Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Computer wont boot. Virus or failed hard drive?


  • This topic is locked This topic is locked
5 replies to this topic

#1 jay000

jay000

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:02:21 PM

Posted 16 December 2011 - 02:52 PM

I was on my desktop.. I think with not even a browser opened then suddenly lots of window error messages popped up saying a problem with a file in system 32 folder. I got pretty scared at that point and planned to take a screenshot but when I went to start menu the paint program I usually go to wasn't listed so decided not to. That's when a new error popped up but only once.. saying your hard drive has crashed or something like that. I turned off my computer at that point and turned it back on.. but now it would only go to black screen thing that says something like..

Sec. Master Disk : LBA, 320 GB  ... DDR2 at Bank(s) : 0145
Sec. Slave Disk : None

IDE Channel 1 .Master Disk HDD S.M.A.R.T capability... ENABLED (at first it said disabled but I enabled it not sure what it does)

PCI Device Listing...
bus dev fun vendor device svid ssid class device class
0 26 0 8086 2937 1458 5004 0C03 USB 1.1 Host Cntrlr 10
etc... lots of stuff similar to the last line

After trying to turn off and on my computer a few times I tried to enter safe mode by pressing f8 but it wouldnt go to that screen like normally just would go to that same black page with all that text. Then I tried going to the bios and changing the boot order to different things.. Then tried changing any settings in the bios that might make it work. In the bios I also did the auto detect HDD and it was able to detect the hard drive. After that I opened up my computer to listen to the hard drive to make sure it was making weird noises like it was damaged.. it sounded normal like the rest of the stuff running in my computer. Then I asked some people what they thought was the problem and they said it wasnt a hard drive failure like I thought but some virus that corrupted system files or something. I then tried to use avg / kaspersky booting from a flash drive but... I got some "syslinux no default ui or configuration error" so wasnt able to test that. They suggested I use my windows CD to repair.. but I lost that CD so wasnt able to do that and not 100% sure what exact windows version I had I just know its windows vista x64

What I am planning on trying next is to try to format my USB or whatever to be able to boot properly some free OS to maybe try to repair my system files with some anti virus... no idea if that is possible.

Anyway.. still not sure if its a harddrive failure, some really bad virus.. or something else. I also want to know do I have to have the exact windows version to repair properly? Like would I be able to repair with a windows vista x32 when I have windows vista x64? OR.. will windows vista x64 home premium work with home basic (not sure which I had). OR.. would windows 7 laptop repair cd be able to repair my windows vista x64 (I already tried and I couldnt get it to work but still wondering)

I wont be able to buy a new cd for like a week so would rather do something else to fix it faster...

Edited by jay000, 16 December 2011 - 02:53 PM.


BC AdBot (Login to Remove)

 


#2 AustrAlien

AustrAlien

    Inquisitor


  • Members
  • 6,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cowra NSW Australia
  • Local time:05:21 AM

Posted 16 December 2011 - 04:05 PM

Hello and :welcome: to the BC forums.

Please sit tight and be patient.

I have requested that an experienced helper who specialises in malware-related un-bootable computers respond to your topic.

Thank you.
AustrAlien
Google is my friend. Make Google your friend too.

Posted Image

#3 JSntgRvr

JSntgRvr

    Master Surgeon General


  • Malware Response Team
  • 11,763 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto Rico
  • Local time:03:21 PM

Posted 17 December 2011 - 11:07 AM

Lets give it a try. You will need a USB (Flash) pendrive.

For x32 (x86) bit systems download Farbar Recovery Scan Tool and save it to a flash drive.
For x64 bit systems download Farbar Recovery Scan Tool x64 and save it to a flash drive.

Plug the flashdrive into the infected PC.

Enter System Recovery Options.

To enter System Recovery Options from the Advanced Boot Options:
  • Restart the computer.
  • As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.
  • Click on Repair your computer menu item.
  • Select US as the keyboard language settings, and then click Next.
  • Select the operating system you want to repair, and then click Next.
  • Select your user account and click Next.
On the System Recovery Options menu you will get the following options:

Startup Repair
System Restore
Windows Complete PC Restore
Windows Memory Diagnostic Tool
Command Prompt

  • Select Command Prompt
  • In the command window type in notepad and press Enter.
  • The notepad opens. Under File menu select Open.
  • Select "Computer" and find your flash drive letter and close the notepad.
  • In the command window type e:\frst.exe (for x64 bit version type e:\frst64) and press Enter
    Note: Replace letter e with the drive letter of your flash drive.
  • The tool will start to run.
  • When the tool opens click Yes to disclaimer.
  • Press Scan button.
  • It will make a log (FRST.txt) in the flash drive. Please copy and paste it to your reply.

No request for help throughout private messaging will be attended.

