Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Cannot boot Wndows 7


  • This topic is locked This topic is locked
32 replies to this topic

#1 Clauslester

Clauslester

  • Members
  • 35 posts
  • OFFLINE
  •  
  • Local time:05:31 PM

Posted 07 October 2012 - 03:17 PM

I made the mistake of simply clicking a picture on Facebook. Firefox crashed and I had to restart my computer only to find that it wouldn't reboot again.
When I turn on my laptop, all goes well until the splash screen where the boot is interrupted by an error message from Windows Boot Manager saying:

"Windows failed to start. A recent hardware or software change might be the cause. To fix the problem:
1 Insert our Windows installation disc and restart your computer
2 Choose your language settings, and then click "Next"
3 Click "repair your computer"

If you do not have this disc, contact your system administrator or computer manufacturer for assistance.

File: \Windows\system32\winload.exe
Status: 0xc000000f
Info: The selected entry could not be loaded because the application is missing or corrupt."

As directed, I put in my windows installation disc and followed through wit the instructions. However, when I try to run system repair nothing happens besides the loading icon. I am not able to reinstall windows either, the same result occurs.
If I try to boot in safe mode by pressing F8, I am brought back to the previously mentioned Windows Boot Manager screen.


I am running windows 7 Ultimate 64-bit.

I will be checking this post quite often until resolved, so if you need any additional info please let me know!

Thank you for your time.

Edited by Clauslester, 07 October 2012 - 03:23 PM.


BC AdBot (Login to Remove)

 


#2 JSntgRvr

JSntgRvr

    Master Surgeon General


  • Malware Response Team
  • 11,635 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto Rico
  • Local time:06:31 PM

Posted 07 October 2012 - 09:31 PM

:welcome:

Lets give it a try. You will need a USB Flash drive.

Download the appropriate version for your system of the Farbar Recovery Scan Tool and save it to a flash drive.

Plug the flashdrive into the infected PC.

Enter System Recovery Options. (If you cannot reach the Advanced Boot Options, you can use the install CD to reach the System Recovery Options)

To enter System Recovery Options from the Advanced Boot Options:
  • Restart the computer.
  • As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.
  • Click on Repair your computer menu item.
  • Select US as the keyboard language settings, and then click Next.
  • Select the operating system you want to repair, and then click Next.
  • Select your user account and click Next.
On the System Recovery Options menu you will get the following options:

Startup Repair
System Restore
Windows Complete PC Restore
Windows Memory Diagnostic Tool
Command Prompt

  • Select Command Prompt
  • In the command window type in notepad and press Enter.
  • The notepad opens. Under File menu select Open.
  • Select "Computer" and find your flash drive letter and close the notepad.
  • In the command window type e:\frst.exe (for x64 bit version type e:\frst64) and press Enter
    Note: Replace letter e with the drive letter of your flash drive.
  • The tool will start to run.
  • When the tool opens click Yes to disclaimer.
  • Press Scan button.
  • It will make a log (FRST.txt) in the flash drive. Please copy and paste it to your reply.

No request for help throughout private messaging will be attended.

If I have helped you, consider making a donation to help me continue the fight against Malware!
btn_donate_SM.gif


#3 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,329 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:06:31 PM

Posted 08 October 2012 - 11:05 AM

Hello, just letting you know I moved this topic to Here in the Virus, Trojan, Spyware, and Malware Removal Logs forum where it will stay.

Please remember to click the Watch Topic button at the top right and select Immediate Notification so you do not miss any replies now that you were moved.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#4 Clauslester

Clauslester
  • Topic Starter

  • Members
  • 35 posts
  • OFFLINE
  •  
  • Local time:05:31 PM

Posted 08 October 2012 - 11:36 AM

:welcome:

Lets give it a try. You will need a USB Flash drive.

Download the appropriate version for your system of the Farbar Recovery Scan Tool and save it to a flash drive.

Plug the flashdrive into the infected PC.

