Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Windows 7 frozen black screen with white blinking cursor


  • This topic is locked This topic is locked
33 replies to this topic

#1 rtasokan

rtasokan

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:06:48 AM

Posted 11 December 2016 - 03:07 AM

Hi! My PC has same problem as mentioned in the link below.I tried following the steps from https://www.bleepingcomputer.com/forums/t/487382/windows-7-frozen-black-screen-with-white-blinking-cursor/
I followed it till running FRST n clicking FIX.. but my PC is still showing "Fixing" though I kept it running overnight. What should i do? Should I restart the process? Could you please help me. TIA

 

I couldnt find an Addition.txt. Pasting the FRST log though.

 

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 07-12-2016

Ran by SYSTEM on MININT-JT7BHL5 (11-12-2016 00:11:26)
Running from H:\
Platform: WIN_7 (X86) Language: English (United States)
Boot Mode: Recovery
ATTENTION: Could not load system hive.
ATTENTION: System hive is missing.
 
 
==================== Registry (Whitelisted) ====================
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 
ATTENTION: Software hive is missing.
 
==================== NetSvcs (Whitelisted) ===================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
 
==================== One Month Created files and folders ========
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
 
==================== One Month Modified files and folders ========
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
 
==================== Known DLLs (Whitelisted) =========================
 
 
==================== Bamital & volsnap ======================
 
(There is no automatic fix for files that do not pass verification.)
 
C:\Windows\explorer.exe IS MISSING <==== ATTENTION
C:\Windows\System32\winlogon.exe IS MISSING <==== ATTENTION
C:\Windows\System32\svchost.exe IS MISSING <==== ATTENTION
C:\Windows\System32\services.exe IS MISSING <==== ATTENTION
C:\Windows\System32\User32.dll IS MISSING <==== ATTENTION
C:\Windows\System32\userinit.exe IS MISSING <==== ATTENTION
C:\Windows\System32\rpcss.dll IS MISSING <==== ATTENTION
C:\Windows\System32\dnsapi.dll IS MISSING <==== ATTENTION
C:\Windows\System32\Drivers\volsnap.sys IS MISSING <==== ATTENTION
C:\Windows\system32\codeintegrity\Bootcat.cache IS MISSING <==== ATTENTION
C:\Windows\System32\winsrv.dll IS MISSING <==== ATTENTION
 
==================== Restore Points  =========================
 
 
==================== Memory info =========================== 
 
Percentage of memory in use: 10%
Total physical RAM: 3893.32 MB
Available physical RAM: 3467.95 MB
Total Virtual: 3891.6 MB
Available Virtual: 3469.9 MB
 
==================== Drives ================================
 
Drive d: () (Fixed) (Total:117.19 GB) (Free:6.35 GB) NTFS
Drive e: () (Fixed) (Total:117.19 GB) (Free:39.25 GB) NTFS
Drive f: () (Fixed) (Total:114.19 GB) (Free:7.75 GB) NTFS
Drive g: (Repair disc Windows 7 32-bit) (CDROM) (Total:0.14 GB) (Free:0 GB) UDF
Drive h: () (Removable) (Total:1.91 GB) (Free:1.9 GB) FAT
Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS
 
==================== MBR & Partition Table ==================
 
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 05DB05DA)
Partition 1: (Active) - (Size=117.2 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=348.6 GB) - (Type=OF Extended)
 
========================================================
Disk: 1 (Size: 1.9 GB) (Disk ID: A9EF98EC)
Partition 1: (Not Active) - (Size=1.9 GB) - (Type=06)
 
==================== End of FRST.txt ============================
 
 


BC AdBot (Login to Remove)

 


#2 Oh My!

Oh My!

    Adware and Spyware and Malware.....


  • Malware Response Instructor
  • 36,617 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:California
  • Local time:06:18 PM

Posted 15 December 2016 - 10:31 AM

Greetings rtasokan and :welcome: to BleepingComputer's Virus/Trojan/Spyware/Malware Removal forum.

My name is Oh My! and I am here to help you! Now that we are "friends" please call me Gary.

If you would allow me to call you by your first name I would prefer to do that.

===================================================

Ground Rules:
  • First, I would like to inform you that most of us here at Bleeping Computer offer our expert assistance out of the goodness of our hearts. Please try to match our commitment to you with your patience toward us. If this was easy we would never have met.
  • Please do not run any tools or take any steps other than those I will provide for you while we work on your computer together. I need to be certain about the state of your computer in order to provide appropriate and effective steps for you to take. Most often "well intentioned" (and usually panic driven!) independent efforts can make things much worse for both of us. If at any point you would prefer to take your own steps please let me know, I will not be offended. I would be happy to focus on the many others who are waiting in line for assistance.
  • Please perform all steps in the order they are listed in each set of instructions. Some steps may be a bit complicated. If things are not clear, be sure to stop and let me know. We need to work on this together with confidence.
  • Please copy and paste all logs into your post unless directed otherwise. Please do not re-run any programs I suggest. If you encounter problems simply stop and tell me.
  • When you post your reply, use the Replytopic.jpg button instead.
  • In the upper right hand corner of the topic you will see the Followtopic.jpg button. Click on this then choose Immediate E-Mail notification and then Proceed and you will be sent an email once I have posted a response.
  • If you do not reply to your topic after 5 days we assume it has been abandoned and I will close it.
  • When your computer is clean I will alert you of such. I will also provide for you detailed information about how you can combat future infections.
  • I would like to remind you to make no further changes to your computer unless I direct you to do so.
===================================================

