Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Windows 7 won't boot, not even safe mode... Repair doesn't work either...


  • This topic is locked This topic is locked
50 replies to this topic

#1 8SKIN8

8SKIN8

  • Members
  • 27 posts
  • OFFLINE
  •  
  • Local time:03:36 PM

Posted 29 December 2011 - 12:09 PM

Machine was working but for some reason all of my icons were gone. I got it to allow me to install chrome. That icon stayed. But I had nothing else showing. I could shut down and reboot. Just all of my stuff was gone. Now it just hangs at the windows logo and never goes past that. I can get to the repair program though. Safe mode just hangs at the windows logo too.

I appreciate any help.

BC AdBot (Login to Remove)

 


#2 Farbar

Farbar

    Just Curious


  • Security Developer
  • 21,696 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:The Netherlands
  • Local time:10:36 PM

Posted 29 December 2011 - 01:17 PM

Hi 8SKIN8,

Welcome to Bleeping Computer. I will be assisting you.

I'll move the topic to malware removal forum.

For x32 (x86) bit systems download Farbar Recovery Scan Tool and save it to a flash drive.
For x64 bit systems download Farbar Recovery Scan Tool x64 and save it to a flash drive.

Plug the flashdrive into the infected PC.

Enter System Recovery Options.

To enter System Recovery Options from the Advanced Boot Options:
  • Restart the computer.
  • As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.
  • Use the arrow keys to select the Repair your computer menu item.
  • Choose your language settings, and then click Next.
  • Select the operating system you want to repair, and then click Next.
  • Select your user account and click Next.
To enter System Recovery Options by using Windows installation disc:
  • Insert the installation disc.
  • Restart your computer.
  • If prompted, press any key to start Windows from the installation disc. If your computer is not configured to start from a CD or DVD, check your BIOS settings.
  • Click Repair your computer.
  • Choose your language settings, and then click Next.
  • Select the operating system you want to repair, and then click Next.
  • Select your user account an click Next.
On the System Recovery Options menu you will get the following options:
Startup Repair
System Restore
Windows Complete PC Restore
Windows Memory Diagnostic Tool
Command Prompt
[*]Select Command Prompt
[*]In the command window type in notepad and press Enter.
[*]The notepad opens. Under File menu select Open.
[*]Select "Computer" and find your flash drive letter and close the notepad.
[*]In the command window type e:\frst.exe (for x64 bit version type e:\frst64) and press Enter
Note: Replace letter e with the drive letter of your flash drive.
[*]The tool will start to run.
[*]When the tool opens click Yes to disclaimer.
[*]Press Scan button.
[*]It will make a log (FRST.txt) on the flash drive. Please copy and paste it to your reply.[/list]

#3 8SKIN8

8SKIN8
  • Topic Starter

  • Members
  • 27 posts
  • OFFLINE
  •  
  • Local time:03:36 PM

Posted 29 December 2011 - 01:38 PM

It just keeps telling me that the tool will close and that the tool will need to be ran once more.

Before I posted here, I hooked the drive up to a windows xp machine and looked in disk management and you can see my drives c partition, but it does not show
a drive letter being c, it doesn't have a drive letter at all, but it also says it is healthy.

Thank you for your help.

#4 8SKIN8

8SKIN8
  • Topic Starter

  • Members
  • 27 posts
  • OFFLINE
  •  
  • Local time:03:36 PM

Posted 29 December 2011 - 01:49 PM

PS... I don't know if my system is 32 or 64 bit.

#5 Farbar

Farbar

    Just Curious


  • Security Developer
  • 21,696 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:The Netherlands
  • Local time:10:36 PM

Posted 29 December 2011 - 01:55 PM

Hum, nu drive letter, that could be the reason FRST have difficulty reading the drive.

If you use F8 at startup can you get to Advanced Boot Options?
And before going to System Recovery Options do see Select "Select the operating system you want to repair?"
And finally which of the two FRST you downloaded?

#6 8SKIN8

8SKIN8
  • Topic Starter

  • Members
  • 27 posts
  • OFFLINE
  •  
  • Local time:03:36 PM

Posted 29 December 2011 - 02:15 PM

Posted Image
Posted Image
Posted Image
Posted Image

I am not sure what the answers to the first two questions are...
I think I can get to advanced boot options. I don't think I see an option
to select the operating system I want to repair.

And I downloaded the 64 bit version because I thought my system was 64 bit.

#7 Farbar

Farbar

    Just Curious


  • Security Developer
  • 21,696 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:The Netherlands
  • Local time:10:36 PM

Posted 29 December 2011 - 02:26 PM

If you have downloaded the the x64 version, that is your version. Only one of them runs.

Now I need to know if you used F8 to get to the first image. You didn't use a Windows disk?

What comes after the last image? Is your operating system listed there?

#8 8SKIN8

8SKIN8
  • Topic Starter

  • Members
  • 27 posts
  • OFFLINE
  •  
  • Local time:03:36 PM

Posted 29 December 2011 - 02:43 PM

Yes, F8 got me there.

And... the pictures were in the wrong order. I fixed them.
If I choose "Startup Repair" I get this...
Posted Image

If I choose "System Restore" I get this...
Posted Image

If I choose "System Image Recovery" I get this...
Posted Image

And...
Windows memory diag works fine.
and...
Command line works fine.

