Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Computer keeps restarting and won't boot past Windows start screen


  • Please log in to reply
9 replies to this topic

#1 Lptpuser13

Lptpuser13

  • Members
  • 13 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:12:24 PM

Posted 22 July 2012 - 02:37 AM

I am trying to help a family member fix their desktop they got from someone else and when I turn it on the computer keeps restarting and won't boot past the Windows start screen. It gives you the black screen with options of which way to start (i.e. safe mode) and no matter which one you select it restarts the computer and sends you right back to the same screen, it was an endless loop of restarts(I tried clicking each mode type and tried to get it to restore from the last working restore point after each it just restarted again). Can anyone help me figure out how to get back to the regular operating screen so I can get it virus/malware free and working again?

Other Info:
- This computer is as far as I know infected with at least one type of virus/malware (which was part of turning it on,so we could download software to remove whatever is on it.)
- We do not have any software disk(s) for the PC
-It is a Windows XP edition

Any help or direction to help would be greatly appreciated, as I am completely lost! :blink:



[Moderator edit: post moved to more appropriate forum. jgw]

Edited by Lptpuser13, 22 July 2012 - 09:19 PM.


BC AdBot (Login to Remove)

 


#2 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 60,917 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:11:24 PM

Posted 24 July 2012 - 04:25 AM

Hello, and sorry for the delay!

We Need to Diagnose Your BlueScreen
  • When you boot your machine, press F8 to list the startup options, exactly as you would if you were trying to enter Safe Mode
  • Select "Disable Automatic Restart on System Failure", as shown here:
    Posted Image
  • When your system BSODs, write down the STOP error code, as well as any written out error message back here. The STOP error will always appear, but the message may not. You are looking for this:
    Posted Image
Please post me the error(s).

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#3 Lptpuser13

Lptpuser13
  • Topic Starter

  • Members
  • 13 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:12:24 PM

Posted 27 July 2012 - 08:15 AM

Thank you for helping! I do not have the computer at my home so I will have to wait until I can get access to it to do this. I will reply as soon as I can. I hope that's OK.

Edited by Lptpuser13, 27 July 2012 - 08:22 AM.


#4 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 60,917 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:11:24 PM

Posted 27 July 2012 - 08:27 AM

Okay, no problem!

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#5 Lptpuser13

Lptpuser13
  • Topic Starter

  • Members
  • 13 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:12:24 PM

Posted 31 July 2012 - 05:04 AM

It Listed:

Stop:c0000218 {Registry File Failure}
The registry cannot load the hive (file):
\SystemRoot\System32\Config\SOFTWARE
or its log or alternate.
It is corrupt, absent, or not writable

beginning dump of physical memory
physical memory dump complete
contact your system administrator or technical support group for further assistance.

#6 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 60,917 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:11:24 PM

Posted 31 July 2012 - 05:37 AM

Hi again, thank you for the extra information! :)

Try this please. You will need a USB drive.

Download GETxPUD.exe to the desktop of your clean computer
  • Run GETxPUD.exe
  • A new folder will appear on the desktop.
  • Open the GETxPUD folder and click on the get&burn.bat
  • The program will download xpud_0.9.2.iso, and upon finished will open BurnCDCC ready to burn the image.
  • Click on Start and follow the prompts to burn the image to a CD.
  • Next download rst.sh to your USB drive
  • Remove the USB & CD and insert it in the sick computer
  • Boot the Sick computer with the CD you just burned
  • The computer must be set to boot from the CD
  • Gently tap F12 and choose to boot from the CD
  • Follow the prompts
  • A Welcome to xPUD screen will appear
  • Press File
  • Expand mnt
  • sda1,2...usually corresponds to your HDD
  • sdb1 is likely your USB
  • Click on the folder that represents your USB drive (sdb1 ?)
  • Confirm that you see rst.sh that you downloaded there
  • Press Tool at the top
  • Choose Open Terminal
  • Type bash rst.sh
  • Press Enter
  • After it has finished a report will be located on your USB drive named enum.log
  • Remove the USB drive and insert it back in your working computer and navigate to enum.log

    Please note - all text entries are case sensitive
Copy and paste the enum.log for my review

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#7 Lptpuser13

Lptpuser13
  • Topic Starter

  • Members
  • 13 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:12:24 PM

Posted 31 July 2012 - 02:10 PM

Hi again, thank you for the extra information! :)

Try this please. You will need a USB drive.

Download GETxPUD.exe to the desktop of your clean computer

  • Run GETxPUD.exe
  • A new folder will appear on the desktop.
  • Open the GETxPUD folder and click on the get&burn.bat
  • The program will download xpud_0.9.2.iso, and upon finished will open BurnCDCC ready to burn the image.
  • Click on Start and follow the prompts to burn the image to a CD.
  • Next download rst.sh to your USB drive
  • Remove the USB & CD and insert it in the sick computer
  • Boot the Sick computer with the CD you just burned
  • The computer must be set to boot from the CD
  • Gently tap F12 and choose to boot from the CD
  • Follow the prompts
  • A Welcome to xPUD screen will appear
  • Press File
  • Expand mnt
  • sda1,2...usually corresponds to your HDD
  • sdb1 is likely your USB
  • Click on the folder that represents your USB drive (sdb1 ?)
  • Confirm that you see rst.sh that you downloaded there
  • Press Tool at the top
  • Choose Open Terminal
  • Type bash rst.sh
  • Press Enter
  • After it has finished a report will be located on your USB drive named enum.log
  • Remove the USB drive and insert it back in your working computer and navigate to enum.log

    Please note - all text entries are case sensitive
Copy and paste the enum.log for my review


When taking the USB from the non-working computer to a working one will it raise the risk of transfering any of the viruses/malware to the working one? We don't want to infect any more computers.

#8 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 60,917 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:11:24 PM

Posted 31 July 2012 - 02:37 PM

No, there is no way malware can spread from a linux environment.

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#9 Lptpuser13

Lptpuser13
  • Topic Starter

  • Members
  • 13 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:12:24 PM

Posted 11 August 2012 - 02:05 PM

No, there is no way malware can spread from a linux environment.


Sorry to have kept you waiting I just heard from them and they decided to just go buy a new computer.
Thank you for the help, I truly appreciate it! :thumbsup:

#10 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 60,917 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:11:24 PM

Posted 11 August 2012 - 02:20 PM

You are most welcome, thank you for letting me know!

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users