Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Windows 7 StartupRepairOffline


  • This topic is locked This topic is locked
21 replies to this topic

#1 Preszsbuild

Preszsbuild

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:11:41 AM

Posted 09 February 2013 - 03:46 AM

Tried the following to repair:
1. Last Good Know Configuration
2. Safe Mode
3. System Recovery Options

With the System Recovery and the the startup repair I get the following message
: problemsignature:
 Problem event name: StartupRepairOffline
 Problem signature 01: 6.1.7600.16385
 Problem signature 02: 6.1.7600.16385
 Problem signature 03: Unknown
 Problem signature 04: 21200570
 Problem signature 05: AutoFailover
 Problem signature 06: 21
 Problem signature 07: CorruptFile
 OS version: 6.1.7600.2.0.0.256.1

The System Recovery Options:
- Startup Repair
- System Restore
- System Image Recovery
- Windows Memory Diagnostics
- Command Prompt

But the only option I get is the Startup Repair?

I add the FRST.txt up here.

Attached Files

  • Attached File  FRST.txt   69.23KB   5 downloads

Edited by Preszsbuild, 09 February 2013 - 03:50 AM.


BC AdBot (Login to Remove)

 


#2 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 60,924 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:11:41 AM

Posted 09 February 2013 - 08:37 AM

Hello, can you please tell me what happens if you choose Start Windows Normally instead of Startup Repair? How far does Windows boot?


regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#3 Preszsbuild

Preszsbuild
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:11:41 AM

Posted 09 February 2013 - 12:56 PM

Hello, can you please tell me what happens if you choose Start Windows Normally instead of Startup Repair? How far does Windows boot?

Same result the startup repair coming. 10 munites almost.



#4 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 60,924 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:11:41 AM

Posted 09 February 2013 - 01:06 PM

After you select STart up windows normally, does the computer actually restart, do you at any point see the windows splashscreen?


regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#5 Preszsbuild

Preszsbuild
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:11:41 AM

Posted 09 February 2013 - 01:23 PM

After you select STart up windows normally, does the computer actually restart, do you at any point see the windows splashscreen?

i select it and 'starting windows' comes for 1-2 seconds after that 'windows loading files' seems finally Startup Repair opens.
And i miss understanded i dont know complately what's boot. I have internet, virus,program information a lot but i dont know format things. Because i didn't need it before and i learn things when i need it. So first time i need such a help. Its frustrating, i cant use my computer. 


Edited by Preszsbuild, 09 February 2013 - 01:30 PM.


#6 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 60,924 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:11:41 AM

Posted 09 February 2013 - 01:53 PM

It would be helpful if you could explain what exactly happened before this problem occurred the first time; did you have an infection, did you install something news, or did something else happen that you recall?


regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#7 Preszsbuild

Preszsbuild
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:11:41 AM

Posted 09 February 2013 - 02:10 PM

It would be helpful if you could explain what exactly happened before this problem occurred the first time; did you have an infection, did you install something news, or did something else happen that you recall?

I start a scan on Advanced System Care 6 after i deleted Norton Internet Security and i setup Bitdefender and i started a scan, when the scan keep running i was using chrome so pc locked i guess. I hit off key until it shutdown. I never see desktop after that time.



#8 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 60,924 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:11:41 AM

Posted 09 February 2013 - 02:20 PM

Do you remember if Advanced system care or Bitdefender did actually detect/remove anything? Or did this happen during the installations?

I'd like to get also an MBR dump here.

Try this please. You will need a USB drive.