Enter System Recovery Options. (If you cannot reach the Advanced Boot Options, you can use the install CD to reach the System Recovery Options)

To enter System Recovery Options from the Advanced Boot Options:

  • Restart the computer.
  • As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.
  • Click on Repair your computer menu item.
  • Select US as the keyboard language settings, and then click Next.
  • Select the operating system you want to repair, and then click Next.
  • Select your user account and click Next.
On the System Recovery Options menu you will get the following options:

Startup Repair
System Restore
Windows Complete PC Restore
Windows Memory Diagnostic Tool
Command Prompt

  • Select Command Prompt
  • In the command window type in notepad and press Enter.
  • The notepad opens. Under File menu select Open.
  • Select "Computer" and find your flash drive letter and close the notepad.
  • In the command window type e:\frst.exe (for x64 bit version type e:\frst64) and press Enter
    Note: Replace letter e with the drive letter of your flash drive.
  • The tool will start to run.
  • When the tool opens click Yes to disclaimer.
  • Press Scan button.
  • It will make a log (FRST.txt) in the flash drive. Please copy and paste it to your reply.


Thank you for the reply, and thank you boopme for moving my topic to the correct forum. I downloaded the program you instructed and put it on a USB drive, but unfortunately I am not able to reach the System Recovery Options or the Advanced Boot Options. When I try via the F8 key, I am brought to the Windows Boot Manager screen I described. If I try via my Windows disk, I am stuck at a loading screen after I select "System Recovery" or "Install Windows" that doesn't go away.

#5 JSntgRvr

JSntgRvr

    Master Surgeon General


  • Malware Response Team
  • 11,635 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto Rico
  • Local time:06:31 PM

Posted 08 October 2012 - 12:59 PM

Lets try another application.

You will need a USB drive and a CD to burn. There will be several steps to follow.

Download GETxPUD.exe to the desktop of your clean computer
  • Run GETxPUD.exe
  • A new folder will appear on the desktop.
  • Open the GETxPUD folder and click on the get&burn.bat
  • The program will download xpud_0.9.2.iso, and upon finished will open BurnCDCC ready to burn the image.
  • Click on Start and follow the prompts to burn the image to a CD.
  • Next download driver.sh by noahdfear to your USB drive
  • Also Download Query.exe by noahdfear to the USB drive. In your working computer, navigate to the USB drive and click on the Query.exe. A folder and a file, query.sh, will be extracted.
  • Once this process is completed, download Dumpit by noahdfear to the USB drive.
  • Remove the USB & CD and insert them in the sick computer
  • Boot the Sick computer with the CD you just burned
  • The computer must be set to boot from the CD
  • In some computers you need to tap F12 and choose to boot from the CD, in others is the Esc key. Please consult your computer's documentation.
  • Follow the prompts
  • A Welcome to xPUD screen will appear
  • Press File
  • Expand mnt
  • sda1,2...usually corresponds to your HDD
  • sdb1 is likely your USB
  • Click on the folder that represents your USB drive (sdb1 ?)
  • Confirm that you see driver.sh that you downloaded there
  • Press Tool at the top
  • Choose Open Terminal
  • Type bash driver.sh
  • Press Enter
  • After it has finished a report will be located on your USB drive named report.txt
  • Then type bash driver.sh -af
  • Press Enter
  • You will be prompted to input a filename.
  • Type the following:

    Winlogon.exe

  • Press Enter
  • If successful, the script will search for this file.
  • After it has completed the search enter the next file to be searched
  • Type the following:

    volsnap.sys

  • Press Enter
  • If successful, the script will search for this file.
  • After it has completed the search enter the next file to be searched
  • Type the following:

    winload.exe

  • Press Enter
  • If successful, the script will search for this file.
  • After it has completed the search enter the next file to be searched
  • Type the following:

    explorer.exe

  • Press Enter
  • After it has completed the search enter the next file to be searched
  • Type the following:

    Userinit.exe

  • Press Enter
  • After the search is completed type Exit and press Enter.
  • After it has finished a report will be located in the USB drive as filefind.txt
  • While still in the Open Terminal, type bash query.sh
  • Press Enter
  • After it has finished a report will be located in the USB drive as RegReport.txt
  • Close the Open Terminal.
  • Confirm that you see the file dumpit.ndf in your USB drive and double click on it.
  • After it has finished a report will be located in your USB drive named mbr.zip
  • Plug the USB back into the clean computer post the contents of the report.txt, filefind.txt and RegReport.txt in your next reply. The mbr.zip file must be attached to your reply.