If I have helped you, consider making a donation to help me continue the fight against Malware!
btn_donate_SM.gif


#4 jay000

jay000
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:02:21 PM

Posted 17 December 2011 - 11:55 AM

I dont think F8 is working... I cant get to any screen like system recovery. I think I have got to that screen before when I had problems before so I know its not my keyboard or something.. Pressing tab, f12, delete and stuff take me to places but not f8.

I did though.. try F9 and it was ... my motherboard gigabyte xpress recovery 2 something like that.. I entered my CD then I get to a screen that says backup and reboot. I pressed backup and it says "Not enough HDD free Size for image backup !". I guess this thing wont help me since I think I was supposed to install it while windows was working to have backup points or something..

Edited by jay000, 17 December 2011 - 12:17 PM.


#5 JSntgRvr

JSntgRvr

    Master Surgeon General


  • Malware Response Team
  • 11,763 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto Rico
  • Local time:03:21 PM

Posted 17 December 2011 - 05:08 PM

Do you have the Windows Vista install or Recovery CD that may help you reach the Repair Console?

Lets attempt to boot with this tool:

You will need a USB drive and a CD to burn. There will be several steps to follow.

Download GETxPUD.exe to the desktop of your clean computer
  • Run GETxPUD.exe
  • A new folder will appear on the desktop.
  • Open the GETxPUD folder and click on the get&burn.bat
  • The program will download xpud_0.9.2.iso, and upon finished will open BurnCDCC ready to burn the image.
  • Click on Start and follow the prompts to burn the image to a CD.
  • Next download driver.sh to your USB drive
  • Also Download Query.exe to the USB drive. In your working computer, navigate to the USB drive and click on the Query.exe. A folder and a file, query.sh, will be extracted.
  • Remove the USB & CD and insert them in the sick computer
  • Boot the Sick computer with the CD you just burned
  • The computer must be set to boot from the CD
  • In some computers you need to tap F12 and choose to boot from the CD, in others is the Esc key. Please consult your computer's documentation.
  • Follow the prompts
  • A Welcome to xPUD screen will appear
  • Press File
  • Expand mnt
  • sda1,2...usually corresponds to your HDD
  • sdb1 is likely your USB
  • Click on the folder that represents your USB drive (sdb1 ?)
  • Confirm that you see driver.sh that you downloaded there
  • Press Tool at the top
  • Choose Open Terminal
  • Type bash driver.sh
  • Press Enter
  • After it has finished a report will be located on your USB drive named report.txt
  • Then type bash driver.sh -af
  • Press Enter
  • You will be prompted to input a filename.
  • Type the following:

    Winlogon.exe

  • Press Enter
  • If successful, the script will search for this file.
  • After it has completed the search enter the next file to be searched
  • Type the following:

    volsnap.sys

  • Press Enter
  • If successful, the script will search for this file.
  • After it has completed the search enter the next file to be searched
  • Type the following:

    explorer.exe

  • Press Enter
  • After it has completed the search enter the next file to be searched
  • Type the following:

    Userinit.exe

  • Press Enter
  • After the search is completed type Exit and press Enter.
  • After it has finished a report will be located in the USB drive as filefind.txt
  • While still in the Open Terminal, type bash query.sh
  • Press Enter
  • After it has finished a report will be located in the USB drive as RegReport.txt
  • Then type dd if=/dev/sda of=mbr.bin bs=512 count=1


    Leave a space among the following Statements:

    dd is the executable application used to create the backup
    if=/dev/sda is the device the backup is created from - the hard drive when only one HDD exists
    of=mbr.bin is the backup file to create - note the lack of a path - it will be created in the directory currently open in the Terminal
    bs=512 is the number of bytes in the backup
    count=1 says to backup just 1 sector


    It is extremely important that the if and of statements are correctly entered.

  • Press Enter
  • After it has finished a report will be located in the USB drive as mbr.bin
  • Plug the USB back into the clean computer, zip the mbr.bin, and except for the mbr.bin zipped file, post the contents of the report.txt, filefind.txt and RegReport.txt in your next reply. The mbr.bin zipped file must be attached to your reply.

Edited by JSntgRvr, 17 December 2011 - 05:10 PM.

No request for help throughout private messaging will be attended.

If I have helped you, consider making a donation to help me continue the fight against Malware!
btn_donate_SM.gif


#6 JSntgRvr

JSntgRvr

    Master Surgeon General


  • Malware Response Team
  • 11,763 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto Rico
  • Local time:03:21 PM

Posted 24 December 2011 - 09:16 PM

Due to the lack of feedback this Topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

No request for help throughout private messaging will be attended.

If I have helped you, consider making a donation to help me continue the fight against Malware!
btn_donate_SM.gif





1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users