Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Windows will not boot up. stuck at flashing cursor


  • Please log in to reply
10 replies to this topic

#1 jjlwood

jjlwood

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:05:57 AM

Posted 05 November 2012 - 12:31 AM

I was watching a football game on firstrowsport.eu and my computer (a hp pavilion desktop) just shut down uncommanded. I waited for it to restart, and after the BIOS screen, it just had a flashing cursor.

I used the disc version of PartedMagic to get into my computer and ran the fdisk-l command. I got the following data:

Disk /dev/sda: 750.2 GB, 750156374016 bytes
255 heads, 63 sectors/track, 91201 cylinders, total 1465149168 sectors
Units = sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes
Disk identifier: 0x1549f232

Device Boot Start End Blocks Id System
/dev/sda1 * 33 33 0 0 Empty
/dev/sda2 * 63 1436660819 718330378+ 7 HPFS/NTFS/exFAT
/dev/sda3 1436660820 1464838829 14089005 7 HPFS/NTFS/exFAT


Please help!
Attached is my mbr.bin.zip file.Attached File  mbr.bin.zip   612bytes   2 downloads

BC AdBot (Login to Remove)

 


#2 AustrAlien

AustrAlien

    Inquisitor


  • BC Advisor
  • 6,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cowra NSW Australia
  • Local time:09:57 PM

Posted 05 November 2012 - 12:47 AM

The first partition is invalid and is set with a boot flag.
  • I will edit the MBR and attach for you in my next post.
    You can then write the edited MBR to the hard drive and hopefully then boot normally to Windows.
MBR viewed with MBRscan:
MBR Analyzer v1.1.0

File : C:\Documents and Settings\GEOFF\Desktop\jjlwood_BC\mbr.bin\mbr.bin

--------------------------------------------------------------

--OFFSET--  0-1-2-3-4-5-6-7-8-9-A-B-C-D-E-F-  0123456789ABCDEF

0x00000000  33FFBE00028ED7BC007ABBA0078BCE8E  3....׼.z....
0x00000010  DB8EC3F3A4EA5D00A00710000100007C  .]........|
0x00000020  000000000000000000000C668B5508B4  ...........f.U.
0x00000030  42C6061F007C32C06689162200BE1A00  B...|2f.."...
0x00000040  B280CD130F82CD00813EFE0355AAC3AC  ......>.Uì
0x00000050  0AC074FAB40EBB0700CD10EBF28BE98B  .t......
0x00000060  D9C6062A000CBFEE01B90400386D0474  .*.....8m.t
0x00000070  37E8B7FF751F66B85245434F66390603  7.u.fRECOf9..
0x00000080  02740C663906F003750BC6062A00078B  .t.f9..u..*...
0x00000090  DFC64504128A45043C07740A3C0B7406  E...E.<.t.<.t.
0x000000A0  24F53C0475028BEF882D83EF10E2BD0B  $<.u...-...
0x000000B0  DB743D0BED74398BFBF6066D01047576  t=.t9..m..uv
0x000000C0  F6066D01027573B411CD16755C8A166C  .m..us..u\..l
0x000000D0  010AD27465FECA7817368A0E6C0480C1  ..tex.6..l..
0x000000E0  12B411CD167542363A0E6C0475F3EBE5  ...uB6:.l.u
0x000000F0  6633D2E839FFB104BFBE03803D80745E  f39....=.t^
0x00000100  83C710E2F6B104BFBE03807D0400754E  .....}..uN
0x00000110  83C710E2F58B367001E833FF8B367201  ...6p.3..6r.
0x00000120  E82CFFB400CD16CD18B410CD163C7274  ,......<rt
0x00000130  0580FC8575BA8BEFEB07F6066D011074  ...u...m..t
0x00000140  06A02A008845048BFDC6058080266D01  ..*..E.....&m.
0x00000150  F96633D2C6061F007AB443E8D8FEE8CA  f3...zC
0x00000160  FE8B366E0175B2EA007C000001117601  .6n.u.|....v.
0x00000170  7B018201870145727232000D0A457272  {.....Err2...Err
0x00000180  310045727233000D0A50726573732046  1.Err3...Press F
0x00000190  313120666F7220456D657267656E6379  11 for Emergency
0x000001A0  205265636F766572792000732061206B   Recovery .s a k
0x000001B0  65790D0A00006C0132F2491500008000  ey....l.2I.....
0x000001C0  22000000000021000000000000008001  ".....!.........
0x000001D0  010007FEFFFF3F00000015B4A15500FE  .....?....U.
0x000001E0  FFFF07FEFFFF54B4A1555AF6AD010000  .....TUZ...
0x000001F0  000000000000000000000000000055AA  ..............U

---------------------------[ MBR ]----------------------------

MBR_CODE        : Unknown MBR Code
MD5             : 27BC731F7B137FEB32E0C19B4AEF5CEB
SHA1            : 37F1C48BEAAEA82E2DFBC6E63E17B91736471C72
PARTITIONS      : 2
DISK_SIGNATURE  : 32F24915
SIGNATURE_ID    : AA55h

-----------------------[ PARTITION 2 ]------------------------

BOOTABLE        : YES
PARTITION_TYPE  : 0x07 ( NTFS / HPFS)
PARTITION_SIZE  : 685 Go
STARTING_SECTOR : 63
ENDING_SECTOR   : 1436660820
TOTAL_SECTORS   : 1436660757

-----------------------[ PARTITION 3 ]------------------------

BOOTABLE        : NO
PARTITION_TYPE  : 0x07 ( NTFS / HPFS)
PARTITION_SIZE  : 13.44 Go
STARTING_SECTOR : 1436660820
ENDING_SECTOR   : 1464838830
TOTAL_SECTORS   : 28178010

AustrAlien
Google is my friend. Make Google your friend too.

