Difficulty Reinstalling Windows XP!!!!

Here is the full story nearly a month ago (mid December 2011) I got a virus called XP Security 2012 , I was able to remove XP Security 2012 with help of a youtube video about that virus, the video recommended an Avast scan after. So I ran an Avast Anti Virus boot scan to remove every trace of the virus then after that scan my internet no longer worked and all of my downloaded videos lagged and the sound on the videos sound like they crackled plus the computer took about 10-15 minutes to even boot up. Now I'm using a friend's laptop to seek assistance on tech forums. I bought a Windows XP Recovery disc online thinking a virus may still be on the computer so I'd might as well restore my computer to factory settings but this disc is not working for me either. I would get to the point of the disc where an option says "To repair a Windows XP installation using Recovery Console, Press R." when I press R it says:

Microsoft Windows XP(TM) Recovery Console.
The Recovery Console provides system repair and recovery functionality.
Type EXIT to quit the Recovery Console and restart this computer.
C:\>


I have been reading online it is supposed to say "1: C:\ WINDOWS" on the forth line instead of only "C:\>"

one site recommended to type FIXBOOT and click "y" then type FIXMBR and click "y". I did that now I cannot access anything at all on my computer not my personal account desktop or safemode desktop if I don't load the Recovery Console CD the black screen will say:

NTLDR is missing
Press any key to restart


This has all turned into a big mess I can not get to anything because of NTLDR is missing and can not recover my console because it only says "C:\>" and not "1: C:\ WINDOWS"

(Computer type by the way is a Compaq Presario SR1750NX family bought it in like 2005 or 2006.)


Any help would be appreciated

 

http://kellys-korner-xp.com/win_xp_rec.htm

 

I'm not sure what disc you bought. Recovery Console is usually a free download. Is the disc you bought just Recovery Console or is it a full Windows installation disc? Do you have a link to the page where you got it?

At the C:\> prompt type in type boot.ini and hit <enter>
Post the results. Should look something like this:

Also at the c:\> prompt type dir and hit <enter>
Do you see ntldr listed?

*****
You may have a recovery partition on that computer that would take it to factory "out of box" condition. That means all your files will be erased and XP would be reinstalled. Everything personal would be gone pictures, documents etc. so you may not want to do that yet. If you hit F10 during the Compaq screen it should start loading Recovery files. You do not have to go through with Recovery and can cancel out but it may be informative to see if the option is available in case you need it later because the ntldr error can't be fixed.

 

http://kellys-korner-xp.com/win_xp_rec.htm .This will explain how to use the disk,,but sach2 really needs more info because he seems to be on the right track!!!! He hasn't been wrong yet, that I know of!!!!

 

http://www.amazon.com/Windows-Recovery-Premium-Business-Ultimate/dp/B005A8D2MU

that is the disc I bought

 

After I type "type boot.ini" it says:
The system cannot find the file or directory specified.

And after I type "dir" it says:
The volume in drive C has no label
The volume Serial Number is 0000-0000

Directory of C:\
05/28/80 04:00p -------- 204 ( 6 random symbols)
01/10/12 10:39a -a------ 430 BOOTEX.LOG
01/01/01 12:00a -------- 1572864
01/01/01 12:00a --r-s--- 257 (3 random symbols)
4 file(s) 1573755 bytes
3129344 bytes free

 

That is not an installation disc. It contains the recovery console and maybe some automatic fix program--I can't seem to find instructions. Recovery Console gives you limited access to the drive.
Run the two commands in my last post and tell me what you see.

type boot.ini

dir

 

Something is not right. You don't have any Windows files there.
Try the following commands:

diskpart
The prompt will either change to diskpart> or a new window will open with diskpart> as the prompt. At the diskpart> prompt type in

list volume
tell me what you see.

 

okay I typed "diskpart" the screen says:


The following list shows the existing partitions and unpartitioned space on this computer.

Use the UP and DOWN ARROW keys to select an item in the list.

• 
  To create a partition in the unpartitioned space, press C.

• To delete the selected partition, press D.

That last C: Partition1 part is the only thing that is highlighted and I can not move up to the unknown disks.