Now that I am assisting you, you can expect that I will be very responsive to your situation. If you are able, I would request you check this thread at least once per day so that we can try to resolve your issues effectively and efficiently. If you are going to be delayed please be considerate and post that information so that I know you are still with me. Unfortunately, there are many people waiting to be assisted and not enough of us at BleepingComputer to go around. I appreciate your understanding and diligence.

Thank you for your patience thus far. Things aren't looking good but let's see what we can do.

Can you explain the steps you took from the start, like run a FRST scan successfully, download the fixlist from the link you referenced, etc.
Gary
 
If I do not reply within 24 hours please send me a Personal Message.

"Lord, to whom would we go? You have the words that give eternal life. We believe, and we know you are the Holy One of God."

#3 rtasokan

rtasokan
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:06:48 AM

Posted 15 December 2016 - 12:47 PM

Hi Gary. Thank you for you response.

1. I downloaded the Farbar Recovery Scan tool and saved it to the flashdrive.

2. I used a Windows 7 System Repair Disk to boot the PC and accessed the command prompt.

3. In the command window, I typed H:\FRST and started running the tool.

4. Once it opened, I clicked Scan.

5. Since i followed steps from another thread (link :

6. This step did not complete and the fix kept running for hours together.



#4 Oh My!

Oh My!

    Adware and Spyware and Malware.....


  • Malware Response Instructor
  • 36,617 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:California
  • Local time:06:18 PM

Posted 15 December 2016 - 02:47 PM

Thanks, please do this.

===================================================

Farbar's Recovery Scan Tool - Run Fix

--------------------
  • From a clean computer press the windows key Windows_Logo_key.gif + r on your keyboard at the same time. Type in notepad and press Enter
  • Click Format then check Word Wrap
  • Please copy and paste the contents of the below code box into the open notepad and save it on the flashdrive as fixlist.txt
Restore From Backup: Software
Restore From Backup: System
Restore From Backup: Sam
Restore From Backup: Security
  • Insert the USB device into your infected computer
  • Enter the System Recovery Options (press F8 during boot up), select Repair Your Computer, then select Command Prompt.
  • Run FRST as you did the first time and press the Fix button just once and wait, the program will automatically launch fixlist.txt.
  • The tool will create a Fixlog.txt document on your USB device. Copy and paste that information in your reply.
  • Attempt to boot your computer
===================================================

Things I would like to see in your next reply. Please be sure to copy and paste any requested log information unless you are asked to attach it. :thumbsup2:
  • Fixlog

Edited by Oh My!, 15 December 2016 - 03:19 PM.
Modified instructions

Gary
 
If I do not reply within 24 hours please send me a Personal Message.

"Lord, to whom would we go? You have the words that give eternal life. We believe, and we know you are the Holy One of God."

#5 rtasokan

rtasokan
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:06:48 AM

Posted 16 December 2016 - 12:14 AM

Fix result of Farbar Recovery Scan Tool (x86) Version: 07-12-2016
Ran by SYSTEM (16-12-2016 10:42:18) Run:1
Running from H:\
Boot Mode: Recovery
 
==============================================
 
fixlist content:
*****************
Restore From Backup: Software
Restore From Backup: System
Restore From Backup: Sam
Restore From Backup: Security
*****************
 
"SOFTWARE" => Could not restore
"SYSTEM" => Could not restore
"SAM" => Could not restore
"SECURITY" => Could not restore
 
==== End of Fixlog 10:42:18 ====


#6 Oh My!

Oh My!

    Adware and Spyware and Malware.....


  • Malware Response Instructor
  • 36,617 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:California
  • Local time:06:18 PM

Posted 16 December 2016 - 10:24 AM

Thank you, please do this.

===================================================

Running chkdsk /r from Recovery Environment in Windows 7

--------------------
  • Boot your computer into the Recovery Environment (tap F8)
  • Select Command Prompt
  • Type c: and Enter
  • Type chkdsk /r and Enter
  • If you receive a message about unmounting the volume check Yes
  • If the program doesn't start automatically repeat the chkdsk /r command
  • Once the process is finished please write down any information provided on the screen
  • Attempt to reboot your computer into Normal Mode.
  • If you receive a Blue Screen of Death (BSOD) please provide that information in your post.
Note: This process may take awhile to complete. You may also notice the progress bar jumping back and forth. This is normal. Please be patient.

===================================================

Things I would like to see in your next reply. Please be sure to copy and paste any requested log information unless you are asked to attach it. :thumbsup2:
  • Results?

Gary
 
If I do not reply within 24 hours please send me a Personal Message.

"Lord, to whom would we go? You have the words that give eternal life. We believe, and we know you are the Holy One of God."