Posted Image

#3 jjlwood

jjlwood
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:05:57 AM

Posted 05 November 2012 - 12:53 AM

You are a Godsend! I anxiously await your fix!

#4 AustrAlien

AustrAlien

    Inquisitor


  • BC Advisor
  • 6,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cowra NSW Australia
  • Local time:09:57 PM

Posted 05 November 2012 - 12:55 AM

I just hope you don't have any surprises in store for me, like mickapoo did !!!
AustrAlien
Google is my friend. Make Google your friend too.

Posted Image

#5 jjlwood

jjlwood
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:05:57 AM

Posted 05 November 2012 - 01:00 AM

well i just started googling once i realized i had a problem and found yall's topic. i havent talked to microsoft or anything. most i did was try to run the system repair disk and rolled it back to two days ago. so it SHOULDNT be anything crazy in store for you....i hope!

#6 AustrAlien

AustrAlien

    Inquisitor


  • BC Advisor
  • 6,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cowra NSW Australia
  • Local time:09:57 PM

Posted 05 November 2012 - 01:02 AM

Your MBR has been edited to remove the invalid first partition along with its boot flag and now looks like this:
MBR Analyzer v1.1.0

File : C:\Documents and Settings\GEOFF\Desktop\jjlwood_BC\mbr.bin\mbra.bin

--------------------------------------------------------------

--OFFSET--  0-1-2-3-4-5-6-7-8-9-A-B-C-D-E-F-  0123456789ABCDEF

0x00000000  33FFBE00028ED7BC007ABBA0078BCE8E  3....׼.z....
0x00000010  DB8EC3F3A4EA5D00A00710000100007C  .]........|
0x00000020  000000000000000000000C668B5508B4  ...........f.U.
0x00000030  42C6061F007C32C06689162200BE1A00  B...|2f.."...
0x00000040  B280CD130F82CD00813EFE0355AAC3AC  ......>.Uì
0x00000050  0AC074FAB40EBB0700CD10EBF28BE98B  .t......
0x00000060  D9C6062A000CBFEE01B90400386D0474  .*.....8m.t
0x00000070  37E8B7FF751F66B85245434F66390603  7.u.fRECOf9..
0x00000080  02740C663906F003750BC6062A00078B  .t.f9..u..*...
0x00000090  DFC64504128A45043C07740A3C0B7406  E...E.<.t.<.t.
0x000000A0  24F53C0475028BEF882D83EF10E2BD0B  $<.u...-...
0x000000B0  DB743D0BED74398BFBF6066D01047576  t=.t9..m..uv
0x000000C0  F6066D01027573B411CD16755C8A166C  .m..us..u\..l
0x000000D0  010AD27465FECA7817368A0E6C0480C1  ..tex.6..l..
0x000000E0  12B411CD167542363A0E6C0475F3EBE5  ...uB6:.l.u
0x000000F0  6633D2E839FFB104BFBE03803D80745E  f39....=.t^
0x00000100  83C710E2F6B104BFBE03807D0400754E  .....}..uN
0x00000110  83C710E2F58B367001E833FF8B367201  ...6p.3..6r.
0x00000120  E82CFFB400CD16CD18B410CD163C7274  ,......<rt
0x00000130  0580FC8575BA8BEFEB07F6066D011074  ...u...m..t
0x00000140  06A02A008845048BFDC6058080266D01  ..*..E.....&m.
0x00000150  F96633D2C6061F007AB443E8D8FEE8CA  f3...zC
0x00000160  FE8B366E0175B2EA007C000001117601  .6n.u.|....v.
0x00000170  7B018201870145727232000D0A457272  {.....Err2...Err
0x00000180  310045727233000D0A50726573732046  1.Err3...Press F
0x00000190  313120666F7220456D657267656E6379  11 for Emergency
0x000001A0  205265636F766572792000732061206B   Recovery .s a k
0x000001B0  65790D0A00006C0132F2491500008001  ey....l.2I.....
0x000001C0  010007FEFFFF3F00000015B4A15500FE  .....?....U.
0x000001D0  FFFF07FEFFFF54B4A1555AF6AD010000  .....TUZ...
0x000001E0  00000000000000000000000000000000  ................
0x000001F0  000000000000000000000000000055AA  ..............U