No request for help throughout private messaging will be attended.

If I have helped you, consider making a donation to help me continue the fight against Malware!
btn_donate_SM.gif


#6 Clauslester

Clauslester
  • Topic Starter

  • Members
  • 35 posts
  • OFFLINE
  •  
  • Local time:05:31 PM

Posted 09 October 2012 - 07:59 PM

I am having a problem with the CD that I burned. When I turn on my laptop it goes to the xPud language selection page, but I do not see a "Welcome screen" or anywhere where I can select file as your described. I select English, then I get the following screen: (This will be a joy to type out! :thumbup2: )

(ww) warning, (EE) error, (NI) not implemented, (??) unknown.
(==) Log file: "/var/log/Xorg.0.log", Time: Tue Oct 9 20:37:38 2012
(==) Using config file: "/etc/X11/xorg.conf"
Primary device is not PCI
(Error) No devices detected.

Fatal server error:
no screens found

Please consult the The X.Org Foundation support
at http://wiki.x.org
for help.
Please also check the log file at "/var/log/Xorg.0.log" for additional information.

ddxSigGiveUp: Closing log
[ 7.466814] sd 6:0:0:0: [sbdb] Assuming drive cache: write through
[ 7.469537] sd 6:0:0:0: [sbdb] Assuming drive cache: write through
[ 7.476310] sd 6:0:0:0: [sbdb] Assuming drive cache: write through
giving up.
xinit: No such file or directory (errno 2): unable to connect to X server
xinit: No such process (errno 3): Server error.
xauth: (argv):1: bad display name "(none):0" in "remove" command
sh: no job control in this shell
sh-4.0#

Edited by Clauslester, 09 October 2012 - 08:02 PM.


#7 JSntgRvr

JSntgRvr

    Master Surgeon General


  • Malware Response Team
  • 11,635 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto Rico
  • Local time:06:31 PM

Posted 09 October 2012 - 09:14 PM

See if you can create a bootable CD with Puppy Linux

No request for help throughout private messaging will be attended.

If I have helped you, consider making a donation to help me continue the fight against Malware!
btn_donate_SM.gif


#8 Clauslester

Clauslester
  • Topic Starter

  • Members
  • 35 posts
  • OFFLINE
  •  
  • Local time:05:31 PM

Posted 09 October 2012 - 11:57 PM

See if you can create a bootable CD with Puppy Linux


When I click the download link on that website, I am sent to this page ftp://distro.ibiblio.org/puppylinux/ but I am confused as to what I need specifically.
While I do know my way around a computer, I know little to nothing about Linux or how it will help me with a problem on a Windows OS. I apologize for my confusion, but semi-detailed instructions would be best.

#9 JSntgRvr

JSntgRvr

    Master Surgeon General


  • Malware Response Team
  • 11,635 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto Rico
  • Local time:06:31 PM

Posted 10 October 2012 - 12:22 AM

Check this link. Download the .iso file. Burn to a CD and boot with it.

No request for help throughout private messaging will be attended.

If I have helped you, consider making a donation to help me continue the fight against Malware!
btn_donate_SM.gif


#10 Clauslester

Clauslester
  • Topic Starter

  • Members
  • 35 posts
  • OFFLINE
  •  
  • Local time:05:31 PM

Posted 10 October 2012 - 02:08 AM

"Loading drivers needed to access disk drivers. done
Searching for Puppy files......._"

is the screen my laptop seems to be staying at.


-Edit-
I was able to boot from Puppy successfully. Where we do go from here?

Edited by Clauslester, 10 October 2012 - 02:29 AM.


#11 JSntgRvr

JSntgRvr

    Master Surgeon General


  • Malware Response Team
  • 11,635 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto Rico
  • Local time:06:31 PM

Posted 10 October 2012 - 09:36 AM

Assuming the USB drive is recognized as sdb1, see if you can follow these instructions


Download the following files into the USB drive:

driver.sh by noahdfear
Query.exe by noahdfear

In your working computer, navigate to the USB drive and click on the Query.exe. A folder and a file, query.sh, will be extracted.