#7 rtasokan

rtasokan
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:06:48 AM

Posted 16 December 2016 - 12:33 PM

Thanks for the response, Gary. 

On typing c: in cmd prompt the message"The file or directory is corrupted and unreadable" is displayed.

On typing chkdsk /r the following msg is displayed

"The type of the file system is NTFS.

Cannot lock current device.

Windows cannot run disk checking on this volume because it is write protected"



#8 Oh My!

Oh My!

    Adware and Spyware and Malware.....


  • Malware Response Instructor
  • 36,617 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:California
  • Local time:06:18 PM

Posted 16 December 2016 - 01:43 PM

OK,

Complete the steps again but this time type:

chkdsk /r /x


Gary
 
If I do not reply within 24 hours please send me a Personal Message.

"Lord, to whom would we go? You have the words that give eternal life. We believe, and we know you are the Holy One of God."

#9 rtasokan

rtasokan
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:06:48 AM

Posted 16 December 2016 - 01:57 PM

It displays the same message.

On typing c: in cmd prompt the message"The file or directory is corrupted and unreadable" is displayed.

On typing chkdsk /r /x the following msg is displayed

"The type of the file system is NTFS.

Cannot lock current device.

Windows cannot run disk checking on this volume because it is write protected"



#10 Oh My!

Oh My!

    Adware and Spyware and Malware.....


  • Malware Response Instructor
  • 36,617 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:California
  • Local time:06:18 PM

Posted 16 December 2016 - 02:09 PM

Try one more command please. Don't bother trying to get to the c:

 

chkdsk /r /x c:


Gary
 
If I do not reply within 24 hours please send me a Personal Message.

"Lord, to whom would we go? You have the words that give eternal life. We believe, and we know you are the Holy One of God."

#11 rtasokan

rtasokan
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:06:48 AM

Posted 16 December 2016 - 11:39 PM

Hi,

 chkdsk /r /x c: got completed nearly after 10hrs.

It displayed "Windows has made corrections to the file system"

On trying to reboot in normal mode it leads to the same frozen black screen with white blinking cursor



#12 Oh My!

Oh My!

    Adware and Spyware and Malware.....


  • Malware Response Instructor
  • 36,617 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:California
  • Local time:06:18 PM

Posted 17 December 2016 - 07:02 PM

Greetings.

Please do this.

===================================================

Last Known Good Configuration

--------------------
  • Reboot your computer
  • Gently tap the F8 key repeatedly until you are presented with a Windows Advanced Options menu
  • Select Last Known Good Configuration using the arrow keys
  • Press Enter on your keyboard and attempt to boot into Normal Mode
  • If you are unable to boot please complete the next steps
===================================================

Reporting Registry Hive Sizes

--------------------
  • Boot into Recovery Environment Command Prompt
  • Type Notepad and hit Enter
  • Click File, then Open
  • Double click Computer
  • Double click on Local Disk
  • Double click on Windows folder
  • Double click on System32 folder
  • Double click on Config folder
  • Next to Files of type: hit the down arrow and select All Files
  • If you don't see the Size column right click on each of the following files, select Properties, and copy down its size

software
system

  • Double click on the RegBack folder
  • If you don't see the Size column right click on each of the following files, select Properties, and copy down its size

software
system

  • Include all information in your reply
===================================================

Things I would like to see in your next reply. Please be sure to copy and paste any requested log information unless you are asked to attach it. :thumbsup2:
  • Can you boot?
  • Hive size information, if necessary

Gary
 
If I do not reply within 24 hours please send me a Personal Message.

"Lord, to whom would we go? You have the words that give eternal life. We believe, and we know you are the Holy One of God."

#13 rtasokan

rtasokan
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:06:48 AM

Posted 18 December 2016 - 12:33 AM

Hello. F8 key doesn't invoke Windows Advanced Option. I tried hitting it continuously as well as long press. Neither seems to work. 



#14 Oh My!

Oh My!

    Adware and Spyware and Malware.....


  • Malware Response Instructor
  • 36,617 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:California
  • Local time:06:18 PM

Posted 18 December 2016 - 09:21 AM

How are you booting into the Recovery Environment?
Gary
 
If I do not reply within 24 hours please send me a Personal Message.

"Lord, to whom would we go? You have the words that give eternal life. We believe, and we know you are the Holy One of God."

#15 rtasokan

rtasokan
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:06:48 AM

Posted 18 December 2016 - 09:41 AM

Hi!

 I've been following the steps given below as mentioned in the link i referred to in the actual post.

 

  • To enter System Recovery Options by using Windows installation disc:
    • Insert the installation disc.
    • Restart your computer.
    • If prompted, press any key to start Windows from the installation disc. If your computer is not configured to start from a CD or DVD, check your BIOS settings.
    • Click Repair your computer.
    • Select US as the keyboard language settings, and then click Next.
    • Select the operating system you want to repair, and then click Next.
    • Select your user account and click Next.
  • On the System Recovery Options menu you will get the following options:
      • Startup Repair
      • System Restore
      • Windows Complete PC Restore
      • Windows Memory Diagnostic Tool
      • Command Prompt
      Select Command Prompt





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users