NO to Search for Windows Installation Files
  • Make the following selections from the Main Screen that pops up:
    • Builder
    • Source:(path to Windows installation files)
    • Enter the path to the drive where your XP CD is located.
    • You can click on the "..." button on the right to navigate to the path as well.
  • Custom: (include files and folders from this directory)
    • No information is necessary, leave blank.
  • Output:
    • Keep the default
  • Media output
    • Choose Create ISO image
    • Do not choose Burn to CD/DVD
    • Download the RunScanner plugin and save it to your desktop

    http://www.paraglidernc.com/Files/RunScanner10025.cab

    Please note: You will be prompted for the folder that it shall be saved. By default it appears as runscanner10025. It should be modified to just runscanner <--- Important!!!


    • Press the Plugin button on the PE Builder interface
    • Press the Add button and navigate to the location of the RunScanner plugin to install
    • Please note: If you are using a Windows XP disc with sp2 then highlight RpsSS needs to launch DComLaunch and then press Enable
  • When your done press Close and the PE Builder interface will re-appear
3. Click on the "Build" button
  • You will see the Windows EULA message. Click on I Agree
  • You will now see the Build Screen. Let it run it's course
  • When the Build is finished you can click close, then exit
4. Burn your ISO file to CD==========

Next........

From your clean computer..

Please download OTLPE.zip and save it to a flash drive.
http://oldtimer.geekstogo.com/OTLPE.zip
http://www.itxassociates.com/OT-Tools/OTLPE.zip

Double click and unzip OTLPE.zip to its own folder on your flash drive. Name it OTLPE <-- Important!!

==========

Plug your flash drive into your sick computer now and do as instructed below..

==========

1. Restart Your sick Computer Using the PE Builder ISO CD That You Have Created
  • Insert the CD in to one of your CD/DVD drives.
  • Restart your computer.
    • The computer should choose to boot from the CD automatically. If it doesn't and you are asked if you want to boot from CD, then choose that option.
  • Once the desktop appears, you will receive a message asking: Do you want to start Network support?
    • Click on No
  • After it loads press the Go button in the lower left and do this....
    • Go
    • System
    • Display
    • Screen Resolution
    • 1024x768
    Next choose....
    • Go
    • Programs
    • A43 File Management Utility

==========

In A43File Management you should see your flash drive
Navigate to the OTLPE folder that you saved to your flash drive.

Open the OTLPE folder and double click Start.bat.

  • When asked "Do you wish to load remote user profile(s) for scanning", select Yes
  • Ensure the box "Automatically Load All Remaining Users" is checked and press OK
  • OTLPE should now start

    Change the following settings
    • Change Services, Drivers, Standard and Extra Registry to Use Safelist
    • Uncheck LOP and Purity check

    Please note: Stay with your computer during the course of the scan. If "Entry Point Errors" are encountered simply press "ok" and allow the program to continue. <-- Important!!
  • Push Posted Image
  • A report will open named "OTL.tx"t and another will be minimized to the system tray named "Extra.txt". Save both log's to your flash drive. Copy and Paste them in your next reply.

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft

 

animinionsmalltext.gif


#7 hiroshi

hiroshi
  • Topic Starter

  • Members
  • 56 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:redmond,WA
  • Local time:12:41 PM

Posted 25 October 2010 - 01:35 PM

Please bear with me since I'm not computer savy. It will take be a little time to figure this out and apply it. I will post your instruction as soon as I can.

#8 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 61,581 posts
  • ONLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:10:41 PM

Posted 25 October 2010 - 02:19 PM

No problem. Take all time you need and let me know if you have any question.

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft

 

animinionsmalltext.gif


#9 hiroshi

hiroshi
  • Topic Starter

  • Members
  • 56 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:redmond,WA
  • Local time:12:41 PM

Posted 27 October 2010 - 06:43 PM

Everything was going well until it came time to make the ISO. While using PE builder I encountered three errors or warnings.

Warning: Creating ISO-9660:1990 (version 2) filesystem
Warning: ISO 9660 filenames longer then 31 may cause disc image overflows
Error: returned exit code 13

It then failed to create the ISO file. I am unsure if this is related but my XP install disc is a very old copy and doesn't come with the service packs 2 or 3. I have tried to set it up to take the information directly off the hard drive however it then comes up with a I386 not found error which only happens when the disc isnt in. Can I draw the information from the hard drive at all or would i need an updated copy of Windows XP?

#10 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 61,581 posts
  • ONLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:10:41 PM

Posted 28 October 2010 - 02:13 AM

Can you borrow an XP CD from a friend/family member? You can use that to create it.

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft

 

animinionsmalltext.gif


#11 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 61,581 posts
  • ONLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:10:41 PM

Posted 31 October 2010 - 05:09 AM

Hi, are you still there?

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft

 

animinionsmalltext.gif


#12 hiroshi

hiroshi
  • Topic Starter

  • Members
  • 56 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:redmond,WA
  • Local time:12:41 PM

Posted 02 November 2010 - 02:56 PM

Yes, I finally found someone that really knows his computers also. He inspected it out today and told me I have a failed Hard Drive. Seems I have to take it to a Recovery Organization to have it done. Thanks for all your time and I wish you people would take a donation. I tried before and folks don't take any. Thanks again, Hiroshi

#13 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 61,581 posts
  • ONLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:10:41 PM

Posted 02 November 2010 - 03:45 PM

I'm sorry to hear that hiroshi. I hope you'll get it back up and running soon.

I will now close this topic.

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft

 

animinionsmalltext.gif





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users