 

Again, something is unusual. Exit out of the window you are in.
You were at the C:\> prompt and typed diskpart. It should have just changed the prompt to diskpart> and when you typed list volume it should have given you results like the top section of this screen where it lists volume numbers and there labels and sizes. http://www.geeksdo.com/images/extend-boot-drive-with-diskpart.jpg

I have to do a few things but I will think about what is going on. It looks like you only have one partition so I don't see where else your XP files can be. Unless the virus is hiding them.

Maybe go back to the C:\ prompt and try the command

attrib

Does it give you a list of more than the four files that the dir command gave you?

 

damn, it says "The parameter is not valid. Try /? for help." when I typed "attrib"


man..the computer may be done for, I hope not...

 

Ok, the attrib command may not work correctly in recovery console I seem to remember that error.

Try the command map and see what it gives as output.

****
Basically everything is showing an empty HD. No files at all. At the C: prompt using the dir command you should have a Windows folder and Documents and settings and a few other folders (The dir command is just directory listing which means list all files and folders at the current location). I can't make sense of your diskpart results because the amount of mb don't match up. It seems to be saying the HD is ~132,000mb and yet the C: partition is ~240,000mb.

Do you have a blank CD or DVD and an optical drive that burns discs?

 

"map" command says:

C: FAT16 238473MB \Device\Hardisk4\Partition1
H: \Device\CdRom0



Yea my friends laptop I'm borrowing this week runs on Windows 7 it can burn CD/DVD's. I'd have to buy some blank discs later if that's necessary.

 

there is something wrong with the partition table from what I can see. I'm just sitting down to dinner.

Try diskpart again from the C: prompt and see if you can get that command line output like my screen shot. Your other results were from a graphical interface with a blue background weren't they?

 

Well,

I'm looking over the information and it just seems odd that you have one partition formatted to FAT16 with virtually no files except a chkdsk log from this morning.

Did you do anything involving partitions with your recovery disk previously besides the fixboot and fixmbr?

I do think you will need a couple of blank CDs since the information we are getting does not match what we would expect from recovery console.

Do you know if your computer can boot from a USB flash drive and do you have a USB flash drive that it is empty or can be formatted?

 

I have a USB flash drive but the desktop computer isn't reading it right now though, it has some school info on it anyway, I only get two screens "NTLDR is missing" screen and I can see the Recover Console screen when I put the disc in.

alright I'll probably by some CDs in a day or two

somebody on another forum recommends me use this once I get some CDs:
Drive Fitness

 

The drive fitness test would be ok to run. The problem I see is that you have absolutely no Windows XP files showing in your C: drive. Not only is ntldr missing but everything is missing.

The map command has those [unknown devices] which I hope equate to the missing files/partition.

Plus all the sizes don't match up in your posts 6 and 9. One says c: is 3mb and the other says it is 240gb. I believe that PC came with a 200gb HD.

I think we have to take a look at the drive using a partition manager to see what they say about the HD layout and the partitions. Both Partition Wizard and TestDisk will be able to show what currently exists on the drive and search for the lost partiiton containing the Xp installation. Hopefully it is just a quick searcha nd then rewriting the partition table.

These would be the two files I would want to write to two separate CDs.
PW bootable CD link is on this page: http://www.partitionwizard.com/partition-wizard-bootable-cd.html

and Parted Magic which includes Testdisk and Gparted partitioning programs: http://partedmagic.com/doku.php?id=downloads

The less you write to the drive until you get one of those discs the better if the problem involves recovering a missing partition.

 

Okay I burned the Parted Magic disc

not sure how to burn the pw bootable disc. it only saves a .exe file that installs a program on this laptop.

 

The PW bootable disc is the last download on this page: http://www.partitionwizard.com/download.html

You can put the Parted Magic disc in your computer and try to boot from it. Go with the default choice of Run from RAM so just hit <enter>.

When you get to the Desktop double click the Partition Editor icon and let it scan your HD.

In the lower pane it should list your partitions. Give that information and we'll compare it to the output from the other programs.

 

alright loaded the parted magic disc got to the desktop looking screen and clicked Partition Editor a "/dev/sda - GParted" box came up.

