Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Generic User Avatar

Windows won't load


  • Please log in to reply
60 replies to this topic

#46 Elise

Elise

    Bleepin' Blonde


  •  Avatar image
  • Malware Study Hall Admin
  • 65,980 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:10:56 PM

Posted 18 June 2011 - 12:57 PM

Can you please tell me what is on sda1 and sda2?

Please navigate to the following file: /mnt/sda3/Windows/winsxs/amd64_microsoft-windows-classpnp_31bf3856ad364e35_6.1.7600.16385_none_71782042c5c2dbe9/Classpnp.sys
Right click on the file and select Copy.

Now navigate to the following file: /mnt/sda3/Windows/System32/drivers/classpnp.sys
Right click the file and select Rename. Rename the file to classpnp.bak
Now right click in an empty space in the drivers folder and select Paste.

Restart your computer and let me know if you notice any change.
regards, Elise

"Now faith is the substance of things hoped for, the evidence of things not seen."


Follow BleepingComputer on: Facebook | Twitter 


Malware analyst @ Emsisoft | Follow me on Twitter


animinionsmalltext.gif


BC AdBot (Login to Remove)

 


#47 infected mqan

infected mqan
  • Topic Starter

  •  Avatar image
  • Members
  • 148 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:definitely somewhere
  • Local time:02:56 PM

Posted 18 June 2011 - 01:30 PM

Can you please tell me what is on sda1 and sda2?


Having trouble with your instructions.. How do I find out what is on sda1 and sda2? I am still in xPUD.. I navigated to the mnt > sda1 folder and in it:
diags folder, autoexec.bat, autoexec.up, btoa_rel.txt, command.com, config.sys, config.up, copyup.bat, dellbio.bin, delldiag.ini, dellrmk.bin, himem.sys, oobedone.flg, ramdrive.sys

I navigated to mnt > sda2 folder and in it:
Boot folder, Dell folder, preload folder, recovery folder, sources folder, system volume information folder, adrinfos.xml, autorun.inf, bootmgr, desktop.ini, info.exe, master.log, protect.chines e simplified, protect.chines e traditional, protect.danish, protect.dutch, protect.english, protect.french, protect.german, protect.italian, protect.Japanese, protect.korean, protect.norwegian, protect.portugese brazilian, protect.spanish, protect.switch, ResSys.ini, ST_InstallBackup.ini


Please navigate to the following file: /mnt/sda3/Windows/winsxs/amd64_microsoft-windows-classpnp_31bf3856ad364e35_6.1.7600.16385_none_71782042c5c2dbe9/Classpnp.sys
Right click on the file and select Copy.

Now navigate to the following file: /mnt/sda3/Windows/System32/drivers/classpnp.sys
Right click the file and select Rename. Rename the file to classpnp.bak
Now right click in an empty space in the drivers folder and select Paste.


I was about to re-name the classpnp.sys to classpnp.bak, but the os seemed to freeze. I right clicked classpnp.sys and clicked rename .... and i looked away for one second.. and now I can't click anything.. I can switch from 'File' to 'Home', or 'Menu', or 'Settings' .. But I can't click anything else...

edit: I restarted, and managed to move and rename the files successfully.
After I restarted.. I was greeted by:
Windows Error Recovery
[launch startup repair (recommended)]
[start windows normally]

The startup repair doesn't do anything...

Start Windows Normally doesnt work, greeted with error:
Error C0000034 applying update operation 288 of 118356 (_00000...)

Edited by infected mqan, 18 June 2011 - 01:43 PM.


#48 Elise

Elise

    Bleepin' Blonde


  •  Avatar image
  • Malware Study Hall Admin
  • 65,980 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:10:56 PM

Posted 18 June 2011 - 01:42 PM

That description was exactly what I meant. :)
Can you look in /mnt/sda2/boot and tell me what files/folders are located there?

Just power off your computer and restart it. Because you're booting from a CD in memory, this happens sometimes.
regards, Elise

"Now faith is the substance of things hoped for, the evidence of things not seen."


Follow BleepingComputer on: Facebook | Twitter 


Malware analyst @ Emsisoft | Follow me on Twitter


animinionsmalltext.gif


#49 infected mqan

infected mqan
  • Topic Starter

  •  Avatar image
  • Members
  • 148 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:definitely somewhere
  • Local time:02:56 PM

Posted 18 June 2011 - 02:48 PM

Can you look in /mnt/sda2/boot and tell me what files/folders are located there?

Alrighttt, quite a bit of stuff, here we go:
cs-CZ folder, da-DK folder, de-DE folder, el-GR folder, en-US folder, es-ES folder, fi-FI folder, Fonts folder, fr-FR folder, hu-HU folder, it-IT folder, ja-JP folder, ko-KR folder, nb-NO folder, nl-NL folder, pl-PL folder, pt-BR folder, pt-PT folder, ru-RU folder, sv-SE folder, tr-TR folder, zh-CN folder, zh-HK folder, zh-TW folder, AUTORUN.INF, BCD, BCD.LOG, BCD.LOG1, BCD.LOG2, BOOT.SDI, BOOT.SDI.14601, BOOTSTAT.DAT, Desktop.ini, images.xml, images.xml.14060, Info.exe, memtest.exe, os.dat, protect.(chinese simplified, chinese traditional, danish,dutch, english,french...few more languages- i can post if need.

Just power off your computer and restart it. Because you're booting from a CD in memory, this happens sometimes.

Hmm.. I restarted again.. but the same Windows Error Recovery came up.. Should I take my CD out??

