Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

ASUS Laptop Crashing


  • This topic is locked This topic is locked
109 replies to this topic

#1 ASUSuser

ASUSuser

  • Members
  • 71 posts
  • OFFLINE
  •  
  • Local time:08:33 PM

Posted 09 August 2011 - 03:17 PM

I have an ASUS Eee 1005 HA laptop which crashes back to the login screen after briefly opening. Bad bug killed the machine before my anti-virus could remove.

In setup (F9), I can't find the recovery partition, although not sure why, since per ASUS website the 2009 machines should have this capability. I do not have the XP CD, or inboard or external cd/dvd drive so I can't reinstall windows that way. I tried to boot machine and run scan using AVG rescue on flash drive, but I got "NTLDR is missing error." Boot order was set up correctly in bios.

Is this PC toast? Can anyone offer suggestions? Is there a way to re-install windows using portable floppy drive? Thanks in advance.

BC AdBot (Login to Remove)

 


#2 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 61,257 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:04:33 AM

Posted 10 August 2011 - 02:46 AM

Hello and welcome to BleepingComputer!

Can you please describe in detail what happens after logging in? Do you see User settings being loaded and then the user gets logged off, while all the way the desktop wallpaper is visible?

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#3 ASUSuser

ASUSuser
  • Topic Starter

  • Members
  • 71 posts
  • OFFLINE
  •  
  • Local time:08:33 PM

Posted 10 August 2011 - 03:12 PM

Hello. After putting in password and hitting enter, I see briefly my desktop background photo, and then I hear the windows close sound and I am put back to the log-in screen.

Thanks for you response.

#4 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 61,257 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:04:33 AM

Posted 10 August 2011 - 03:38 PM

Hi again,

Try this please. You will need a USB drive.

Download GETxPUD.exe to the desktop of your clean computer
  • Run GETxPUD.exe
  • A new folder will appear on the desktop.
  • Open the GETxPUD folder and click on the get&burn.bat
  • The program will download xpud_0.9.2.iso, and upon finished will open BurnCDCC ready to burn the image.
  • Click on Start and follow the prompts to burn the image to a CD.
  • Next download driver.sh to your USB drive
  • Remove the USB & CD and insert it in the sick computer
  • Boot the Sick computer with the CD you just burned
  • The computer must be set to boot from the CD
  • Gently tap F12 and choose to boot from the CD
  • Follow the prompts
  • A Welcome to xPUD screen will appear
  • Press File
  • Expand mnt
  • sda1,2...usually corresponds to your HDD
  • sdb1 is likely your USB
  • Click on the folder that represents your USB drive (sdb1 ?)
  • Confirm that you see driver.sh that you downloaded there
  • Press Tool at the top
  • Choose Open Terminal
  • Type bash driver.sh -f
  • Press Enter
  • Type userinit.exe and press enter.
  • After it has finished a report will be located on your USB drive named filefind.txt
  • Remove the USB drive and insert it back in your working computer and navigate to filefind.txt

    Please note - all text entries are case sensitive
Copy and paste the filefind.txt for my review

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#5 ASUSuser

ASUSuser
  • Topic Starter

  • Members
  • 71 posts
  • OFFLINE
  •  
  • Local time:08:33 PM

Posted 10 August 2011 - 06:46 PM

Hello-- I do not have an external/USB cd drive. I do have an external floppy disc drive and several 4GB memory sticks. Would that help? Also, am I risking an infection on the clean machine? thanks again.

Edited by ASUSuser, 10 August 2011 - 06:53 PM.


#6 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 61,257 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:04:33 AM

Posted 11 August 2011 - 07:22 AM

You can use a 4 GB flashdrive. The xPUD image will get onto a CD anyway. You have no risk spreading an infection; this is just a CD that can be used to access your data without starting Windows.

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#7 ASUSuser

ASUSuser
  • Topic Starter

  • Members
  • 71 posts
  • OFFLINE
  •  
  • Local time:08:33 PM

Posted 11 August 2011 - 11:49 AM

Hello-- I am confused. I can't use xpud_0.9.2.iso because I do not have a CD drive on the sick machine and I do not have a USB external CD device to plug into the sick machine. If there is a way to download xpud to a floppy disk or flash drive, then I can transfer to the sick machine. Do you know if xPUD is available for download to flash drive? Thanks for you efforts.

#8 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 61,257 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:04:33 AM

Posted 11 August 2011 - 01:47 PM

My apologies for misunderstanding you. See below on how to create xPUD on an USB drive.