Partition:
/dev/sda1

File System:
fat16

Mount Point
/media/sda1

Size:
232.88 GiB

Used:
232.88 GiB

Unused
2.98 MiB boot

Flags:

 

It seems to me you should have an NTFS or FAT32 partition for XP. So let's try TestDisk to see if it sees anything other than the single FAT16 partition.

Click on the Terminal icon at the bottom of the screen (looks like a monitor/tv screen). Type in testdisk and hit <enter>.

Then in the testdisk window:
Create is highlighted so hit <enter>
Your 200+gb HD (sda)should be highlighted so hit <enter> to Proceed.
Intel is highlighted so hit <enter>
Analyse is highlighted so hit <enter>
Quick Search is highlighted so hit <enter>

See if it finds any partitions besides the single 238gb one.

If still only the one partition then hit <enter> to continue and then<enter> again for deeper search. Deeper search will take about 20 minutes or more.

 

Partition
>* FAT12

Start
0 1 1

End
1 254 63

Size in sectors
32067 [NO NAME]



this is the results after the first quick search should I continue to another one?

 

Yes, hit <enter> to continue and then deeper search will be highlighted so hit <enter> again.

It should come up with another partition or two.
When it is done the deeper search highlight that Fat 12/16 partition and hit P to list files. (I'm curious what it says is taking up all the space because in Windows you only had four very small files).
Then q will take you back to the list of partitions.

Did the deeper search find any partitions that are NTFS? Does highlighting the NTFS partition and hitting p give you a list of files that includes ntdlr and WINDOWS?

 

It has two options now after the second search:

Partition
>D FAT12
D HPFS - NTFS

Start
0 1 1
0 1 1 30400

End
1 254 63
254 63

Size in sectors
32067 [NO NAME]
488392002

 

Try highlighting the HPFS- NTFS partition using the arrow keys and the hit p and see what the list of files looks like.

 

okay a lot of stuff came up after I pressed "p"