Dumpit by noahdfear

Insert the the USB drive in the ailing computer and boot to Puppy Linux.

  • Click on the icon that represent the USB drive (sdb1?)
  • Click on an empty space on the window, then Right click on it. Select Windows, then Terminal Here.
  • Typebash driver.sh
  • Press Enter
  • After it has finished a report will be located on your USB drive named report.txt
  • Then type bash driver.sh -af
  • Press Enter
  • You will be prompted to input a filename.
  • Type the following:

    Winlogon.exe

  • Press Enter
  • If successful, the script will search for this file.
  • After it has completed the search enter the next file to be searched
  • Type the following:

    winload.exe

  • Press Enter
  • If successful, the script will search for this file.
  • After it has completed the search enter the next file to be searched
  • Type the following:

    volsnap.sys

  • Press Enter
  • If successful, the script will search for this file.
  • After it has completed the search enter the next file to be searched
  • Type the following:

    explorer.exe

  • Press Enter
  • After it has completed the search enter the next file to be searched
  • Type the following:

    Userinit.exe

  • Press Enter
  • After the search is completed type Exit and press Enter.
  • After it has finished a report will be located in the USB drive as filefind.txt
  • While still in the Open Terminal, type bash query.sh
  • Press Enter
  • After it has finished a report will be located in the USB drive as RegReport.txt
  • Close the Open Terminal.
  • Click on the icon that represent the USB drive (sdb1?)
  • Confirm that you see the file dumpit.ndf in your USB drive and double click on it.
  • After it has finished a report will be located in your USB drive named mbr.zip
  • Plug the USB back into the clean computer post the contents of the report.txt, filefind.txt and RegReport.txt in your next reply. The mbr.zip file must be attached to your reply.

No request for help throughout private messaging will be attended.

If I have helped you, consider making a donation to help me continue the fight against Malware!
btn_donate_SM.gif


#12 Clauslester

Clauslester
  • Topic Starter

  • Members
  • 35 posts
  • OFFLINE
  •  
  • Local time:05:31 PM

Posted 10 October 2012 - 11:57 AM

The only way that what I differed from your instructions was when you said to "Confirm that you see the file dumpit.ndf in your USB drive and double click on it", I could only single click it before it opened, which I don't believe should change anything. However, instead of being an mbr.zip file I have a file named mbrdump.sh

Is it as simple as converting mbrdump.sh into a .zip file? If you would still like the results of the other files or if there is another step I can take to solve this please let me know.

#13 JSntgRvr

JSntgRvr

    Master Surgeon General


  • Malware Response Team
  • 11,635 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto Rico
  • Local time:06:31 PM

Posted 10 October 2012 - 12:29 PM

Were you able to run the other two?

No request for help throughout private messaging will be attended.

If I have helped you, consider making a donation to help me continue the fight against Malware!
btn_donate_SM.gif


#14 Clauslester

Clauslester
  • Topic Starter

  • Members
  • 35 posts
  • OFFLINE
  •  
  • Local time:05:31 PM

Posted 10 October 2012 - 04:26 PM

I have performed your instructions multiple times to ensure I am not doing anything incorrectly, but to no avail.

Starting off, after I click "Terminal here" and type "bash driver.sh" I get a message saying
"rm: cannot remove 'files.txt': No such file or directory"
In one of my attempts to get this working I made a files.txt to avoid this error and it worked, but I still had the same problem resulting with an mbrdump.sh file instead of mbr.zip.

Posted Image

In the screenshot I attached, it shows how when I first click dumpit.ndf a .zip file does appear, but it quickly vanishes.

#15 JSntgRvr

JSntgRvr

    Master Surgeon General


  • Malware Response Team
  • 11,635 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto Rico
  • Local time:06:31 PM

Posted 10 October 2012 - 07:40 PM

Let me do some testing in my PC.

No request for help throughout private messaging will be attended.

If I have helped you, consider making a donation to help me continue the fight against Malware!
btn_donate_SM.gif





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users