Download GETxPUD.exe to the desktop of your clean computer
  • Run GETxPUD.exe
  • A new folder will appear on the desktop.
  • Open the GETxPUD folder and click on the get&burn.bat
  • The program will download xpud_0.9.2.iso, and upon finished will open BurnCDCC ready to burn the image.
  • Click on Start and follow the prompts to burn the image to a CD.
  • Remove the USB & CD and insert it in the sick computer
  • Boot the Sick computer with the CD you just burned
  • The computer must be set to boot from the CD
  • Gently tap F12 and choose to boot from the CD
  • Follow the prompts
  • A Welcome to xPUD screen will appear
  • Press File
  • Expand mnt
  • sda1,2...usually corresponds to your HDD
  • sdb1 is likely your USB
  • Click on the folder that represents your USB drive (sdb1 ?)
  • Press Tool at the top
  • Choose Open Terminal
  • Type the following and press enter:

    dd if=/dev/sda of=mbr.bin bs=512 count=1
  • Press Enter
  • After it has finished a file will be located on your USB drive named mbr.bin
  • Remove the USB drive and insert it back in your working computer and navigate to mbr.bin, zip it up and attach it to your next reply.
  • This will allow me to have a look at the MasterBootRecord of your drive and see if it is infected.

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#9 Preszsbuild

Preszsbuild
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:11:41 AM

Posted 09 February 2013 - 02:41 PM

I have got a netbook. So there isn't a DVD reader. The program which is you send doesn't admit a USB.



#10 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 60,924 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:11:41 AM

Posted 09 February 2013 - 02:45 PM

No problem, we have an usb version as well. :)

 

Download http://unetbootin.sourceforge.net/unetboot...dows-latest.exe & http://noahdfear.net/downloads/bootable/xPUD/xpud-0.9.2.iso to the desktop of your clean computer

  • Insert your USB drive
  • Press Start > My Computer > right click your USB drive > choose Format > Quick format
  • Double click the unetbootin-xpud-windows-387.exe that you just downloaded
  • Press Run then OK
  • Select the DiskImage option then click the browse button located on the right side of the textbox field.
  • Browse to and select the xpud-0.9.2.iso file you downloaded
  • Verify the correct drive letter is selected for your USB device then click OK
  • It will install a little bootable OS on your USB device
  • Once the files have been written to the device you will be prompted to reboot ~ do not reboot and instead just Exit the UNetbootin interface
  • After it has completed do not choose to reboot the clean computer simply close the installer.

You can now follow the instructions from my previous post, instead from CD boot from USB.


regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#11 Preszsbuild

Preszsbuild
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:11:41 AM

Posted 09 February 2013 - 03:18 PM

When i boot the computer a error came up.


Fatar server error:
no screens found.

....

Please also check the log file at "/var/log/Xorg.0.log" for additional information.
ddxSigGiveUp: Closing log
.....
...



#12 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 60,924 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:11:41 AM

Posted 09 February 2013 - 03:57 PM

That most likely is caused by a missing driver in the xPUD package.

 

What about this question?

Do you remember if Advanced system care or Bitdefender did actually detect/remove anything? Or did this happen during the installations?

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#13 Preszsbuild

Preszsbuild
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:11:41 AM

Posted 09 February 2013 - 04:01 PM

That most likely is caused by a missing driver in the xPUD package.

 

What about this question?

 

Do you remember if Advanced system care or Bitdefender did actually detect/remove anything? Or did this happen during the installations?

Yes, 3 viruses deleted by Bitdefender but i dont remember any of them


Edited by Preszsbuild, 09 February 2013 - 04:01 PM.


#14 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 60,924 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:11:41 AM

Posted 10 February 2013 - 02:38 AM

Could you look in the Bitdefender folder (both in program files (x86) and in c:\users\<your username>\appdata (sub)folders) for anything related to logs? I'm sorry I can't be more specific, Bitdefender isn't really clear on where it saves its actual logs, it only mentions it saves them.

 

It might be very important to know what files were deleted.

 

Also, have you tried booting in Safe Mode? To do this, select "start windows normally" and put one finger on the F8 key. Press Enter and immediately start tapping F8 until the Advanced boot menu options come up. Try all three safe mode variants.


regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#15 Preszsbuild

Preszsbuild
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:11:41 AM

Posted 10 February 2013 - 06:37 AM

I can only use cmd for access files. So i cant see hidden files. The log files probably in AppData and i cant access it. The same problem here http://www.bleepingcomputer.com/forums/t/470140/windows-7-boot-repair-startuprepair-offline-bad-driver/ and it solved easily. What different in my computer?  smashcomp.gif






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users