dr-xr-xr-x 0 0 0 9-Jan-2012 20:42 .
dr-xr-xr-x 0 0 0 9-Jan-2012 20:42 ..
-r--r--r-- 0 0 0 1-Jan-2005 17:51 CONFIG.SYS
-r--r--r-- 0 0 75792 11-Apr-2008 13:03 install.res.2052.dll
dr-xr-xr-x 0 0 0 28-Apr-2011 14:35 92cb3b476a9bebc782b656
dr-xr-xr-x 0 0 0 4-Oct-2009 12:25 9e0bf90fb308242be9658d11944b75
-r--r--r-- 0 0 0 1-Jan-2005 17:51 AUTOEXEC.BAT
dr-xr-xr-x 0 0 0 21-Aug-2009 21:20 BandLink
-r--r--r-- 0 0 208 25-Dec-2011 03:40 boot.ini
dr-xr-xr-x 0 0 0 4-Jan-2010 08:37 CFdownloads
dr-xr-xr-x 0 0 0 25-Dec-2011 00:14 Config.Msi
dr-xr-xr-x 0 0 0 24-Dec-2011 19:16 Documents and Settings
dr-xr-xr-x 0 0 0 3-Dec-2011 05:50 downloads
-r--r--r-- 0 0 81 8-Sep-2010 11:22 DVDPATH.TXT
-r--r--r-- 0 0 3820 11-Apr-2008 15:07 eula.1028.txt
-r--r--r-- 0 0 15428 11-Apr-2008 15:07 eula.1031.txt
-r--r--r-- 0 0 10058 11-Apr-2008 15:07 eula.1033.txt
-r--r--r-- 0 0 12246 11-Apr-2008 15:07 eula.1036.txt
-r--r--r-- 0 0 13912 11-Apr-2008 15:07 eula.1040.txt
-r--r--r-- 0 0 5868 11-Apr-2008 15:07 eula.1041.txt
-r--r--r-- 0 0 5970 11-Apr-2008 15:07 eula.1042.txt
-r--r--r-- 0 0 10134 11-Apr-2008 15:07 eula.1049.txt
-r--r--r-- 0 0 3814 11-Apr-2008 15:07 eula.2052.txt
-r--r--r-- 0 0 12936 11-Apr-2008 15:07 eula.3082.txt
-r--r--r-- 0 0 96272 11-Apr-2008 13:03 install.res.3082.dll
-r--r--r-- 0 0 0 1-Jan-2005 17:51 IO.SYS
-r--r--r-- 0 0 1099 13-Feb-2011 01:30 IPH.PH
-r--r--r-- 0 0 7325006 7-Jul-2010 15:14 ituneslib.itl
-r--r--r-- 0 0 0 1-Jan-2005 17:51 MSDOS.SYS
dr-xr-xr-x 0 0 0 16-Feb-2010 05:06 MSOCache
dr-xr-xr-x 0 0 0 18-Dec-2009 20:17 MyCaptures
dr-xr-xr-x 0 0 0 8-Oct-2011 18:23 Netgear
-r--r--r-- 0 0 47564 10-Aug-2004 12:00 NTDETECT.COM
-r--r--r-- 0 0 250048 21-Aug-2009 17:17 ntldr
-r--r--r-- 0 0 1509949440 8-Jan-2012 13:56 pagefile.sys
-r--r--r-- 0 0 0 8-Jan-2012 13:56 pagefile.sys
dr-xr-xr-x 0 0 0 25-Dec-2011 00:03 Program Files
dr-xr-xr-x 0 0 0 23-Dec-2011 08:57 RECYCLER
-r--r--r-- 0 0 4514 1-Jan-2005 06:40 resetlog.txt
dr-xr-xr-x 0 0 0 9-Apr-2010 02:25 Riot Games
-r--r--r-- 0 0 359 27-Dec-2011 07:27 rkill.log
dr-xr-xr-x 0 0 0 21-Aug-2009 17:56 SoftPaq
dr-xr-xr-x 0 0 0 22-Dec-2011 07:39 System Volume Information
-r--r--r-- 0 0 91280 18-Oct-2011 04:27 TDSSKiller.2.6.10.0_17.10.2011_23.26.53_log.txt
-r--r--r-- 0 0 5686 11-Apr-2008 15:07 vcredist.bmp
-r--r--r-- 0 0 3797292 11-Apr-2008 15:09 VC_RED.cab
-r--r--r-- 0 0 233472 11-Apr-2008 15:11 VC_RED.MSI
dr-xr-xr-x 0 0 0 8-Jan-2012 14:00 WINDOWS
-r--r--r-- 0 0 1110 11-Apr-2008 15:07 globdata.ini
-r--r--r-- 0 0 562688 11-Apr-2008 13:03 install.exe
-r--r--r-- 0 0 843 11-Apr-2008 15:07 install.ini
-r--r--r-- 0 0 76304 11-Apr-2008 13:03 install.res.1028.dll
-r--r--r-- 0 0 96272 11-Apr-2008 13:03 install.res.1031.dll
-r--r--r-- 0 0 91152 11-Apr-2008 13:03 install.res.1033.dll
-r--r--r-- 0 0 97296 11-Apr-2008 13:03 install.res.1036.dll
-r--r--r-- 0 0 95248 11-Apr-2008 13:03 install.res.1040.dll
-r--r--r-- 0 0 81424 11-Apr-2008 13:03 install.res.1041.dll
-r--r--r-- 0 0 79888 11-Apr-2008 13:03 install.res.1042.dll
-r--r--r-- 0 0 93200 11-Apr-2008 15:09 install.res.1049.dll

 

That is what we are looking for--all those Windows files. (It looks like something has gone wrong with your partition table but it may be recoverable since the file list still shows.)

Now, testdisk shows that partition as deleted in your post #24 so we have to figure out how to recover it and if the files are still viable.

It is a bit late for me to experiment with testdisk tonight and I've never had to recover an overwritten partition. If it were me, I would burn that Partition Wizard ISO (direct link: http://www.partitionwizard.com/download/pwhe7.iso) to a CD and run it. It is a bit more automated than testdisk. Run the Full Disk and Full scan options and it should show the NTFS partition in the list as in picture #4 on this page. Then double click that partition and it should open an explorer type window that will show the same list of files. If it does then we may be able to use that program to try to recover the partition which will be more straight forward than testdisk.