Edited by 8SKIN8, 29 December 2011 - 02:44 PM.


#9 8SKIN8

8SKIN8
  • Topic Starter

  • Members
  • 27 posts
  • OFFLINE
  •  
  • Local time:03:36 PM

Posted 29 December 2011 - 03:37 PM

Per your request...


Running From: E:\

========================= Memory info ======================

Percentage of memory in use: 9%
Total physical RAM: 5885.12 MB
Available physical RAM: 5337.54 MB
Total Pagefile: 5883.27 MB
Available Pagefile: 5324.08 MB
Total Virtual: 8192 MB
Available Virtual: 8191.91 MB

======================= Partitions =========================

1 Drive c: (DATA) (Fixed) (Total:411.17 GB) (Free:411.03 GB) NTFS
3 Drive e: (FATSTICK) (Removable) (Total:15.13 GB) (Free:7.53 GB) FAT32
4 Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS

Disk ### Status Size Free Dyn Gpt
-------- ------------- ------- ------- --- ---
Disk 0 Online 698 GB 0 B
Disk 1 Online 15 GB 0 B

Partitions of Disk 0:

Partition ### Type Size Offset
------------- ---------------- ------- -------
Partition 1 Primary 8 GB 31 KB
Partition 2 Primary 279 GB 8 GB
Partition 3 Primary 411 GB 287 GB

Disk: 0
Partition 2
Hidden: Yes
Active: Yes

There is no volume associated with this partition.

#10 Farbar

Farbar

    Just Curious


  • Security Developer
  • 21,696 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:The Netherlands
  • Local time:10:36 PM

Posted 29 December 2011 - 03:37 PM

Thanks for the info.

I have send you a Private Message (PM) with a link,
Please run the tool, wait until you get notified that the scan is completed.
Post the content of the log into your reply here.

#11 8SKIN8

8SKIN8
  • Topic Starter

  • Members
  • 27 posts
  • OFFLINE
  •  
  • Local time:03:36 PM

Posted 29 December 2011 - 03:39 PM

Running From: E:\

========================= Memory info ======================

Percentage of memory in use: 9%
Total physical RAM: 5885.12 MB
Available physical RAM: 5337.54 MB
Total Pagefile: 5883.27 MB
Available Pagefile: 5324.08 MB
Total Virtual: 8192 MB
Available Virtual: 8191.91 MB

======================= Partitions =========================

1 Drive c: (DATA) (Fixed) (Total:411.17 GB) (Free:411.03 GB) NTFS
3 Drive e: (FATSTICK) (Removable) (Total:15.13 GB) (Free:7.53 GB) FAT32
4 Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS

Disk ### Status Size Free Dyn Gpt
-------- ------------- ------- ------- --- ---
Disk 0 Online 698 GB 0 B
Disk 1 Online 15 GB 0 B

Partitions of Disk 0:

Partition ### Type Size Offset
------------- ---------------- ------- -------
Partition 1 Primary 8 GB 31 KB
Partition 2 Primary 279 GB 8 GB
Partition 3 Primary 411 GB 287 GB

Disk: 0
Partition 2
Hidden: Yes
Active: Yes

There is no volume associated with this partition.

#12 Farbar

Farbar

    Just Curious


  • Security Developer
  • 21,696 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:The Netherlands
  • Local time:10:36 PM

Posted 29 December 2011 - 04:56 PM

Partition 1 Primary 8 GB 31 KB
Partition 2 Primary 279 GB 8 GB
Partition 3 Primary 411 GB 287 GB


There is a partition of 411 GB byte size. It is called "DATA" is this a second partition containing your backups?
There is also a partition of 279 GB is this what your C drive should be?
Have run any command to do anything to the partitions?

Edited by farbar, 29 December 2011 - 05:39 PM.


#13 8SKIN8

8SKIN8
  • Topic Starter

  • Members
  • 27 posts
  • OFFLINE
  •  
  • Local time:03:36 PM

Posted 29 December 2011 - 05:07 PM

My main drive (C:) is the 279 gig as seen in the screen shot below.
I haven't run any command but I guess my friend ran TDSSKiller on it right before this problem.
He said it found something and then when he rebooted it was where I found it. Not booting anymore.

411 DATA doesn't contain any of my files. I think I was supposed to save my "DATA" there but I didn't.
All of my data is on the 279 WIN7 drive.

Posted Image

#14 Farbar

Farbar

    Just Curious


  • Security Developer
  • 21,696 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:The Netherlands
  • Local time:10:36 PM

Posted 29 December 2011 - 05:16 PM

OK. We know what we need to know now. :thumbup2:

Give me some time and I will come with the next step.

#15 Farbar

Farbar

    Just Curious


  • Security Developer
  • 21,696 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:The Netherlands
  • Local time:10:36 PM

Posted 29 December 2011 - 06:16 PM

We need to have another log.

Please download Attached File  look.bat   70bytes   65 downloads and Attached File  script.txt   108bytes   45 downloads
Save them both on the flash drive.
type e:\look.bat in the command prompt and press Enter.
It makes a log.txt on the flash drive. Please attach it to your reply.




7 user(s) are reading this topic

0 members, 7 guests, 0 anonymous users