#50 Elise

Elise

    Bleepin' Blonde


  •  Avatar image
  • Malware Study Hall Admin
  • 65,980 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:10:56 PM

Posted 18 June 2011 - 03:01 PM

Were you able to complete the renaming/copy/pasting of classpnp.sys? If not, please do that first.
regards, Elise

"Now faith is the substance of things hoped for, the evidence of things not seen."


Follow BleepingComputer on: Facebook | Twitter 


Malware analyst @ Emsisoft | Follow me on Twitter


animinionsmalltext.gif


#51 infected mqan

infected mqan
  • Topic Starter

  •  Avatar image
  • Members
  • 148 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:definitely somewhere
  • Local time:02:56 PM

Posted 18 June 2011 - 03:02 PM

Yes, I was able to do that.

Thanks,
Mitch

If not, please do that first.


That was accomplished, what is second?

Edited by infected mqan, 18 June 2011 - 03:03 PM.


#52 Elise

Elise

    Bleepin' Blonde


  •  Avatar image
  • Malware Study Hall Admin
  • 65,980 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:10:56 PM

Posted 18 June 2011 - 03:05 PM

When booting in safe mode now, is classpnp.sys still the last driver you see?
regards, Elise

"Now faith is the substance of things hoped for, the evidence of things not seen."


Follow BleepingComputer on: Facebook | Twitter 


Malware analyst @ Emsisoft | Follow me on Twitter


animinionsmalltext.gif


#53 infected mqan

infected mqan
  • Topic Starter

  •  Avatar image
  • Members
  • 148 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:definitely somewhere
  • Local time:02:56 PM

Posted 18 June 2011 - 03:09 PM

When booting in safe mode now, is classpnp.sys still the last driver you see?

Same as before.
Loaded: \Windows\system32\DRIVERS\CLASSPNP.SYS freezes

#54 Elise

Elise

    Bleepin' Blonde


  •  Avatar image
  • Malware Study Hall Admin
  • 65,980 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:10:56 PM

Posted 18 June 2011 - 03:22 PM

Since this is an update gone wrong, there is very little we can do without access to any mode or an installation DVD. I hoped there would have been a backup of the BCD so we could have restored access to the Recovery Partition which would have enabled the startup repair and system restore options.

Without that, the only option is to backup important data and reinstall your operating system. You can do this using the Dell recovery partition (you should see on boot something like "press F11 to start Recovery..").
regards, Elise

"Now faith is the substance of things hoped for, the evidence of things not seen."


Follow BleepingComputer on: Facebook | Twitter 


Malware analyst @ Emsisoft | Follow me on Twitter


animinionsmalltext.gif


#55 infected mqan

infected mqan
  • Topic Starter

  •  Avatar image
  • Members
  • 148 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:definitely somewhere
  • Local time:02:56 PM

Posted 18 June 2011 - 03:26 PM

Since this is an update gone wrong, there is very little we can do without access to any mode or an installation DVD. I hoped there would have been a backup of the BCD so we could have restored access to the Recovery Partition which would have enabled the startup repair and system restore options.

Okay. That is fine, as long as I can get Windows to run, I can live with re-installing my OS.


Without that, the only option is to backup important data and reinstall your operating system. You can do this using the Dell recovery partition (you should see on boot something like "press F11 to start Recovery..").


My only 2 options are:
F2 for Setup
F12 for Boot Options

#56 Elise

Elise

    Bleepin' Blonde


  •  Avatar image
  • Malware Study Hall Admin
  • 65,980 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:10:56 PM

Posted 18 June 2011 - 03:28 PM

When the system boots, immediately press the ctrl and F11 keys at the same time and you will enter the Dell Recovery Restore Utility.
regards, Elise

"Now faith is the substance of things hoped for, the evidence of things not seen."


Follow BleepingComputer on: Facebook | Twitter 


Malware analyst @ Emsisoft | Follow me on Twitter


animinionsmalltext.gif


#57 infected mqan

infected mqan
  • Topic Starter

  •  Avatar image
  • Members
  • 148 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:definitely somewhere
  • Local time:02:56 PM

Posted 18 June 2011 - 03:31 PM

When the system boots, immediately press the ctrl and F11 keys at the same time and you will enter the Dell Recovery Restore Utility.

I am tapping [ ctrl and F11 ] when the system boots, it takes me to Windows Error Recovery screen..

[Launch Startup Repair (recommended)]
[Start Windows Normally]

Edited by infected mqan, 18 June 2011 - 03:34 PM.


#58 infected mqan

infected mqan
  • Topic Starter

  •  Avatar image
  • Members
  • 148 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:definitely somewhere
  • Local time:02:56 PM

Posted 18 June 2011 - 03:51 PM

is it possible my system recovery is corrupted/missing?
can't seem to get it working...

Regards,
Mitch

#59 Elise

Elise

    Bleepin' Blonde


  •  Avatar image
  • Malware Study Hall Admin
  • 65,980 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:10:56 PM

Posted 18 June 2011 - 04:02 PM

In that case you can consider requesting recovery disks from Dell for a small fee: https://support.dell.com/support/topics/global.aspx/support/dellcare/en/backupcd_form
regards, Elise

"Now faith is the substance of things hoped for, the evidence of things not seen."


Follow BleepingComputer on: Facebook | Twitter 


Malware analyst @ Emsisoft | Follow me on Twitter


animinionsmalltext.gif


#60 infected mqan

infected mqan
  • Topic Starter

  •  Avatar image
  • Members
  • 148 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:definitely somewhere
  • Local time:02:56 PM

Posted 18 June 2011 - 04:17 PM

Thanks for the help, I appreciate it.

Mitch




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users