Let me know if you run PW otherwise I will look at testdisk tomorrow to see if I can find the exact sequence to try to recover the partition.

 

Hi,

I so rarely use testdisk that I don't want to mess you up. One thing about the program is it appears as if you are making permanent changes as you move around it but nothing is actually changed until you use w to write the changes. So you can always hit q to quit and go back to the previous page. This is good as we can experiment without any damage as long as we don't select to write the changes.

My hesitation is that in your post 24 it looks like two partitions are marked as D for deleted. I don't know if there are two partitions that are deleted and replaced with one large one or if there are only two partitions allotted the same space and overlapping each other (bad).

I need a better look at the testdisk screen after the deeper search. Existing partitions are green and deleted partitions are white. How many green and how many white show in the list? How many in total?
Can you give a more accurate typing of the lines describing the partition start and end information from that screen. If you choose advanced reply on MajorGeeks you should have an icon for code (#) which will preserve your formatting for that part of your reply.

We are going to recover attempt to recover that NTFS file system, I just want to make sure I have all the information on the list of partitions to see if we want to save all existing partitions or discard one because it overlaps.

Code:

* HTPFS-NTFS       0  1  1      11  254  63       192747
D FAT12            0  1  1      11  254  63       234565

 

partition wizard did not find anything else only one option that was already there before the scan.

File System:
FAT12

Label:

Starting LBA:
63

Ending LBA:
488392064

Used Size
7.13 MB

Size:
10.13 MB

Status:
Existing



I will try the "testdisk" again on the Parted Magic disc

 

Please do. I just want to compare the two results. That Partition Wizard info does not look correct as it is only showing a tiny partition. With a starting LBA of 63 and an ending LBA of 488392064 it should be 100gb or more in size.

Testdisk seems to see the partition correctly. See if by using the code option in your reply you can get the partition info for each entry to show on one line like in my example.

Once we know that the partitions don't overlap changing the status and restoring the original file system is fairly simple.

****
Parted Magic disc has a Take Screenshot application somewhere in the Start menu but I can't give step by step directions off the top of my head.

 

I found the screen shot option this is how it looks after "search" and "deeper search":
http://i39.tinypic.com/2najgk9.png
it has a "D" in front of both option not sure if that is a bad thing

When I click left or right on the arrow pad the "D" changes to a * or "P". When it has "P" in front it turns green:
http://i41.tinypic.com/2rq0jg0.png

also with the * in front it turns green:
http://i44.tinypic.com/2vcyzqg.png

and these two screen shots are the list that comes up when i press "p" on "HPFS - NTFS":
http://i40.tinypic.com/icmd7d.png
http://i39.tinypic.com/207q5wg.png

 

Thanks for the screenshots.

It sounds like you have figured out testdisk on your own. The arrow keys are used to toggle between the different preceding letters.

The two partitions do overlap so you want to leave the FAT12 with the "D" in front (so no change on that one).
Use the arrow keys to change the HPFS-NTFS one to the * to make it bootable.
So your screen should look just like your 3rd screenshot: http://i44.tinypic.com/2vcyzqg.png

Then hit <enter> to continue.
Then use the arrow keys to select Write and hit <enter>
Type Y to confirm the write.
<enter> to OK and go to main screen.
q to quit
q again to quit.

That should make the Windows files on the HD visible again and the HD bootable . So try to boot with no disc in the PC and see if Windows boots or if you get an error.

 

it looks like this after I hit enter on "write" and press "y"
http://i43.tinypic.com/15ysrpg.png

Just hit enter again to select "Backup BS" like it says at the bottom? or go to "Rebuild BS" and hit enter?

 

Yes go with the backup boot sector as it says that copy is OK.

We can always rebuild the boot sector if necessary later.

Edit: I think either will work. Perhaps Rebuild would be just as easy and we know the backup is available if we need it. Yes,, I would go with rebuild and get it done.

 

It did not work with "Backup BS"

I rebooted without the disc and it said "Disk read error has occurred" or something, when I saw that I rebooted again and went to the Setup BIOS and changed the CD drive from the boot device priority to the HDD to priority. still did not work.