---------------------------[ MBR ]----------------------------

MBR_CODE        : Unknown MBR Code
MD5             : 3209281D9E2567DBE47BFED7A67978A2
SHA1            : B7F84149E21516D7C9B2767DB9E84C717F4EB27E
PARTITIONS      : 2
DISK_SIGNATURE  : 32F24915
SIGNATURE_ID    : AA55h

-----------------------[ PARTITION 1 ]------------------------

BOOTABLE        : YES
PARTITION_TYPE  : 0x07 ( NTFS / HPFS)
PARTITION_SIZE  : 685 Go
STARTING_SECTOR : 63
ENDING_SECTOR   : 1436660820
TOTAL_SECTORS   : 1436660757

-----------------------[ PARTITION 2 ]------------------------

BOOTABLE        : NO
PARTITION_TYPE  : 0x07 ( NTFS / HPFS)
PARTITION_SIZE  : 13.44 Go
STARTING_SECTOR : 1436660820
ENDING_SECTOR   : 1464838830
TOTAL_SECTORS   : 28178010
Instructions along with the attached edited MBR in next post.
AustrAlien
Google is my friend. Make Google your friend too.

Posted Image

#7 AustrAlien

AustrAlien

    Inquisitor


  • BC Advisor
  • 6,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cowra NSW Australia
  • Local time:09:57 PM

Posted 05 November 2012 - 01:10 AM

The amended MBR (mbra.bin zipped) is attached.

Download mbra.zip. By default it will be downloaded into the Downloads folder in the root directory of PartedMagic.

Right-click on mbra.zip > Edit > Copy to > Location
  • Select root in the left column of the new window as the location for the copy, and click OK.
  • Close that window.
On the PartedMagic Desktop, double-click on File Manager to open a new window showing the contents of the root directory and you should see the mbra.zip file there.

Right-click on mbra.zip > Open > Archive Manager > Archive Default and UNcheck the option "Create Subfolder".
  • Right-click on mbra.zip > Open > Archive Manager > Extract.
  • You should now see the mbra.bin file in the root directory.
    If you do NOT see the mbra.bin file in the root directory, STOP and ask/let me know if you are having a problem.
The next job will be to write mbra.bin to the hard drive.

Important note: The file mbra.bin MUST be in the root directory before continuing:
  • If you do not see the mbra.bin file in the root directory, then do NOT proceed. STOP and ask/let me know.
From the PartedMagic Desktop, open a terminal window and at the prompt type:

dd if=mbra.bin of=/dev/sda bs=512 count=1

  • Note: Leave a space between the following:
  • dd
  • if=mbra.bin
  • of=/dev/sda
  • bs=512
  • count=1
    It is extremely important that the if and of statements are correctly entered.
... and press the <ENTER> key.

A successful write will result in output similar to the following:
root@PartedMagic:~# dd if=mbra.bin of=/dev/sda bs=512 count=1
1+0 records in
1+0 records out
512 bytes (512 <img src='http://www.bleepingcomputer.com/forums/public/style_emoticons/<#EMO_DIR#>/cool.gif' class='bbc_emoticon' alt='B)' /> copied, 0.00314681 s, 163 kB/s
root@PartedMagic:~#
  • If you see anything significantly different, let me know.

If the file was successfully written to the hard drive, shut down PartedMagic and remove the CD.
  • Start the computer and boot to the hard drive as normal.
    • Note: If you have had to configure the system to boot from the CD, then you may need to enter the BIOS Setup Menu and change the boot order setting so that the system will boot from the hard drive.
  • Does Windows load successfully?

Attached Files

  • Attached File  mbra.zip   572bytes   2 downloads

Edited by AustrAlien, 05 November 2012 - 01:14 AM.

AustrAlien
Google is my friend. Make Google your friend too.

Posted Image

#8 jjlwood

jjlwood
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:05:57 AM

Posted 05 November 2012 - 01:22 AM

Amongst all men, thou art a god! thank you so very much! you have saved myself and my wife from a very unwelcome heart attack! this would have been the 3rd computer just go out and thanks to you and your masterful knowledge, we are only down two right now! thank you from the bottom of my heart!

#9 AustrAlien

AustrAlien

    Inquisitor


  • BC Advisor
  • 6,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cowra NSW Australia
  • Local time:09:57 PM

Posted 05 November 2012 - 01:28 AM

Wonderful! :thumbup2:

I strongly suggest that you get the system checked out for malware as this may have been responsible for the problem occurring? I suggest either:

Edited by AustrAlien, 05 November 2012 - 01:31 AM.

AustrAlien
Google is my friend. Make Google your friend too.

Posted Image

#10 jjlwood

jjlwood
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:05:57 AM

Posted 05 November 2012 - 02:01 AM

i will run a deep malewarebytes scan on it and see if there is something underlying that i missed. thank you again for your help!

#11 AustrAlien

AustrAlien

    Inquisitor


  • BC Advisor
  • 6,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cowra NSW Australia
  • Local time:09:57 PM

Posted 05 November 2012 - 03:52 AM

Please post the MBAM log if anything nasty turns up.
AustrAlien
Google is my friend. Make Google your friend too.

Posted Image




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users