Download http://unetbootin.sourceforge.net/unetbootin-xpud-windows-latest.exe & http://noahdfear.net/downloads/bootable/xPUD/xpud-0.9.2.iso to the desktop of your clean computer
  • Insert your USB drive
  • Press Start > My Computer > right click your USB drive > choose Format > Quick format
  • Double click the unetbootin-xpud-windows-387.exe that you just downloaded
  • Press Run then OK
  • Select the DiskImage option then click the browse button located on the right side of the textbox field.
  • Browse to and select the xpud-0.9.2.iso file you downloaded
  • Verify the correct drive letter is selected for your USB device then click OK
  • It will install a little bootable OS on your USB device
  • Once the files have been written to the device you will be prompted to reboot ~ do not reboot and instead just Exit the UNetbootin interface
  • After it has completed do not choose to reboot the clean computer simply close the installer
  • Next download http://noahdfear.net/downloads/driver.sh to your USB
  • Remove the USB and insert it in the sick computer
  • Boot the Sick computer
  • Press F12 and choose to boot from the USB
  • Follow the prompts

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#9 ASUSuser

ASUSuser
  • Topic Starter

  • Members
  • 71 posts
  • OFFLINE
  •  
  • Local time:08:33 PM

Posted 11 August 2011 - 02:51 PM

Hello-- created the bootable USB but got an NTLDR is missing error when I tried to boot the sick pc. I made sure the bios was set up correctly and tried again, but same error. Any ideas? thanks.

#10 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 61,257 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:04:33 AM

Posted 11 August 2011 - 03:06 PM

Are you sure the USB drive was created correctly? How large was the xPUD download?

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#11 ASUSuser

ASUSuser
  • Topic Starter

  • Members
  • 71 posts
  • OFFLINE
  •  
  • Local time:08:33 PM

Posted 11 August 2011 - 05:57 PM

Hello- reformatted to FAT 32 from NTFS and it worked. Thanks Log below:

Search results for userinit.exe

29a1877f2d0eacff20b6507a3c00f31b /mnt/sda3/minint/system32/userinit.exe
25.5K Mar 24 2005

a93aee1928a9d7ce3e16d24ec7380f89 /mnt/sda1/WINDOWS/system32/dllcache/userinit.exe
25.5K Apr 14 2008

a93aee1928a9d7ce3e16d24ec7380f89 /mnt/sda1/WINDOWS/system32/userinit.exe
25.5K Apr 14 2008

Edited by ASUSuser, 11 August 2011 - 06:33 PM.


#12 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 61,257 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:04:33 AM

Posted 12 August 2011 - 04:19 AM

The file is in place, so it might be the Userinit value that has become corrupted.

Please download this file and save it to your usb drive. http://noahdfear.net/downloads/xPUD_userinit_fix

Now boot in xPUD, navigate to your USB drive and doubleclick on xPUD_userinit_fix to run it.

When done a file named UserinitReport.txt will be created on the USB drive. Please post that for my review.

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#13 ASUSuser

ASUSuser
  • Topic Starter

  • Members
  • 71 posts
  • OFFLINE
  •  
  • Local time:08:33 PM

Posted 12 August 2011 - 04:34 PM

Hello-- file below. Thanks.

Remote Registry Userinit Report

Hive </mnt/sda1/WINDOWS/system32/config/software>
(...)\Windows NT\CurrentVersion\Winlogon> Value <Userinit> of type REG_SZ, data length 70 [0x46]
C:\WINDOWS\system32\winlogon32.exe
(...)\Windows NT\CurrentVersion\Winlogon> EDIT: <Userinit> of type REG_SZ with length 70 [0x46]
[ 0]: C:\WINDOWS\system32\winlogon32.exe
-> newkv->len: 68
(...)\Windows NT\CurrentVersion\Winlogon> Value <Userinit> of type REG_SZ, data length 68 [0x44]
C:\WINDOWS\system32\userinit.exe,

userinit.exe search results

29a1877f2d0eacff20b6507a3c00f31b /mnt/sda3/minint/system32/userinit.exe
25.5K Mar 24 2005
a93aee1928a9d7ce3e16d24ec7380f89 /mnt/sda1/WINDOWS/system32/dllcache/userinit.exe
25.5K Apr 14 2008
a93aee1928a9d7ce3e16d24ec7380f89 /mnt/sda1/WINDOWS/system32/userinit.exe
25.5K Apr 14 2008

winlogon.exe search results

325fd6d25fc1d77c363e87b445c8b023 /mnt/sda3/minint/system32/winlogon.exe
497.0K Mar 24 2005
ed0ef0a136dec83df69f04118870003e /mnt/sda1/WINDOWS/system32/dllcache/winlogon.exe
496.0K Apr 14 2008
ed0ef0a136dec83df69f04118870003e /mnt/sda1/WINDOWS/system32/winlogon.exe
496.0K Apr 14 2008

explorer.exe search results

12896823fb95bfb3dc9b46bcaedc9923 /mnt/sda1/WINDOWS/explorer.exe
1009.5K Apr 14 2008
12896823fb95bfb3dc9b46bcaedc9923 /mnt/sda1/WINDOWS/system32/dllcache/explorer.exe
1009.5K Apr 14 2008

#14 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 61,257 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:04:33 AM

Posted 13 August 2011 - 02:15 AM

That seems to have found the problem. Can you get into windows now?

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#15 ASUSuser

ASUSuser
  • Topic Starter

  • Members
  • 71 posts
  • OFFLINE
  •  
  • Local time:08:33 PM

Posted 13 August 2011 - 07:21 AM

Hello- Yes I was able to get into windows. Can you assist with the cleaning process? I am concerned because the sick pc immediately connected via wireless to the DSL router shared by my clean pc. It's not letting me disable that function. Any ideas?

Thanks.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users