Maybe I should try "Rebuild BS"

 

Yes do try rebuildbs.

You can do it from Advanced instead of Analyse.
So start testdisk
Create
Proceed
Intel
Advanced
You only have one partition so it should be highlighted and Boot should be selected at the bottom so <enter> to select Boot.
And then select Rebuild BS on the next screen.
Then choose List at the bottom and make sure you can see your files.
If files are listed hit Write.

 

okay the files are listed but I see no option to write.
http://i40.tinypic.com/f1fotw.png

 

Sorry, I didn't see the Write option on my PC either but was going from the instructions at the very bottom of this page: http://www.cgsecurity.org/wiki/Data_Recovery_Examples

Try going back through Analyse but only the quick search. It should show the one HPFS-NTFS partition. Enter to Continue but instead of deeper search, choose to Write and see if it gives you the boot sector warning and allows the rebuild. Do the rebuild.

I would then quit testdisk using "q" repeatedly to close the program.

Then still in the Terminal window restart testdisk. Do the analyse and quick search again choose to Write and see if you now get no warnings. If no warnings you can go ahead and Write or just exit. Then try to boot from the HD.

 

Meh...still "A disk read error occurred" after choosing "write"

computers give me headaches

 

I'd say go ahead and rewrite the MBR since yours is not proprietary, I believe that includes a new boot sector.
So testdisk
Create
Proceed
Intel
MBR Code
Y to agree.

One thing to try while running the Parted Magic disc is click on the Computer icon and then on the HD icon in that window and see if you see your files. Try to double click the file resetlog.txt and see if it opens in an editor. Then close the editor as we just want to see if the file is truly available.

If testdisk and the rewriting the MBR does not work then start from your Recovery CD and see if it now opens at the C:\WINDOWS prompt. And try a dir command to see if it lists your files. Seeing your files would verify that the partition changes took effect but there is a problem with the HD being bootable.

 

Just booted parted magic and it would be the File Manager icon and then your C: drive should be available from the left pane.

 

do you mean this?
http://i44.tinypic.com/11may4w.png

I get a warning when I try to click it

 

There i something very wrong with that HD. I looked around for the "disk read error occurred" error and there was no definitive answer.

Try the rewriting the mbr in testdisk and then restart Parted Magic and try the File Manager again.

 

okay did the mbr in test disk again and rebooted now I was able to do the file manager thing with no warning message I opened resetlog.txt and this is the type of stuff it has:
http://i42.tinypic.com/10ne536.png
http://i39.tinypic.com/2nt9w5x.png

 

Ok, so now Linux can read the HD and the files. Have you tried to boot from the HD after fixing MBR? If not try that and see if you still get the disk read error.

 

it's still Disk read error occurred instead of NTLDR is missing.

 

Try to boot from your recovery CD and see if recovery console will start. I'd like to see if it starts at C: or C:\Windows.

Whichever it starts at try to run chkdsk C: /r to see if it will run and note if you get any errors.

 

okay I was able to run "chkdsk C: /r" even though it still says only "C:/>" on the recovery disc.
at first I didn't know there was a space between "C:" and "/r" and I put:
C:/>chkdsk C:/r
The parameter is not valid. Try /? for help.

it gave me that error at first

then I tried:
C:/>chkdsk C: /r
It was a long scan took at least 4+ hours.

I tried to boot from HDD after but it still said Disk read error occurred

probably still something else I need to do.

 

The "disk read error" seems to be very bad with very few solutions. That the disk now shows your files in Parted Magic (Linux) makes it even more troubling that Windows won't read the disk.

Still in recovery console at the C:\> prompt, does typing dir and then hitting <enter> give you the familiar list of files you've listed before, or an error? (I don't need any detailed list of files just whether it lists the 20+ files currently on your C: drive or an error)

I'll look again tomorrow but the first 10 threads I read about the disc read error didn't have a real solution.

Edit: I don't think dir is going to list any files. So do one more thing and boot to the Partition Wizard CD and see if it now sees the Partition as NTFS and if you right-click C: drive and select Explore, if it lists the files you have listed in the past including boot.ini and resetlog.txt.